Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa
File:                     28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa (raw, json)
Hash identifier:          3CT//v/PT7L+WpHDcRHfYLkohk75t9uD7nFG8dEvroc=
Subject key identifier:   B0:03:4D:7E:EA:A0:7D:7C:D8:EC:F1:DF:AB:87:43:1A:C6:96:C2:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457D132EA131D6D798D68EE4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     12222
IP address blocks:        2001:4878:4027::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2e:a1:31:d6:d7:98:d6:8e:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=9cc7828b-412b-4192-8532-9e942e7c0f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:db:87:60:8d:7a:16:5f:71:a4:42:7c:bc:
                    df:e0:50:9c:b4:a0:8d:1d:99:f8:7a:12:45:c5:1f:
                    24:85:09:df:60:f1:b4:37:2c:f7:2d:02:a0:ca:04:
                    78:bb:07:62:e3:f5:78:e2:8f:d9:d3:7d:ae:8f:83:
                    3d:9d:a1:92:f9:26:ea:c7:b3:4a:64:2d:b8:27:42:
                    f3:44:55:1d:a6:a9:11:ba:3e:54:fa:d7:22:34:51:
                    b5:12:f5:c9:7e:c2:40:6e:20:6d:70:de:50:7d:7e:
                    24:14:42:9e:15:7c:66:e5:56:05:4e:31:a8:aa:e0:
                    ac:ab:42:5b:70:43:ed:37:71:a6:03:67:30:c5:f6:
                    02:82:dd:6e:cd:c7:75:fc:1d:f3:3c:18:15:d2:b0:
                    45:36:91:a5:70:1d:b2:ed:38:5a:60:93:9c:67:09:
                    fc:f3:10:b4:5d:31:6c:31:d9:a3:8a:a2:b8:81:2c:
                    e1:13:f0:ac:32:46:5b:6b:8e:6a:3c:37:b0:fc:22:
                    56:96:3d:1e:6a:f0:59:79:e6:a4:8c:a7:c4:20:26:
                    4e:70:39:8b:d0:00:9f:00:76:3b:b7:49:12:72:9a:
                    44:39:d8:7e:e4:5c:17:3d:23:45:6c:e3:7a:72:ad:
                    76:50:15:55:b8:aa:42:3b:90:4b:7e:62:67:72:a6:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:03:4D:7E:EA:A0:7D:7C:D8:EC:F1:DF:AB:87:43:1A:C6:96:C2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28ac6b9b-f395-36c3-aae9-98fa2fde412d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:7a:b8:7d:3d:12:d7:03:6f:5c:0c:89:2b:6f:c8:15:37:
         90:f5:27:0c:e2:91:6a:c7:8c:5c:c0:c8:64:3b:9f:9f:a4:fc:
         70:59:2d:9b:db:fe:53:ea:ab:c6:cb:a9:77:c3:eb:bc:b9:44:
         1a:f4:57:64:d1:a2:03:7b:15:08:80:10:6d:87:5b:af:a6:de:
         b6:87:41:2f:fb:ae:2a:26:c9:e7:8f:9e:83:46:a0:df:d1:51:
         44:c6:b0:16:f8:c7:5b:e9:8a:a8:25:06:08:8e:b3:99:4f:7b:
         fe:50:ef:9a:81:18:ee:bd:16:7d:fb:02:45:b7:8f:0c:ec:90:
         b4:da:d7:73:59:7f:7a:c7:db:c6:7e:2b:03:79:0d:59:1a:40:
         fe:8c:99:f4:f1:23:53:38:fb:7b:e1:59:d7:f3:ab:da:9b:ab:
         40:c7:b1:00:9c:75:4c:52:a1:e8:f2:3e:92:21:82:0e:0f:59:
         4d:4f:fd:0d:d4:50:4f:1a:a4:52:8c:04:fc:6b:b6:f2:08:9f:
         85:6d:88:9d:0c:57:ed:27:01:3b:4c:af:71:e1:b5:50:d0:64:
         2c:bb:62:6f:1d:d6:af:ab:3e:55:e8:f3:ae:77:c6:54:0f:fe:
         40:5e:86:59:51:c9:a2:4d:b8:f6:eb:b4:af:f2:89:fd:71:6d:
         f7:35:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:07:44 2024 by rpki-client on console-ams.rpki-client.org