Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa
File:                     f871407c-c2bc-3d6c-8715-048a48274b19.roa (raw, json)
Hash identifier:          zp914GHeC+bmxzQH0CNpxXOh035JLA+hQVFBG78DV14=
Subject key identifier:   25:CF:4C:51:17:BF:6A:78:32:41:84:8F:94:91:11:B5:EE:8C:4A:A2
Certificate issuer:       /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial:       010D0C9F4328584563F312D6C60A8251350D7400
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     21693
IP address blocks:        2620:18b::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:12:d6:c6:0a:82:51:35:0d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=82f18855-ce1d-4a5b-ac5c-5258dea63e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:f8:e5:3b:ba:63:89:15:e4:d7:fc:e6:b7:
                    01:75:02:dc:6d:78:26:e5:9e:e0:8c:4c:ed:43:ab:
                    13:16:32:eb:2d:01:7b:1c:58:da:29:76:3a:de:d9:
                    af:85:14:54:e8:45:8b:46:68:76:ee:42:83:d5:48:
                    69:53:06:96:66:35:96:f0:0f:4d:e2:4c:dd:ff:18:
                    40:90:cb:c9:00:2c:1a:9a:a3:25:1a:d0:13:62:4f:
                    9f:74:bc:fb:40:4d:20:25:39:06:c8:1d:f7:d2:33:
                    06:16:21:d1:1e:79:c4:cc:fa:d4:df:7e:33:37:3e:
                    72:3f:7f:97:cd:2b:e0:52:2b:c1:f8:64:33:a1:a9:
                    66:af:75:13:8d:11:81:22:c8:02:96:dc:5c:63:65:
                    99:fe:62:80:c7:d9:b4:be:71:bf:d3:3f:e7:bd:f2:
                    92:0f:66:1a:86:80:09:36:b3:b5:e2:91:2e:5a:74:
                    67:99:ea:71:42:70:6b:b4:a8:ee:22:02:3d:81:1f:
                    7a:8d:5c:1f:fb:42:f8:7e:71:d2:d8:da:94:18:d3:
                    57:47:ef:cf:7c:e2:2e:ea:fc:ea:27:66:53:b8:0a:
                    6c:19:c7:1f:b6:90:c4:71:23:a7:d1:90:71:3e:37:
                    e1:82:56:12:0c:cf:a3:d1:17:7d:9e:2f:e7:4f:bc:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CF:4C:51:17:BF:6A:78:32:41:84:8F:94:91:11:B5:EE:8C:4A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:18b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:38:26:78:0c:ed:b0:e6:64:79:31:af:be:19:87:f7:9f:37:
         80:66:06:4d:fe:a3:b2:e3:b4:d6:c3:08:7f:4c:4a:3e:1a:84:
         54:cf:8f:2a:1a:1d:18:cc:3a:ff:8b:df:f3:89:04:5c:bc:66:
         d1:ca:a4:de:74:4e:a7:1e:88:ec:06:4b:fd:7b:b7:4e:09:05:
         bd:16:96:c9:e9:e9:2b:b1:84:3b:cc:54:39:0c:12:80:08:db:
         6e:55:4a:ec:77:81:e8:27:28:a9:b0:c6:06:6c:c1:03:0b:f3:
         28:1e:45:c6:0e:cb:9a:c7:5b:27:dc:c3:d4:30:18:7b:fb:ee:
         a5:b0:d4:90:e7:29:61:b9:77:c9:a1:1a:de:95:f6:d3:6a:25:
         0a:51:98:76:cc:fb:bb:50:ca:83:a3:3e:b6:6d:2f:7e:4f:a8:
         26:cf:2e:7c:fe:28:2e:d1:39:fa:33:df:a9:07:b5:57:d4:6a:
         2e:f3:f0:13:e7:3f:3b:5c:5f:32:b6:d2:e0:8b:75:75:49:5b:
         0d:88:85:42:03:d1:bd:ff:aa:7b:26:de:04:fb:47:47:85:1b:
         1f:6f:af:50:30:39:40:68:0e:d7:78:19:04:5c:e5:fc:4b:68:
         fd:1a:37:79:9f:86:21:dc:82:8c:f8:1e:48:71:b4:5d:63:3f:
         80:c4:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:42 2024 by rpki-client on console-ams.rpki-client.org