Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa
File:                     9505f0a3-0703-386f-b4ed-699788414aa7.roa (raw, json)
Hash identifier:          raoh7dXrS4ql+Qr5aVAoUoCJHOAKHEBgH6b5NOOqOUs=
Subject key identifier:   47:BA:84:B4:BE:E0:CC:3A:CF:92:30:FD:30:A9:1B:90:36:9E:22:2E
Certificate issuer:       /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial:       010D0C9F43285845A6F3645856DEB888DAD6B780
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     13737
IP address blocks:        2620:11f:7009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:64:58:56:de:b8:88:da:d6:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=d4598b91-5bf7-418b-ab5e-d1c29cf9e8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:8f:23:0e:e6:98:06:cc:90:63:b5:b3:2c:
                    5b:18:09:b4:61:fd:a5:b5:bb:de:47:a2:4e:79:90:
                    2d:7a:93:06:22:d8:d4:94:fd:71:5e:cb:ae:96:94:
                    e1:ac:88:ac:42:09:c0:fe:ab:14:e5:bc:26:2e:b8:
                    2b:1b:3d:8c:25:fd:b3:c0:6d:cb:7b:08:28:6f:2d:
                    3f:bb:dc:2e:9b:a6:77:55:5c:61:c2:2e:26:14:a4:
                    93:9c:72:21:3f:de:97:f0:68:f2:2b:b6:cf:c1:a4:
                    10:da:1d:46:bd:fe:af:e2:45:ce:6b:a2:50:56:db:
                    31:7f:4a:44:5e:9a:79:02:45:ce:d4:b2:4e:b4:9f:
                    2e:ee:f6:97:b9:f8:d6:02:85:73:42:95:e5:81:19:
                    3d:6e:e7:03:d0:2d:e0:f3:e0:0b:6f:35:ea:5e:b8:
                    c4:9a:91:b4:e1:74:a8:35:45:de:53:77:91:df:16:
                    c9:b2:e5:3e:a9:30:1a:b7:2e:36:4e:53:88:77:b8:
                    87:72:99:82:bd:76:4c:61:0d:2f:71:99:87:75:ed:
                    76:1b:98:4c:1f:07:7c:d4:66:a5:93:57:a3:cc:9f:
                    72:79:23:65:81:5d:87:ff:e3:cb:6a:56:f4:6d:4e:
                    b3:59:60:54:cc:82:b7:26:be:6d:43:4a:27:02:d0:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BA:84:B4:BE:E0:CC:3A:CF:92:30:FD:30:A9:1B:90:36:9E:22:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl

            X509v3 Authority Key Identifier:
                keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:f8:d5:5b:2b:8a:07:f2:f1:fe:6e:50:46:73:70:97:d2:
         4a:b1:24:d3:33:f2:4d:db:9e:65:ec:ce:3b:f9:ff:2c:5a:66:
         8a:75:10:e4:5e:97:6b:ec:a8:87:42:69:3a:1a:7e:5d:86:7b:
         95:3d:65:78:44:e8:09:20:94:68:fb:6a:01:01:16:ee:99:14:
         63:7e:9c:22:9e:19:7d:3e:27:fa:74:8f:ae:ff:54:a0:c1:ca:
         83:fd:b4:73:dd:35:6a:41:39:88:8d:5b:2a:ca:f8:88:60:25:
         ee:e4:fc:5b:af:2a:62:3d:a2:7b:56:ca:32:7b:33:d2:86:35:
         c6:7c:1d:c8:9f:05:0d:a6:1a:cc:92:22:cf:d4:dc:c3:a8:78:
         8e:f4:a0:ba:a7:e8:28:f0:05:90:67:08:40:1e:47:74:96:ca:
         6f:f0:bf:cf:a5:02:a1:77:f5:dd:d0:4c:f1:25:74:93:16:20:
         56:4c:13:8e:6f:f1:13:8a:c1:3a:53:f4:42:9a:ed:ea:79:aa:
         fc:52:bf:ed:c0:74:3f:b4:a4:99:38:55:e2:73:95:68:99:de:
         ea:d7:07:21:f9:3c:72:a0:c7:20:14:2c:26:ab:7f:56:5f:54:
         5a:fd:09:af:68:a5:cb:88:fd:9a:95:59:c0:5b:44:c2:dd:5b:
         ad:2d:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:13:18 2024 by rpki-client on console-ams.rpki-client.org