Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa
File:                     f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa (raw, json)
Hash identifier:          r91Izpspb0hO2B+UuqzY4dgcS9igaWUdETq8OLAIhzA=
Subject key identifier:   D1:B4:3C:E5:7F:2D:C8:D3:47:43:FE:05:D0:6A:DE:BA:92:8D:49:89
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F4328584543D8004A99806D869A1DE580
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        2620:197:f00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d8:00:4a:99:80:6d:86:9a:1d:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=b3c784a8-d063-4608-b11f-42751f16269f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:41:31:bf:70:e5:ec:52:15:4a:9e:c9:9e:
                    5c:30:ab:78:da:6f:19:79:e0:7e:04:ba:99:73:7f:
                    99:74:ad:81:64:c5:db:af:2c:1b:a7:9e:1a:d1:7c:
                    3b:9e:92:a4:96:ec:ae:02:1f:98:a1:71:e4:8d:d5:
                    df:b6:9e:27:5c:bf:d1:f4:81:75:b7:cd:10:bd:3e:
                    9c:2a:be:88:40:74:58:1c:db:6d:ea:c3:23:34:58:
                    33:8b:91:fd:89:a7:25:c5:36:09:05:bb:70:ff:8e:
                    fc:99:3b:d0:fb:30:d5:ef:53:16:97:6c:ec:3a:8a:
                    31:e8:04:dc:e2:bf:ab:8d:de:f4:7a:03:1b:52:32:
                    23:89:da:da:39:ad:15:4e:14:1c:9f:d1:9b:c5:8b:
                    94:a7:1c:b7:a8:18:74:0b:17:f6:fa:25:47:39:5a:
                    f9:0d:92:7f:75:a4:68:1a:1c:21:13:f3:da:0f:2d:
                    21:11:d3:33:24:73:70:d0:dd:f9:4b:8d:48:7b:2f:
                    90:00:0c:ce:85:52:c3:ce:2e:19:4b:e6:ac:a0:18:
                    ea:3b:b7:2b:0c:74:2f:4a:b9:77:f1:8d:8a:d9:76:
                    37:df:4a:a3:04:cc:63:0e:76:da:7b:f0:06:8b:8e:
                    a1:1c:bf:3c:17:06:53:c2:c3:52:4d:03:e4:d2:fe:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B4:3C:E5:7F:2D:C8:D3:47:43:FE:05:D0:6A:DE:BA:92:8D:49:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:10:2a:c4:22:3b:c0:3f:15:9b:e5:c3:a5:23:27:07:11:d0:
         20:22:d4:da:58:48:89:ea:58:8b:a8:01:de:cd:39:a6:49:12:
         c2:76:a8:39:f1:57:78:9c:81:30:60:6a:04:54:a9:c8:6a:e5:
         99:84:9f:75:67:f7:2e:52:1f:e9:f0:41:2f:7f:83:25:97:c9:
         a9:fc:09:d9:c7:78:36:f2:4f:00:3e:1a:95:b8:08:db:9f:48:
         66:61:0d:2a:0b:df:71:dc:d9:98:7b:c8:0d:da:ea:20:33:2a:
         f3:37:ee:2a:9c:e0:97:62:41:18:9c:12:84:95:91:83:b0:45:
         bd:60:36:fc:6b:21:df:43:fb:aa:e9:bd:bd:d0:65:68:dc:aa:
         5c:03:b4:7c:57:e1:fb:d2:65:47:05:94:f0:0c:09:2b:67:79:
         ed:bb:10:d6:55:02:72:8f:8e:c4:5d:07:48:00:2f:73:b8:f3:
         8f:73:a8:a9:c9:36:10:11:fa:cd:80:21:21:c2:3c:46:c4:cf:
         82:33:94:0d:02:a1:62:cc:19:c9:b2:29:c0:22:fd:f8:a0:88:
         8c:3a:22:a8:bb:83:44:c7:d6:3d:72:af:00:14:b0:3c:b6:31:
         f3:14:1f:cc:ae:e1:47:ee:89:3d:c9:84:db:72:85:ce:cf:2a:
         96:16:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:04:56 2024 by rpki-client on console-ams.rpki-client.org