Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1152856d-9ee7-32f0-aa98-545ce3e3c211.roa
File:                     1152856d-9ee7-32f0-aa98-545ce3e3c211.roa (raw, json)
Hash identifier:          SGfX3bQjIRNui6CyPKkL6kYfHbAOVSWZfPHlpCJ+CTk=
Subject key identifier:   18:4F:FB:04:A9:CD:5B:F3:C7:63:69:F4:44:7B:F8:9F:6E:82:27:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584582A880EC025ED12CC49DF580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1152856d-9ee7-32f0-aa98-545ce3e3c211.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     12222
IP address blocks:        2001:4878:b153::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:80:ec:02:5e:d1:2c:c4:9d:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=09704ee7-871f-44fc-b9fc-dd578f43f6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:db:e5:0e:b9:3d:5d:61:0a:17:e8:db:45:
                    f0:20:3a:ae:e2:7f:11:63:ab:9e:db:a1:73:1f:cd:
                    09:5b:a8:b8:ca:a3:85:62:ef:2a:d1:51:0b:fc:dc:
                    c2:d0:6b:95:c1:de:c4:ab:38:5c:54:d0:da:94:93:
                    fb:79:f1:07:c6:84:e3:f0:6c:89:2a:40:b5:2e:db:
                    70:f7:71:f5:c9:24:8c:8e:d6:31:77:c8:5e:7c:4f:
                    51:5f:90:60:3d:31:07:5e:28:b2:56:81:01:14:a2:
                    e9:b5:f6:76:f9:a0:a0:d1:07:2f:2c:28:20:5c:0d:
                    35:eb:e9:0b:08:d9:2c:86:af:4c:21:62:1b:af:cd:
                    f0:a0:8a:93:16:ae:90:83:91:2f:70:95:ca:3c:43:
                    66:c4:95:34:c0:cc:8f:bc:47:c9:0f:e9:93:b2:0a:
                    9b:e5:20:00:1f:cd:b5:9b:de:87:62:c4:9b:04:0b:
                    c2:46:2d:d0:f8:26:95:4c:4f:08:55:de:0a:4b:a6:
                    dc:a1:52:01:6e:4a:ff:11:9d:3d:61:f1:cb:8a:e5:
                    10:8d:48:aa:77:a4:45:d0:49:68:08:8f:ba:3a:65:
                    62:65:8e:33:dc:3a:63:54:77:86:f0:ba:d0:4a:69:
                    0b:42:86:e6:e3:ac:26:7a:8e:ab:69:f3:0a:c3:dd:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4F:FB:04:A9:CD:5B:F3:C7:63:69:F4:44:7B:F8:9F:6E:82:27:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1152856d-9ee7-32f0-aa98-545ce3e3c211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:b153::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f4:64:ce:e9:16:0a:78:8c:0e:ff:02:63:fa:d9:09:15:ad:
         74:5b:59:c3:cc:e4:b1:c6:75:97:78:5e:3a:36:da:ce:3b:4c:
         95:d7:dd:31:c1:62:db:5d:d3:fa:b0:73:47:cf:d0:6e:af:be:
         29:1d:01:c1:ee:59:d3:0c:4d:aa:51:1d:69:5b:30:c7:b9:3b:
         86:59:25:f8:4c:f2:52:59:ed:3e:80:0f:62:f0:96:10:78:b6:
         8e:6f:5c:11:55:30:19:2e:f8:0e:4d:2e:16:a6:32:c8:60:4d:
         61:b2:03:39:b8:84:18:88:b6:8f:b2:10:07:d2:06:f7:de:c5:
         78:eb:d0:0e:31:8c:d1:16:c9:35:fe:4a:19:4a:a0:f3:0e:6b:
         d7:ea:b0:7d:da:ce:e9:36:dc:06:80:95:e4:f6:21:b3:86:8d:
         65:09:6c:fe:a9:eb:cc:c3:f5:73:f1:82:87:a0:2c:e4:e8:7c:
         96:42:cf:46:68:ed:a5:d5:bf:92:59:1a:0f:17:1a:33:c4:44:
         a0:66:8c:3d:5b:c9:ff:cc:06:ef:fc:ad:53:7f:64:ea:27:bc:
         5c:01:4d:00:3c:2c:e0:25:09:82:42:58:71:bd:19:d6:54:6e:
         f1:53:c1:08:57:bc:c9:ec:3c:31:f0:f6:7a:b6:6e:2a:c5:2b:
         13:dd:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:46 2024 by rpki-client on console-fra.rpki-client.org