Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50b342b5-b831-3509-8b9f-3596d293fda0.roa
File:                     50b342b5-b831-3509-8b9f-3596d293fda0.roa (raw, json)
Hash identifier:          Snk5WHL2Ua+XGrlBk85VIC0U0lrVDxgd1OBo/qcGZBA=
Subject key identifier:   D8:3E:09:A7:B9:2E:62:4F:AD:39:96:4F:FB:FE:15:6E:43:FF:3F:FE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C5818D5E4452A3C0ED749200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50b342b5-b831-3509-8b9f-3596d293fda0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        2001:4860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:8d:5e:44:52:a3:c0:ed:74:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8e3c2394-16dc-41ea-ae8b-76abccfdb709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:9d:d1:f6:02:b0:ce:be:8f:6e:7b:77:11:
                    c2:45:49:5e:b1:e1:ff:69:cd:6f:62:3c:98:e6:10:
                    95:71:9b:2a:84:d1:16:13:49:2c:4d:71:3c:e2:de:
                    90:42:d4:fa:34:9b:fe:cc:86:db:b5:87:8d:c7:3c:
                    5a:6f:6a:45:a1:5a:1b:e2:be:62:ff:61:31:be:1e:
                    4e:f5:eb:23:54:6a:dd:83:19:86:8c:15:a4:b2:a7:
                    83:4a:a0:74:37:25:a7:fb:cc:d4:ee:2c:82:86:e8:
                    aa:18:47:ed:3d:0a:b4:0a:e2:3c:c3:67:0c:7d:e9:
                    01:b8:d0:9e:8c:96:61:63:1e:73:f3:f8:d1:2f:c9:
                    e2:19:32:4c:b8:b8:c8:5a:3a:96:fb:f9:ad:81:af:
                    0d:1c:a6:a0:e4:a7:c4:dc:9d:be:ef:e6:18:b6:4d:
                    2d:8b:72:f1:fc:ce:3f:a5:d3:cc:3c:a7:d9:a5:a6:
                    38:a6:bc:d7:b7:73:df:a7:ff:ec:91:80:57:de:d5:
                    64:b2:ab:c1:fd:90:4c:1f:12:87:61:84:14:bd:a6:
                    34:fb:8f:b0:09:24:aa:42:80:00:31:8d:17:eb:64:
                    11:6c:2e:a1:94:76:2a:07:72:42:46:81:23:80:72:
                    a5:92:ec:be:61:5f:ab:f5:df:d1:ec:ba:4f:49:48:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3E:09:A7:B9:2E:62:4F:AD:39:96:4F:FB:FE:15:6E:43:FF:3F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50b342b5-b831-3509-8b9f-3596d293fda0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e0:4f:bf:69:c6:ae:57:37:9e:e8:f3:a0:61:1d:45:cf:5f:
         c3:fa:86:05:4f:a2:68:10:a1:d9:27:33:32:e0:16:7d:15:31:
         42:bc:01:af:fc:97:0e:c2:da:5f:d9:a0:ed:58:a7:ef:15:2f:
         43:1b:f5:e9:d8:80:0d:bc:bc:f5:bd:dd:60:9a:a2:9d:3e:bf:
         71:81:4c:99:27:58:3c:a7:c9:19:00:54:e9:40:9a:da:86:9c:
         74:5f:8e:5f:67:ec:ee:09:d8:2a:65:67:cc:b3:d6:ec:a5:2e:
         d6:85:6f:34:b9:9b:2b:cc:f2:01:a1:a3:b2:df:9d:a1:ee:8e:
         b0:9d:cb:56:21:d0:35:52:7e:e7:0d:6f:6b:c4:0c:b1:a8:02:
         16:cc:e1:b8:9e:84:88:ce:58:46:f2:7e:34:43:e7:6e:51:5e:
         fe:6b:06:08:88:63:af:d0:cd:8f:54:0e:eb:7c:63:41:a1:5b:
         5f:f3:08:79:64:68:ac:54:8e:dc:d4:d4:e0:b0:cb:10:77:8d:
         b8:61:41:c7:15:4b:b5:5b:b9:a0:bd:c5:2d:0c:1d:93:18:7a:
         fb:a6:8d:60:05:2f:0d:80:a5:3e:69:72:2d:15:6d:b3:ee:ef:
         71:ae:86:b1:fc:f1:71:b0:d0:61:bf:80:1f:f1:9b:4b:7a:5a:
         f7:01:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:34 2025 by rpki-client