Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa
File:                     49518ee8-2efd-33a1-8600-fb34d521bc39.roa (raw, json)
Hash identifier:          CMSbeSkvL/Oo/6bzt05tNoEDOZIDywcYdkRqy/HLv8I=
Subject key identifier:   03:5B:F0:74:D7:84:3B:4E:0A:B7:50:F9:3E:D8:8E:43:BC:78:52:F6
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858457A488A2173E6CAD555D93CC0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     30133
IP address blocks:        2001:500:78::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8a:21:73:e6:ca:d5:55:d9:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=c64d15c6-a8d8-4ec8-8e4a-5719631f2c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:73:a1:32:f2:dc:99:30:1b:73:12:75:db:
                    99:e8:15:85:85:b9:ac:07:d2:64:11:af:3b:3b:5c:
                    d4:82:c2:5e:13:93:37:62:06:e5:da:73:5a:da:35:
                    59:b5:4e:c9:3c:2e:79:7b:39:6b:b2:67:fd:ce:a4:
                    5b:3f:35:81:43:97:f7:a5:c5:5b:f0:9e:15:20:70:
                    45:ca:8d:2c:10:7b:17:08:62:bd:21:a5:41:4a:fc:
                    7b:7b:84:5b:ea:f4:3d:1f:1e:dd:aa:7e:e3:b9:2c:
                    41:f8:a2:42:28:87:1e:1a:aa:c0:42:82:5a:c5:33:
                    5c:6c:9b:80:41:05:a5:24:78:53:e5:7d:ed:52:d0:
                    29:2d:8c:ef:f8:71:66:92:6f:4e:62:6e:4b:7e:9d:
                    17:46:81:52:8c:e1:cb:42:c7:f7:c0:c8:26:36:db:
                    fb:6b:b9:56:80:c2:c7:e6:6d:83:53:19:ca:ca:52:
                    fc:49:eb:4a:85:51:b6:1b:0e:59:28:4f:b2:55:22:
                    72:e6:14:48:1a:a6:9e:d2:0c:e5:ae:1d:85:80:94:
                    91:a2:d6:68:86:81:42:b7:ac:11:be:ec:c2:9a:ea:
                    53:da:10:9b:6f:19:1f:6f:d4:6c:04:f5:2e:58:e4:
                    e4:41:30:a0:27:19:92:e7:95:93:44:e9:e0:10:ea:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:F0:74:D7:84:3B:4E:0A:B7:50:F9:3E:D8:8E:43:BC:78:52:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:78::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:69:57:ab:94:0a:2d:e0:49:27:4f:14:ab:40:28:48:bc:21:
         6e:ef:c7:98:ab:8c:f7:11:b6:fb:fa:6c:e3:bf:d2:b2:ee:71:
         2f:e4:e9:6f:78:91:0d:6a:54:db:7c:79:ed:18:ad:4a:a1:b9:
         91:fb:bc:33:1b:0a:71:61:14:a1:e0:96:92:21:5d:63:a5:ae:
         63:df:b2:bd:5a:ac:f7:cc:5d:5f:f8:6f:62:ba:4d:26:be:0f:
         45:c8:29:d8:ab:60:93:d2:9f:43:40:e8:d2:3a:23:51:ca:dc:
         0d:bd:22:47:d1:73:fe:7f:80:26:df:42:a4:0d:43:2d:54:96:
         22:2c:18:ab:37:e9:c6:8c:7b:f0:e0:67:0f:2b:76:6e:89:67:
         c3:f0:96:8b:3a:05:83:a0:a1:6b:26:e7:4c:69:8a:8e:9b:96:
         b6:e7:50:cb:7b:f3:4c:3e:53:04:e9:28:53:17:41:43:8f:4c:
         19:89:54:b8:06:97:ef:70:ba:1d:9a:ee:4d:db:ad:26:5d:9c:
         10:01:f2:56:43:ad:e0:66:f5:ce:0c:01:32:91:24:25:67:79:
         9d:ff:f5:14:98:0f:57:0e:54:3c:57:04:b4:be:af:30:86:6b:
         76:e2:f1:30:60:c5:a3:b3:ce:0a:18:72:4d:b2:d2:13:bb:e4:
         f0:6c:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:15 2024 by rpki-client on console-fra.rpki-client.org