Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
File:                     5d053f32-5485-34e5-9703-b389b2c5414d.roa (raw, json)
Hash identifier:          d0iIff4RoO2gmCA9+dnlrKgvAda6NjQs8PpLvLX55Ms=
Subject key identifier:   65:D8:C1:E2:C4:C8:4D:89:82:E8:CE:6D:92:FA:C3:6A:F2:61:D3:79
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F43285845A9BE1FB869C06D8A419ED540
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     8987
IP address blocks:        2602:f9e7:26::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1f:b8:69:c0:6d:8a:41:9e:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=04742f02-a599-40d9-9eb0-08a671ee27b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:4b:61:ec:1b:05:28:d8:17:11:c8:d2:fb:
                    97:03:f6:2a:28:3b:d7:2e:de:9d:e6:3c:bd:c4:e1:
                    94:2f:b2:38:de:0b:5f:61:eb:d3:ea:22:91:db:ee:
                    22:58:d4:15:8a:ea:1b:49:31:56:24:d9:93:15:93:
                    73:65:b2:e8:cc:79:4f:09:c4:c0:94:43:a7:14:09:
                    e2:8e:a1:25:1a:78:7d:f4:9e:f6:09:96:2a:0c:48:
                    6f:2d:17:83:15:eb:0c:69:e5:40:46:26:d0:76:ec:
                    8e:1c:a6:44:88:a3:a5:e2:a1:2b:e8:dc:cf:52:60:
                    1b:31:14:8f:3a:61:3d:fd:bd:38:b5:83:27:ae:01:
                    0b:d5:05:86:15:a6:82:73:ae:e5:3c:05:7b:18:dc:
                    25:4a:4e:82:30:f1:e1:e7:c9:5e:11:c3:9a:31:c0:
                    9e:a9:ad:8f:b1:b9:cf:f4:ec:6c:22:0b:8a:8c:9c:
                    7d:78:a5:d1:f2:c4:ea:7f:07:8b:b0:26:63:bc:47:
                    d0:00:df:9d:6e:23:4a:0d:d1:31:08:35:31:ee:80:
                    a7:a3:5d:bd:84:cf:2b:dd:55:5e:c5:1b:d3:f2:68:
                    c8:d3:a9:43:2c:f1:9d:ba:24:51:9a:32:94:81:b4:
                    f9:bd:71:ac:cc:36:28:9c:45:a3:32:c7:69:65:96:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D8:C1:E2:C4:C8:4D:89:82:E8:CE:6D:92:FA:C3:6A:F2:61:D3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:26::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:2a:6e:63:f2:58:58:89:c3:4b:0d:cf:fd:6c:23:33:9e:
         ef:a5:ac:90:85:93:87:a1:e6:36:01:ad:95:b7:19:67:0d:81:
         8a:c1:59:ea:60:dd:3f:1c:ad:4c:68:5c:f8:3e:4d:c4:59:c2:
         71:7e:4e:77:8c:83:7e:29:74:c4:e8:35:c8:98:8c:f5:5a:b2:
         b7:5f:38:35:8a:c5:53:e2:66:4f:cc:cb:f7:01:65:a8:c5:28:
         ef:cb:71:fd:c2:1e:38:f6:30:92:f2:32:d6:92:86:21:61:34:
         8c:30:cc:cd:b7:5e:39:02:60:c0:06:d4:2f:0e:89:b4:b1:ed:
         f1:62:65:24:c7:50:a0:f0:c5:60:c7:f1:25:26:19:9b:ad:99:
         fb:dc:d4:b7:e2:2d:41:8a:fa:c1:ed:9a:e7:81:d0:de:81:1c:
         ef:b4:ba:03:05:65:36:5c:81:99:f1:95:2d:31:09:b8:ef:8d:
         15:a7:73:1d:c3:65:31:58:57:46:15:56:50:aa:e0:9f:39:e4:
         e1:9b:57:16:9e:4b:45:11:f1:1e:3c:b5:8f:25:5b:3c:9b:57:
         ed:1d:26:81:26:b1:e2:d5:66:d4:8d:52:60:25:ba:65:9f:bf:
         b1:db:4d:e1:e2:da:21:a3:7d:1a:2a:ea:a5:d2:36:cf:49:8e:
         8d:63:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:33:07 2024 by rpki-client on console-fra.rpki-client.org