Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa
File:                     fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa (raw, json)
Hash identifier:          FsMpnZWm+h60TZIQjNZraFQDh7cKI+D+Cl8rQ0istaE=
Subject key identifier:   73:EA:6B:5F:1B:CC:88:4E:41:79:45:AE:A0:8E:91:A1:AA:E2:C4:CC
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F4328584526A5AB9B31E148A4D90C0A80
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        2620:135:7017::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:ab:9b:31:e1:48:a4:d9:0c:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=31faecea-c463-4221-82d8-ac6dd8de4353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d4:46:78:dd:21:96:7c:9f:b1:72:62:54:3a:
                    a0:40:1b:3c:34:92:8c:8a:02:af:53:e0:a3:f2:15:
                    b4:17:3d:fd:11:b8:cc:00:9c:4a:de:f0:41:82:4e:
                    1c:df:ae:9e:e6:fc:9c:97:b2:7f:26:ef:b7:30:b4:
                    1e:78:75:89:68:a0:7b:1b:85:5e:57:28:ec:68:86:
                    69:fa:3d:77:1e:43:e8:8d:1e:73:9d:76:30:e1:6d:
                    5a:6c:41:5c:68:b5:1b:1d:a4:bf:e5:7d:c6:e3:7a:
                    27:bd:db:f3:92:cd:46:64:29:57:07:95:57:98:4b:
                    44:48:bd:d0:2d:1b:09:39:37:2d:4a:7d:a3:73:42:
                    36:f4:36:a1:20:5c:32:13:95:f8:7e:8d:98:4e:13:
                    07:f3:30:d0:68:20:5b:f1:b4:1f:5b:04:13:e6:18:
                    46:58:7c:b9:34:03:03:cb:89:c7:e0:13:38:dd:fa:
                    09:b3:19:5e:b0:f7:11:d2:2e:49:d8:6f:9f:26:f7:
                    d8:93:88:b7:db:a2:b6:f7:1e:12:b6:66:e3:74:01:
                    23:16:59:ff:3d:7d:4e:3b:21:16:85:12:30:0a:96:
                    67:f4:73:0e:77:aa:31:ca:59:37:0c:c9:aa:fd:2e:
                    c5:49:84:d4:df:b8:1d:0d:12:1d:af:54:c4:b1:db:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:6B:5F:1B:CC:88:4E:41:79:45:AE:A0:8E:91:A1:AA:E2:C4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7017::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:ad:db:76:54:ae:58:61:b6:4f:85:e6:91:7c:dc:bd:55:
         97:5e:32:60:ef:1f:d1:31:fe:f6:44:ba:b3:8d:ff:b2:d2:e2:
         64:c1:ff:0e:e8:5e:1d:ee:0e:2a:28:f8:82:dc:7d:9e:5c:19:
         99:b9:11:ed:84:6c:48:92:33:66:18:4d:f0:6e:a9:5e:65:40:
         a1:22:a2:91:75:c8:51:0b:79:36:99:d0:e2:b8:5a:62:72:c7:
         22:aa:f7:6d:26:c2:36:9d:2d:3f:00:73:50:91:5b:02:a8:98:
         6b:0e:73:be:42:ec:b8:18:93:3a:60:9b:dc:de:9f:be:84:a8:
         28:10:0e:b4:24:23:71:9c:f1:8a:ba:c6:4b:1a:b3:a1:45:f4:
         a4:9b:bb:bd:2b:94:47:ad:6b:5a:31:4e:c2:68:16:7b:79:fd:
         e7:fd:ed:39:4d:da:e7:06:dd:b4:76:c4:3c:ea:91:d1:58:31:
         22:d3:a5:80:b5:6f:ce:92:58:be:c2:73:12:26:61:7c:4e:46:
         84:7f:2f:4c:33:df:38:52:b7:b7:ad:63:c7:d1:1a:cf:da:be:
         7c:61:55:7c:6e:b5:73:5f:c2:52:b1:01:f1:ac:80:5c:df:9c:
         51:86:37:27:9e:56:d6:11:9a:e8:2b:bd:e1:c6:57:d4:6d:b3:
         d6:6b:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:11:13 2024 by rpki-client on console-fra.rpki-client.org