Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4c5bbbcb-9e7a-35a0-b9e8-6dd54e862d5e.roa
File:                     4c5bbbcb-9e7a-35a0-b9e8-6dd54e862d5e.roa (raw, json)
Hash identifier:          IvncecO0PC+DB896IT6fzRFWdqTb1zhI7cCvhFzdKrU=
Subject key identifier:   AC:32:F2:04:B6:78:50:CD:18:35:29:C1:9C:70:26:D6:D6:85:A7:D9
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583C30E49C71EADB66DAB72E1210
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4c5bbbcb-9e7a-35a0-b9e8-6dd54e862d5e.roa
Signing time:             Wed 08 Dec 2021 05:00:00 +0000
ROA not before:           Wed 08 Dec 2021 05:00:00 +0000
ROA not after:            Thu 10 Jan 2030 05:00:00 +0000
asID:                     36692
IP address blocks:        2620:119:fc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:30:e4:9c:71:ea:db:66:da:b7:2e:12:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Dec  8 05:00:00 2021 GMT
            Not After : Jan 10 05:00:00 2030 GMT
        Subject: CN=7bb9f67c-b465-4319-b6d4-827687759ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:7e:9f:7f:2d:e0:61:d1:ca:28:3b:40:ac:
                    35:67:f7:cb:72:23:ad:b0:ba:13:e3:51:c1:c0:12:
                    06:f3:3a:02:a3:e5:c3:7a:7c:4e:ae:82:66:0a:2e:
                    aa:b4:23:b2:98:ee:73:b8:08:9b:66:c9:36:00:19:
                    63:80:6d:ee:7b:25:bf:bb:b1:ce:db:fa:3b:21:a6:
                    75:86:74:de:24:42:f2:12:bb:db:2c:69:83:34:1b:
                    6d:f4:3e:6e:16:b6:08:6b:50:78:ab:ec:df:52:f6:
                    34:70:a4:46:51:78:45:f7:24:f8:7f:75:fa:df:e1:
                    1a:be:79:e2:30:65:b7:b2:21:30:bb:e3:29:18:26:
                    7f:b2:48:fc:97:3d:a7:89:3f:db:10:e8:5c:34:d7:
                    9d:de:cf:f0:b5:19:b0:4b:58:be:60:f1:44:e1:d6:
                    f1:4e:7a:10:2f:07:b9:43:87:ab:63:b5:87:6d:d8:
                    7f:89:c9:8c:dd:ac:ca:20:af:0d:6e:ad:b0:4f:59:
                    c7:78:6b:3f:d9:94:a6:79:78:17:d6:2e:43:7d:a3:
                    05:7c:94:5b:95:b8:b6:a8:7f:60:f6:9d:58:05:49:
                    37:0f:95:c3:4d:88:74:f4:9b:5c:da:91:32:e6:73:
                    e9:01:1c:13:e6:40:b6:de:af:fc:73:5d:99:3b:03:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:32:F2:04:B6:78:50:CD:18:35:29:C1:9C:70:26:D6:D6:85:A7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4c5bbbcb-9e7a-35a0-b9e8-6dd54e862d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:45:ac:15:14:59:d4:94:dd:06:94:e3:65:f8:3d:d9:cd:
         90:03:7c:19:e9:97:7e:5a:b3:1b:bc:0e:fc:a5:26:f4:3a:ad:
         e9:d5:ec:62:35:99:5e:70:f4:7c:8f:84:39:f0:87:e1:36:b5:
         c4:e7:7d:d2:fd:8b:4b:01:ef:c7:51:48:96:66:c7:9a:b0:0e:
         21:55:7e:95:a3:51:0d:ea:93:d3:86:73:cc:4e:d9:a1:ee:8e:
         60:87:de:a7:ba:85:58:55:d7:84:d7:fe:ea:ea:5b:d3:b1:a8:
         9a:5b:8b:ea:b4:f0:26:7c:f7:a4:9c:9d:73:78:1d:e1:f4:9e:
         8d:12:47:c9:6a:b0:2b:c3:a3:a1:5c:e6:fc:03:0c:80:03:f3:
         d2:57:3d:af:0a:fa:95:4b:a3:19:77:b7:56:96:9e:78:18:50:
         8e:66:e2:f3:ca:e9:ee:c1:dc:6c:ca:90:b4:2f:a4:ea:1a:84:
         b9:1a:88:eb:1c:3e:1b:3d:e4:56:89:a7:6b:ab:e7:ec:2d:50:
         d8:cc:8e:31:d1:c9:08:bb:c2:25:19:c6:84:0f:47:4a:c4:96:
         cc:10:5f:49:c4:14:cd:73:e3:de:2f:46:90:35:da:e9:b3:79:
         27:45:f4:84:50:fc:a2:a1:77:3e:02:b9:7c:9b:25:7b:2b:aa:
         46:f0:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:16:35 2024 by rpki-client on console-ams.rpki-client.org