Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa
File:                     5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa (raw, json)
Hash identifier:          AU8vInh2fERaJ1aS5c/4QesEVMN492pE+KCJoe3wlf8=
Subject key identifier:   72:32:26:69:46:15:45:B9:72:2F:B8:75:7F:3E:EB:D3:C9:6B:DB:13
Certificate issuer:       /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial:       010D0C9F4328584558C843CB87CE3A06A21EB000
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     393875
IP address blocks:        2620:7:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:43:cb:87:ce:3a:06:a2:1e:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=d75abd2c-a7bc-4757-aefb-1c8e2067d919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:ff:03:08:14:72:ba:bc:03:d5:3a:5e:8c:
                    01:20:f5:28:d3:ec:6a:64:b9:4b:00:f7:0c:e5:38:
                    21:53:e5:db:d2:48:26:a7:a3:46:fa:17:d1:f4:10:
                    cb:0d:ee:b4:9c:7e:b7:0b:35:be:14:e2:03:01:11:
                    d8:25:e4:e5:6c:b8:ad:76:c7:bc:7a:9a:b5:f3:00:
                    ca:c9:28:5a:41:00:a7:a9:ed:2c:f8:f2:ed:8d:90:
                    a0:13:2f:71:f6:7e:68:99:37:a5:c0:53:cd:8a:f4:
                    db:07:7c:03:e3:70:c8:22:3c:66:f2:78:f5:e6:0a:
                    6f:a2:de:19:b3:78:2f:41:cd:40:10:c5:50:62:51:
                    bf:0d:1b:a3:9c:b5:8e:2f:58:2a:4e:ab:87:8c:22:
                    6d:de:b7:fa:ed:11:19:3d:27:04:78:0d:8b:18:18:
                    76:45:fb:34:41:f8:02:bc:46:41:71:6c:dd:45:53:
                    f4:00:5b:6f:74:7a:aa:ca:4b:62:cb:9c:50:17:db:
                    a1:70:09:68:ec:ef:c0:1c:63:9f:89:bf:db:16:e7:
                    7a:56:27:a0:a2:78:fa:2c:f5:41:05:b2:08:13:c5:
                    6a:f0:91:5f:95:19:01:ad:c9:a0:a5:ff:9a:b7:b0:
                    47:32:95:71:34:27:51:d5:dd:c9:6a:b8:54:30:4c:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:26:69:46:15:45:B9:72:2F:B8:75:7F:3E:EB:D3:C9:6B:DB:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:ac:38:ae:f0:46:8f:fc:9d:9b:6b:85:0f:43:5e:26:fd:
         e8:05:5d:a6:4c:19:2f:22:ec:05:1a:77:a4:32:9f:35:f6:86:
         64:1e:66:b6:ae:c8:1d:f8:d8:12:3f:13:f1:ed:52:06:6d:b6:
         78:ab:36:9a:ac:91:c6:5c:5b:07:80:13:58:bb:38:c7:2a:bb:
         b0:25:f4:60:c6:ec:00:15:37:2b:89:db:5a:7f:3e:63:67:27:
         c5:07:5e:28:8e:b3:9c:4c:83:92:14:da:c5:1a:b5:31:69:23:
         25:d5:3b:f1:ad:96:7d:ba:11:58:45:5f:c3:97:35:4a:86:34:
         8d:ea:fe:52:a1:95:62:ef:da:96:0d:22:2e:97:0c:b0:62:42:
         9b:26:fa:a3:f3:dc:e2:7b:46:5e:2d:28:09:91:1d:f8:eb:8a:
         cd:a4:99:3e:5b:11:03:b3:bb:ab:e3:3b:6d:33:2a:1a:91:4a:
         9a:59:6d:37:ff:d2:dd:6a:e9:e7:bc:8e:23:bf:60:f8:1d:02:
         5c:37:ff:21:60:f4:87:7d:68:7d:d2:10:62:0f:60:5d:2a:aa:
         99:18:40:d3:a8:1e:de:5f:ee:ec:68:6f:21:15:16:f4:3e:8a:
         a5:7d:f5:79:18:f3:2a:8c:c8:f3:bf:43:7f:9e:58:20:71:1b:
         34:72:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:18:37 2024 by rpki-client on console-ams.rpki-client.org