Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/14825043-0e9e-3136-bd5a-f40f5d81d3d3.roa
File:                     14825043-0e9e-3136-bd5a-f40f5d81d3d3.roa (raw, json)
Hash identifier:          19YIWD+WHIjvH4UYq6NFmfiA/YI7K1h2dWRZtTaJzcE=
Subject key identifier:   28:8A:74:8B:55:53:26:C2:8D:D2:C9:51:F5:56:16:A6:F9:E9:5D:89
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583DFED833190E4A0EE1FF796EA0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/14825043-0e9e-3136-bd5a-f40f5d81d3d3.roa
Signing time:             Sun 22 May 2022 12:00:00 +0000
ROA not before:           Sun 22 May 2022 12:00:00 +0000
ROA not after:            Thu 10 Jan 2030 05:00:00 +0000
asID:                     36692
IP address blocks:        2620:0:cce::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fe:d8:33:19:0e:4a:0e:e1:ff:79:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: May 22 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2030 GMT
        Subject: CN=43949217-3699-45af-8bf8-02cd6b829383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:b3:2e:ba:e4:00:79:28:aa:1e:7b:45:00:
                    d7:e3:9c:72:b6:74:2c:62:c4:35:1c:5b:ad:9e:14:
                    3e:37:e9:ff:a3:44:9c:2a:b6:d5:f9:43:d9:0f:83:
                    c9:94:af:ca:73:c4:e9:0b:92:94:38:c8:6a:c4:69:
                    3b:25:a5:b1:b9:c5:c7:e1:ba:02:0f:d5:37:08:dc:
                    75:75:60:86:bb:5e:4f:7b:68:ca:6a:1b:63:03:d6:
                    01:a7:a2:8f:5f:94:b2:94:62:a5:63:c0:fa:37:86:
                    32:dd:d9:81:89:57:b2:8d:3c:8a:ef:97:a0:02:25:
                    bb:09:a0:78:e2:a5:49:d0:1f:85:e3:85:05:6c:25:
                    1f:68:c1:50:00:55:eb:8e:14:69:38:08:ef:ab:33:
                    fe:56:30:1e:09:0a:51:36:7c:3c:78:75:61:e5:03:
                    e7:da:4e:9b:a1:d9:5c:b7:a5:14:75:d1:70:9f:26:
                    c6:6a:7a:c2:69:06:2a:3d:b2:13:93:3c:44:46:47:
                    1a:3a:48:7f:c1:ba:5b:42:bf:a3:a3:52:7e:16:27:
                    f1:c3:36:0e:c0:8e:cc:87:e5:22:fe:62:f0:d8:c0:
                    be:c8:78:8d:45:20:a3:c8:7f:62:16:d8:0d:8c:ca:
                    6f:6d:06:54:09:a9:53:be:6e:2f:30:35:ac:de:be:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8A:74:8B:55:53:26:C2:8D:D2:C9:51:F5:56:16:A6:F9:E9:5D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/14825043-0e9e-3136-bd5a-f40f5d81d3d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:cce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:42:68:08:7c:dc:4f:35:d8:53:0b:c2:c9:10:f5:1e:5b:ac:
         71:36:f4:cc:e1:c6:7b:03:cf:b6:f4:b5:c6:a3:46:bc:16:c8:
         80:90:fc:0a:af:b1:7d:de:86:a5:d0:ee:64:4a:bb:37:1a:44:
         d8:00:66:8e:d8:df:00:4d:66:c4:f1:8d:2d:02:7a:ef:bb:9e:
         09:7b:77:cf:4a:b0:ed:a3:5a:e6:33:83:ab:4c:0b:59:49:50:
         d3:57:76:c8:1c:7b:e7:4d:03:cc:04:ef:9b:ff:91:f4:be:12:
         4e:49:af:8d:3e:1e:1b:0e:f0:5c:4b:eb:54:97:57:da:93:ad:
         37:fd:89:04:9c:bd:ee:78:08:4a:49:1f:16:e5:06:7e:9a:52:
         cf:01:78:a2:33:c9:bf:7e:a4:6f:8f:be:6e:d7:5e:3f:82:05:
         5f:15:00:02:70:ab:34:cb:9a:df:2e:ef:27:09:0c:91:e8:fd:
         ed:db:20:f5:7b:8a:4e:2f:2f:c6:be:fb:69:29:f9:ff:74:21:
         a0:04:cc:86:31:12:47:40:98:11:14:2a:d9:7c:66:a5:00:1d:
         b3:35:ba:52:9d:f9:54:9b:c9:6e:74:97:f4:fc:e4:cf:7c:6a:
         c8:15:e3:0a:58:45:b1:ca:c4:29:cf:4c:0a:cf:1f:e7:f2:a1:
         34:0e:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:19:16 2024 by rpki-client on console-fra.rpki-client.org