Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/be352b73-273f-3de4-bc77-5437ad5e91d5.roa
File:                     be352b73-273f-3de4-bc77-5437ad5e91d5.roa (raw, json)
Hash identifier:          vg1DOZrIOSGfUYwy+rlmxjMJe0QdszYw8M6My/ouD9E=
Subject key identifier:   59:CF:46:52:CF:D8:6A:6E:68:F1:54:04:0C:35:2C:32:DE:AC:9F:AC
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845777DBD6BBCDFAD53E176AF40
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/be352b73-273f-3de4-bc77-5437ad5e91d5.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:76::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bd:6b:bc:df:ad:53:e1:76:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=4a413bc9-1738-4c9f-95e0-1b48cbfce25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:7b:d0:f8:24:6a:09:23:88:b4:e2:ee:26:
                    5b:de:9c:53:5f:00:a6:de:68:60:b4:c7:b1:e6:79:
                    8d:6d:83:8f:68:7e:b0:87:82:53:a0:25:0a:28:90:
                    1a:d9:85:63:16:79:74:c7:a1:52:20:a1:ab:fc:59:
                    ab:71:7a:eb:8d:d7:b2:17:c0:9c:bf:14:8d:1a:60:
                    0a:c1:bb:56:89:09:7a:ae:25:d9:f7:59:e7:04:aa:
                    97:a2:73:10:ad:0f:c7:1a:54:1a:ac:72:85:73:0d:
                    19:c0:30:65:27:b3:ef:31:1b:ab:be:c5:ca:99:55:
                    7d:a2:35:6b:9f:d7:44:a9:f2:55:0c:e2:74:af:32:
                    5f:f0:da:5a:54:69:2d:0a:2b:fa:7d:12:f8:92:76:
                    40:ef:0f:ea:f3:6d:fc:cd:04:f5:da:5b:77:8e:0f:
                    d6:95:77:04:98:dc:38:59:af:cc:d1:5e:09:7c:12:
                    db:b8:5f:4b:bb:64:07:8c:97:13:9a:03:6e:a9:60:
                    d2:05:e6:c8:ed:43:e0:25:b5:ac:3a:8f:99:5a:8d:
                    c6:47:ee:81:b2:e9:e3:98:58:a7:23:20:8f:70:76:
                    6d:2e:5c:4d:b1:74:4a:6f:fc:35:df:3a:a9:4b:97:
                    f5:0e:de:85:ba:24:b4:2b:99:a5:eb:ef:80:fe:d4:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CF:46:52:CF:D8:6A:6E:68:F1:54:04:0C:35:2C:32:DE:AC:9F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/be352b73-273f-3de4-bc77-5437ad5e91d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:76::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9b:35:d3:5f:3e:53:1b:a2:28:7b:bd:23:71:a0:ba:db:09:
         dc:42:32:2a:fa:13:fd:d7:e2:52:22:4f:bf:53:f9:33:2d:2c:
         b5:1e:9c:8b:db:85:d7:2c:95:4b:01:de:61:ca:83:9d:d4:7b:
         1a:af:6d:61:6c:d7:65:55:82:89:c7:b1:c4:77:2e:e6:06:db:
         54:8d:e5:76:f0:58:94:0d:e3:ef:4c:8e:7f:0c:69:2d:58:0f:
         d2:42:4b:42:a8:42:77:6f:c1:e1:02:84:f9:b4:af:76:f3:37:
         05:9f:a0:33:a4:04:22:db:91:77:29:9d:7b:35:cd:69:f1:78:
         9d:e6:a0:38:58:e7:23:b8:0e:94:41:d7:c7:c3:67:d4:74:17:
         e1:be:e2:93:d1:b2:64:86:8b:43:ca:d5:2d:8a:c6:e5:1f:d9:
         25:55:5c:30:b2:29:72:f5:fa:4c:c1:b8:8e:8d:56:98:e3:58:
         1e:0c:53:4f:86:a0:81:b3:f9:a0:d8:9c:14:08:1b:53:7c:66:
         da:7a:bd:f9:70:21:0b:ff:64:2a:ec:6e:0e:f1:73:71:a8:97:
         ec:6f:0f:10:13:ac:9a:b6:7d:7b:44:26:2c:c4:bc:4b:4d:da:
         d9:b6:53:1d:64:fd:46:84:68:1c:bc:7c:b5:0a:83:6c:eb:a8:
         52:72:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:15 2024 by rpki-client on console-fra.rpki-client.org