Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa
File:                     8e21170e-1466-3099-9701-481f57135285.roa (raw, json)
Hash identifier:          A2Ax22gvulCwsvQHkPEuEK4IOZyvQlHNRbOA23cqXxk=
Subject key identifier:   C8:0A:EB:40:4E:22:E1:0A:4C:04:A8:B4:90:8E:C7:50:4A:87:1F:24
Certificate issuer:       /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
Certificate serial:       010D0C9F4328584558C843E46E6EDF4635F61280
Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     81
IP address blocks:        2620:7:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:43:e4:6e:6e:df:46:35:f6:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=d37bf45b-5beb-4461-b001-c9e72bd65dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:53:7e:91:f1:68:82:37:87:5c:8b:d2:eb:
                    08:43:01:52:cb:e6:41:b0:ed:94:24:32:2a:d7:45:
                    5a:32:82:06:de:9f:1a:c1:a9:64:f7:37:71:cc:1e:
                    3f:d8:c6:7c:1f:f1:2e:fb:ec:ed:dd:f2:c1:2a:af:
                    47:db:d3:21:fa:41:f5:37:02:09:8b:fc:37:e8:ac:
                    a8:44:71:1a:09:eb:36:3a:26:03:c5:21:d2:3f:ff:
                    0e:d8:3a:0f:fc:ae:95:51:81:fb:96:95:2e:4c:59:
                    78:04:bc:42:40:6c:18:f3:c4:d5:0e:99:22:bd:2e:
                    85:60:55:6e:c4:82:89:ed:a5:c8:c7:9e:dd:7c:49:
                    8d:e0:e7:fd:b3:43:b8:4b:6a:1f:98:41:fb:93:22:
                    f1:10:bf:2b:8a:11:27:92:c2:64:4a:92:1b:fb:cb:
                    48:f0:81:c4:97:af:f4:72:04:8e:6f:75:7f:35:4e:
                    1e:10:e1:23:7f:eb:21:87:84:52:95:09:8d:fd:95:
                    c6:26:4e:c2:2b:59:db:a8:17:92:40:1b:11:5e:52:
                    69:ae:b2:03:16:a5:e9:f2:6c:20:1a:2e:3d:f8:f0:
                    32:9b:b6:5c:34:e9:e7:88:ba:6d:aa:21:05:5c:7a:
                    66:db:6f:4d:e5:b1:48:f7:e8:dd:47:b5:35:f3:13:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0A:EB:40:4E:22:E1:0A:4C:04:A8:B4:90:8E:C7:50:4A:87:1F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/8e21170e-1466-3099-9701-481f57135285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0a:d7:40:10:3e:1a:82:da:1c:85:5b:08:77:db:4d:27:57:
         44:a3:61:cc:0a:53:2c:9a:e8:78:7e:79:05:74:e7:e6:1f:35:
         25:ac:1a:bb:64:9c:81:04:3c:c7:d7:01:bd:30:aa:75:ef:13:
         b4:de:cf:c9:e2:0e:2a:e5:f7:e3:17:9b:51:1d:77:3c:b7:15:
         56:70:bf:6f:a4:52:e7:bf:95:83:2c:0f:87:40:0a:d0:ff:f4:
         b5:8b:e2:3c:83:23:f5:67:ae:c5:99:68:61:9f:91:7a:11:42:
         07:be:b0:06:9d:ba:48:a7:d9:2d:30:0c:a0:ab:ee:66:f2:2d:
         20:21:63:7f:62:54:09:ab:51:8d:44:d2:8f:ae:54:40:27:86:
         74:1e:a8:fb:e3:e9:7e:be:6b:12:a6:74:c6:c8:7e:f5:9f:cf:
         46:fd:11:ac:07:52:e7:97:ea:49:35:e6:cd:de:55:d0:e3:3d:
         bd:ea:e6:19:93:96:27:7e:12:bc:87:30:35:6c:2e:52:72:09:
         51:db:79:3a:a5:e3:95:63:c8:97:9e:e8:70:04:b6:38:90:37:
         f5:d9:83:d8:1d:6a:6e:0e:9c:a9:97:92:7c:be:bd:65:99:02:
         c0:85:73:21:f7:1f:74:4d:f5:35:78:28:4d:79:5e:51:28:2d:
         f9:9b:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:44 2024 by rpki-client on console-fra.rpki-client.org