Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa
File:                     7475f7af-35bc-315c-95d7-5af35bb16110.roa (raw, json)
Hash identifier:          84ZyyNdJJWZ83sX7HofTH0M4mbDoS9b/w6Z9Eftto7g=
Subject key identifier:   95:17:1E:2B:79:6B:62:47:AD:F3:CE:9B:7D:E8:A2:01:9B:69:6A:AD
Certificate issuer:       /CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
Certificate serial:       010D0C9F43285844E66FF185EBEB5BF05991EE00
Authority key identifier: 77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     0
IP address blocks:        2001:504:27::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:f1:85:eb:eb:5b:f0:59:91:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=31ae3077-f8f5-4ea8-a6af-4e9bac0213c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:e6:33:f4:93:60:1a:bb:28:da:f1:0a:79:
                    0c:94:20:0e:5c:32:9e:55:9c:13:74:56:de:27:cc:
                    1f:0d:a3:89:56:9b:44:e9:93:7d:fc:af:fe:56:80:
                    1c:63:80:fc:02:9f:7a:cd:fc:1d:61:b1:42:16:92:
                    3e:5c:a6:61:a2:bb:34:84:60:e8:de:4d:42:1f:5d:
                    11:1b:04:c9:34:37:fb:b0:55:f6:87:8b:c0:76:43:
                    0c:16:19:2c:62:05:8b:06:bc:6c:33:f2:9b:ae:65:
                    3b:f9:29:19:62:81:bf:7d:4d:5c:d9:25:53:bf:7e:
                    16:b1:39:e3:d9:cb:f2:9a:cc:a4:1a:b5:57:1a:d7:
                    64:35:b4:18:70:14:f7:51:68:96:4f:04:1b:20:b1:
                    ea:be:d6:ae:96:5f:94:5e:88:58:f1:fa:63:0c:fb:
                    34:af:33:4c:8c:2b:86:19:fe:70:63:9c:43:c0:ed:
                    e3:8f:7d:8e:72:c3:ae:54:00:0c:da:dc:5d:23:8d:
                    b3:74:eb:02:dd:6c:b5:de:94:bf:d9:c8:0b:42:79:
                    61:65:d8:86:a9:a5:63:44:95:e2:a4:40:93:4d:e0:
                    67:17:9c:a8:bf:a3:52:ed:0e:4e:a1:19:c4:dd:7f:
                    ec:af:4f:17:06:22:f9:64:8c:8e:b9:c4:10:ee:31:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:17:1E:2B:79:6B:62:47:AD:F3:CE:9B:7D:E8:A2:01:9B:69:6A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/7475f7af-35bc-315c-95d7-5af35bb16110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl

            X509v3 Authority Key Identifier:
                keyid:77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:7e:2b:96:37:61:70:8f:4e:94:8e:57:f3:57:35:cb:9a:
         a3:3b:12:6f:51:b7:14:88:cd:23:17:d4:17:42:6b:fe:97:5a:
         24:ca:3c:9a:7c:12:ab:9f:fe:cf:b1:da:a7:3a:c3:33:1e:d4:
         6f:74:d5:f6:9b:ad:67:10:d0:f7:e2:83:f9:f9:ec:36:f3:94:
         ca:5a:b8:af:0c:ec:c6:60:74:70:6a:a8:c3:32:76:32:0f:1e:
         d3:5e:1a:f7:b4:23:4c:88:0d:d5:f4:e6:54:af:9e:9f:b1:f3:
         51:27:1e:c1:58:54:5a:e1:0b:42:68:d7:6d:b3:8f:af:36:79:
         ae:37:23:1d:f2:66:10:82:f8:da:6d:1b:1a:bc:f1:f4:5c:dd:
         71:8b:f5:fd:54:c8:fb:8d:7b:30:44:2b:9e:d2:b2:b8:b2:70:
         07:8b:dd:9e:51:37:d5:dd:ba:4e:99:f6:d5:7f:cb:57:5a:76:
         31:25:e3:b1:30:13:5e:9d:ba:de:31:51:78:87:e2:d7:ca:2f:
         8b:fa:58:0b:7f:93:50:5f:f4:87:65:89:bf:c6:be:a0:f0:a6:
         1d:8c:04:2a:71:a4:95:90:b5:89:bf:36:84:ff:83:02:26:ca:
         2a:87:6d:9d:04:d2:8d:80:3c:e3:08:d6:52:7c:0b:b5:6f:24:
         36:b2:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:08 2024 by rpki-client on console-fra.rpki-client.org