Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa
File:                     11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa (raw, json)
Hash identifier:          EM3ZiPiu2epFGmPGYMM1oryFuWzdqu8YK2gnemhm0X4=
Subject key identifier:   24:15:BD:06:91:E7:2C:5F:25:84:6D:50:C1:E2:16:02:4C:1F:19:18
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584554982535E050F3DC571CDE80
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     27299
IP address blocks:        2001:500:80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:25:35:e0:50:f3:dc:57:1c:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=9a71f0f0-c900-4b5f-86c0-ad1afffd8e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:a6:af:ee:63:2f:d4:b3:61:2d:92:b9:97:
                    25:02:2b:10:04:2c:df:8a:e1:a0:f6:26:b9:89:c5:
                    76:57:0e:f7:cc:91:74:19:43:83:66:34:63:ea:24:
                    88:65:b6:44:06:ee:db:e3:16:fe:de:26:b0:e0:32:
                    dc:e8:e2:b3:57:06:c1:0b:7a:65:7d:72:19:6e:c9:
                    07:f0:a9:0e:3c:09:30:b2:cd:05:84:d3:e6:6f:e3:
                    08:45:29:b6:08:c3:6c:56:85:b2:b4:b7:b7:a1:e6:
                    66:36:f3:23:70:e1:d3:03:be:99:1d:8f:70:df:97:
                    bb:81:e6:c4:61:c4:de:7b:ca:ab:32:a5:41:65:f6:
                    d0:9b:25:eb:12:4e:16:34:cb:39:37:c7:96:69:ea:
                    d0:2c:14:64:9e:ab:52:e5:6a:72:0a:00:2d:0c:18:
                    e6:44:dc:4a:ce:19:73:07:74:53:90:69:c9:da:24:
                    0c:84:2d:1c:84:76:ef:39:f7:17:1c:05:bb:38:f9:
                    cd:f9:a2:b2:e8:81:52:d7:5f:32:d8:0d:74:77:f4:
                    eb:29:40:e1:bb:b3:6c:25:05:13:af:1c:6f:54:f5:
                    2f:fa:00:42:d3:8b:d2:df:a6:ff:ba:14:1c:16:62:
                    b7:95:4c:55:2a:55:8c:1f:ee:06:2f:c3:3a:6b:6b:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:15:BD:06:91:E7:2C:5F:25:84:6D:50:C1:E2:16:02:4C:1F:19:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:f1:78:c1:68:fa:be:67:4e:4f:b9:6a:2c:38:3a:86:75:
         c4:c4:06:98:41:cd:ec:98:9b:51:98:aa:a9:ca:b7:76:e6:1c:
         fd:95:34:70:a4:3b:15:99:aa:7f:d6:b2:ac:ba:63:f9:b8:68:
         60:7b:96:96:50:a8:1d:37:e7:3f:68:60:84:b7:15:17:a4:53:
         b1:72:95:f8:f1:46:e4:b5:7d:75:0d:06:7d:77:a4:d5:f6:aa:
         af:46:0d:fc:64:89:30:ea:24:8e:50:2e:0d:cc:b9:b2:72:e3:
         d5:8b:57:75:20:98:a0:63:92:a4:58:91:69:05:67:57:f3:1c:
         21:60:66:34:c5:ae:08:12:5c:86:fd:c2:df:e7:98:bb:3d:d9:
         0f:eb:47:ff:37:85:0a:c3:6b:67:5f:ca:c8:62:f1:c8:21:93:
         c9:bd:08:5a:e9:b2:13:a5:0e:b4:2a:04:f1:98:68:db:e7:1b:
         98:97:ea:81:b8:2d:3b:fc:cf:02:c6:d9:f8:94:e8:6a:87:b9:
         93:0b:a4:b7:b4:a4:51:ad:ea:54:2f:16:36:5f:2c:42:53:e5:
         5e:d4:ed:2d:68:f8:a1:43:ca:48:05:25:89:f2:af:d5:e0:93:
         f9:c7:12:38:aa:8d:c2:ae:7e:1d:aa:04:83:6f:df:d3:1b:60:
         2b:89:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:35:52 2024 by rpki-client on console-fra.rpki-client.org