Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa
File:                     ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa (raw, json)
Hash identifier:          4XXRUNdEx6dWdFTHbOixpnseKvHlTrih6RBieszxWeE=
Subject key identifier:   29:AE:42:06:0D:53:96:BB:88:DC:F3:E8:69:F2:C3:95:CD:D8:F1:CD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457FDDDD8FDFC6C92858E52AE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     12222
IP address blocks:        2001:4878:8217::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:dd:8f:df:c6:c9:28:58:e5:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=672aee98-9019-4f75-8233-789deaff5924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:5f:14:3c:00:ee:45:02:c2:46:fb:1e:cb:
                    29:63:3c:ae:b6:f8:be:9e:a9:e5:b4:62:8f:7f:e8:
                    97:d2:0a:d8:17:ce:02:77:97:67:8d:36:12:b3:8f:
                    02:82:bd:b0:15:22:0d:9e:59:15:11:75:10:fe:21:
                    b4:b3:0e:a1:6a:ee:65:a1:d9:a8:de:12:59:46:06:
                    ef:3d:0b:e8:53:c1:65:c6:68:62:ad:81:ff:22:73:
                    ef:ea:26:f8:dc:11:52:94:eb:ed:6a:3b:f0:af:22:
                    92:08:67:c5:29:2b:2a:9a:b3:4e:59:aa:cc:ed:60:
                    e3:27:b7:6a:41:2d:f5:97:6d:5e:d2:dd:2e:0f:0d:
                    0e:79:b9:0d:15:71:15:e2:73:08:14:0b:01:1d:04:
                    d5:bd:3f:66:31:e5:eb:72:18:f4:2d:76:7d:85:b2:
                    67:59:f9:7c:6d:dd:6a:ef:7d:c7:40:cd:8d:ec:83:
                    ed:1e:5d:63:75:13:ca:1d:1b:77:fc:3d:70:66:17:
                    5f:92:5a:38:0e:14:90:fa:d1:e4:20:4d:79:66:2f:
                    61:73:8e:ca:f1:8d:94:66:cf:1b:24:5c:74:2b:24:
                    09:72:a9:92:8c:3f:65:55:e0:7b:01:48:0d:34:b4:
                    17:be:d6:96:38:85:0c:29:9e:39:2c:43:a1:13:8d:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:42:06:0D:53:96:BB:88:DC:F3:E8:69:F2:C3:95:CD:D8:F1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecad7c94-7be3-3525-af2e-bcf0c0d32d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8217::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:c3:7b:ee:17:4b:59:e1:f2:c8:89:1f:1c:01:8e:01:85:
         cd:63:a9:30:bc:e3:5e:76:fd:a4:33:a0:e5:fb:03:88:4f:d6:
         ef:53:d1:f2:5b:2f:df:b0:a0:73:20:f0:be:7a:59:95:64:d6:
         87:08:77:c3:0b:0a:16:9a:f8:c9:44:44:6a:f1:61:94:05:5a:
         75:55:91:47:a0:fe:0e:73:a6:0d:b2:15:a5:6a:4e:07:c6:78:
         61:79:72:e9:04:0d:49:68:11:9c:35:3d:65:a6:82:15:d9:c2:
         f4:46:f7:13:46:09:2d:33:17:8f:3c:b4:de:20:27:aa:46:e7:
         ad:d6:25:7b:58:1b:2c:9a:00:19:93:a6:5d:b4:66:73:6c:e6:
         5d:a6:35:5d:b3:52:db:43:6e:d4:aa:8c:a7:55:1c:03:bc:f5:
         40:d9:8b:63:ba:39:f0:c4:25:04:68:32:d6:a0:12:59:13:67:
         d5:ff:c5:80:46:ad:c3:00:9a:08:0f:57:a1:b1:67:e1:30:79:
         a7:0c:6e:0d:ef:28:8e:f6:05:83:fa:1d:0d:96:81:07:03:61:
         2b:22:ad:f4:67:c8:4d:d3:84:f6:26:e7:0a:f8:b7:13:74:cf:
         f8:9c:6b:94:13:2b:41:9f:a1:c8:2d:cf:2b:38:d8:e2:1d:f3:
         7a:e8:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:44 2024 by rpki-client on console-ams.rpki-client.org