Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f9cd901a-fdf7-315d-ac4c-8818d59bb307.roa
File:                     f9cd901a-fdf7-315d-ac4c-8818d59bb307.roa (raw, json)
Hash identifier:          pN8IgokmshwUa6id8x08503J/1SLRJnavVIe+4by4j4=
Subject key identifier:   F7:D7:BD:A7:AA:73:BC:59:2C:5B:22:E0:E0:22:8A:D9:17:7D:98:C9
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE5E1D0618E3BC5C46B00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f9cd901a-fdf7-315d-ac4c-8818d59bb307.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        2001:4c8:1012::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e5:e1:d0:61:8e:3b:c5:c4:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=b4c7f27f-0995-4818-988b-5c2ef197fafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:d6:a1:65:92:88:48:54:63:10:ad:26:86:
                    6e:0b:11:c6:41:f7:a0:41:7f:66:50:bf:66:04:78:
                    dd:30:e1:68:2a:e3:12:f0:0a:a5:23:a8:42:9d:38:
                    66:cf:95:0a:d3:ad:85:a7:64:8e:3b:41:4f:6d:5c:
                    9d:e3:93:c6:6d:84:b8:10:8a:6f:ed:b2:7b:d3:fc:
                    89:20:e5:a7:4d:70:a5:65:05:96:17:81:6e:d0:ab:
                    7f:d3:83:74:51:ce:4d:e9:f3:0b:4f:cc:f0:d6:6e:
                    8b:ee:07:86:ca:28:62:33:8e:6b:4c:49:e4:86:87:
                    ea:96:ef:ff:98:f6:4c:1f:fe:40:34:2f:5c:52:12:
                    92:ce:b9:74:38:8f:ce:1b:07:14:fc:ad:a8:6c:d6:
                    c0:70:d3:88:c4:5d:f1:b8:91:c5:c7:c3:5b:a0:e7:
                    57:ef:80:74:86:dc:a2:a4:43:d7:66:c8:42:eb:38:
                    d2:66:05:d8:f0:27:17:92:32:ef:9c:d4:99:6c:0d:
                    37:2e:b5:cf:36:0a:d9:45:b2:a4:8f:41:57:5d:bf:
                    d8:93:e6:a8:a4:5d:a5:07:4f:42:9d:27:3b:15:db:
                    b8:fa:d9:89:7d:22:57:49:90:24:1e:03:cb:5b:0c:
                    52:09:5f:51:99:69:3c:31:31:6a:5a:0b:e1:0c:46:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D7:BD:A7:AA:73:BC:59:2C:5B:22:E0:E0:22:8A:D9:17:7D:98:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f9cd901a-fdf7-315d-ac4c-8818d59bb307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:ca:dc:b6:56:b6:ca:75:e4:f8:0e:90:45:0b:2e:f0:f2:
         f2:c5:a4:64:0a:70:05:62:f7:33:00:9f:6c:d1:d6:51:44:71:
         32:36:8a:2d:4f:b6:3e:b1:eb:1d:7d:a2:e2:2b:ed:9d:2d:85:
         89:ac:d6:14:15:fc:6e:2c:13:e9:43:54:8d:be:2a:ef:ba:ff:
         ee:e7:1d:e9:a1:fc:ca:43:eb:6c:89:36:d9:84:cb:4a:b9:4d:
         a8:00:fb:7a:cf:f7:e3:f5:c7:64:9d:b4:da:09:cf:ef:fd:d1:
         4d:ce:1d:0a:e4:cf:1a:58:e2:4c:91:86:72:50:17:b2:2b:59:
         6a:ba:9b:84:45:e5:3b:16:6e:12:46:6d:a8:e6:cc:a3:34:16:
         c3:dd:b6:e1:35:77:f7:27:b8:df:68:74:e2:c8:6a:aa:57:5a:
         ca:75:ef:72:a4:54:4e:73:42:ef:8a:ba:5f:b3:2d:f5:36:ba:
         fc:b2:b2:e9:57:91:e1:29:40:82:63:11:cd:c7:e0:ba:3f:0a:
         95:60:aa:79:bf:9d:ed:c4:a9:2d:cb:97:09:1b:0e:77:00:9e:
         df:98:69:04:14:34:d4:53:40:bb:78:c0:a7:92:5e:63:89:cb:
         73:af:39:44:68:3d:f8:95:52:6b:99:27:b6:2a:0f:e1:fc:a2:
         02:03:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org