Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
File:                     1941cca8-631b-3a22-acab-d02a1b20a72c.roa (raw, json)
Hash identifier:          Vc6V/gwyyTeyGtsPdIGgpAB5lMkoKirNcg0uhIy3tuE=
Subject key identifier:   39:92:35:21:E5:F9:C8:9D:2E:C0:29:D8:AE:CE:EA:C2:73:85:8F:17
Certificate issuer:       /CN=a7bb872d-e597-498e-8bd5-d2efae320554
Certificate serial:       010D0C9F432858404CC44083F3B062AB0CDE0600
Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
Signing time:             Mon 19 Dec 2022 11:56:43 +0000
ROA not before:           Mon 19 Dec 2022 11:56:43 +0000
ROA not after:            Sun 23 Mar 2025 04:00:00 +0000
asID:                     20473
IP address blocks:        2606:ed40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4c:c4:40:83:f3:b0:62:ab:0c:de:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554
        Validity
            Not Before: Dec 19 11:56:43 2022 GMT
            Not After : Mar 23 04:00:00 2025 GMT
        Subject: CN=4455d384-ffc9-4ad3-9a53-5624bee31fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:9f:51:de:0c:50:30:e8:a2:91:11:90:92:
                    6b:40:4b:67:0f:86:2d:a9:53:ae:ea:5a:b6:d5:29:
                    69:c4:6b:fe:86:85:8d:78:0a:62:a0:98:92:44:54:
                    db:c5:0e:8c:68:12:a1:a4:93:5f:4f:a8:03:1e:31:
                    04:6e:0a:fd:f9:af:37:65:89:34:37:92:a2:23:6f:
                    2c:5a:7c:d1:07:2f:92:2c:23:2b:e9:48:1f:3d:b9:
                    c5:83:18:c6:c8:07:c3:6f:04:1d:03:8b:24:5c:2f:
                    fc:75:c1:1d:2d:e0:c5:31:fa:3e:2a:c6:26:f7:66:
                    f1:16:22:2b:12:a1:48:57:b1:b7:48:d4:75:88:d8:
                    a1:16:ca:b0:b1:9c:31:f5:17:db:4b:de:66:6a:35:
                    83:d8:02:d2:36:3d:f0:b9:e6:36:f2:66:23:62:02:
                    45:52:ff:e5:61:ee:53:4f:4e:8d:e0:91:5c:00:c0:
                    a4:e7:13:5c:79:0b:d9:bd:a7:05:1d:b2:c8:67:a1:
                    5a:74:c9:f6:ea:12:bd:98:ab:cb:1a:e8:db:e9:2a:
                    d2:e9:bd:c8:a1:fe:4c:fa:fc:06:69:60:77:3c:a0:
                    64:c0:47:ee:f3:07:69:83:54:8b:83:a9:b4:8f:05:
                    a4:a2:74:de:b0:46:83:50:00:d1:b5:58:37:ad:80:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                39:92:35:21:E5:F9:C8:9D:2E:C0:29:D8:AE:CE:EA:C2:73:85:8F:17
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl

            X509v3 Authority Key Identifier: 
                keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:78:b3:c8:54:8c:c0:b8:94:f8:c9:98:18:e2:4d:7a:65:49:
         b2:3f:0b:a5:bf:8a:bc:73:11:63:0d:19:05:92:59:44:e7:b2:
         dd:72:ac:43:a2:d4:d2:46:dd:18:aa:fd:7d:eb:b7:54:5b:34:
         fd:25:5c:3c:f7:a6:15:47:85:fd:b6:cb:76:c9:6e:06:33:bc:
         4e:88:e4:54:36:5e:40:76:f4:98:93:fa:58:ba:6b:85:dc:b1:
         90:e1:00:2d:f3:08:a2:19:20:69:75:7a:11:10:7e:a1:1d:78:
         a2:00:cb:74:85:9a:f2:5d:37:b6:b4:fe:42:9e:13:23:4e:e7:
         22:13:88:59:3b:51:d0:c8:46:7f:92:61:24:8d:37:b4:b9:6c:
         b1:d1:05:9c:c6:db:b4:81:df:a4:83:14:c9:ae:b8:5c:e5:e0:
         e2:ea:01:e1:d8:5d:dd:c6:66:1d:d3:fd:f4:0e:87:2a:1e:54:
         24:86:f8:5c:ae:26:af:67:20:24:6f:bc:c9:f2:67:e4:31:2a:
         00:41:76:87:80:40:dd:f7:4d:0d:fc:3f:b6:48:7a:6a:36:2f:
         15:44:a8:12:02:f0:2b:e7:bf:59:fb:07:ed:07:33:a1:aa:7a:
         c6:a7:9c:00:6a:e7:56:d8:7c:16:8a:0a:f9:d1:11:bd:e6:4a:
         be:2d:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:51:58 2023 by rpki-client on console-ams.rpki-client.org