Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa
File:                     09ee371d-db17-35a1-95c0-fbdbefe48a84.roa (raw, json)
Hash identifier:          Nu6H0M3P1tvr0He5kkttrhYqL9KnHaetwn+g1TBGU1U=
Subject key identifier:   17:92:FF:56:93:64:AE:77:D6:14:0F:F0:0B:DF:BE:D1:9D:48:8A:CC
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285844F2FFF98ED8ED8851373F0E80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2620:116:800a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f9:8e:d8:ed:88:51:37:3f:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=c87c6927-ca22-4790-a4da-222eda203101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:58:bd:57:ab:2f:0b:79:06:75:79:d8:d7:
                    fa:a6:20:77:43:d9:a9:c8:e4:c1:0e:ad:23:ef:e7:
                    f9:77:63:72:de:bd:ba:16:bb:92:bf:a3:2c:10:e8:
                    e2:08:84:5c:fb:fe:d8:d9:bf:83:56:c2:19:ed:48:
                    4f:43:b4:c9:48:90:45:d2:9a:58:92:2d:a8:d3:9f:
                    f1:f4:a0:f6:c9:3d:78:55:cd:e2:db:4f:48:32:54:
                    e0:69:22:15:21:3c:7b:42:c1:7e:36:42:f1:72:f7:
                    83:70:cd:f4:48:07:74:60:ff:6a:5f:87:0c:8b:b4:
                    60:d6:21:3b:37:d7:50:b6:4f:fa:c1:57:99:ad:32:
                    23:5f:44:ca:02:9b:df:8c:15:7e:62:2f:79:d8:3e:
                    d9:1d:28:e6:94:51:78:22:06:5f:5c:61:50:67:06:
                    67:b6:68:76:0c:29:90:4a:47:de:72:a8:1a:4e:0a:
                    80:3c:f7:fe:85:57:d8:82:8f:74:1d:d1:0c:82:35:
                    ed:91:19:23:03:5b:be:eb:ed:1e:14:40:9f:3d:87:
                    e9:66:f0:58:b8:32:2e:d5:0a:b5:b1:d4:1c:8b:3a:
                    e5:dd:c9:14:68:b7:73:ff:b8:3a:68:ce:54:fd:1c:
                    9c:82:94:3c:71:5f:0d:53:40:7a:dc:f2:1d:2e:c7:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:92:FF:56:93:64:AE:77:D6:14:0F:F0:0B:DF:BE:D1:9D:48:8A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:71:9b:c0:1c:48:eb:a0:bb:fc:a5:e1:a8:c7:70:9c:6b:
         b3:51:61:8e:53:11:dc:b8:a5:93:2b:6d:73:d4:f1:42:20:4c:
         6d:97:55:2a:94:0d:65:5c:53:69:8d:cb:2a:0e:5c:cb:13:dc:
         ca:3c:27:a4:ef:41:52:ef:8c:64:da:e9:15:c8:ec:2d:55:94:
         f2:af:90:f3:bc:81:ae:81:98:89:e3:ec:ae:7b:1f:ca:c2:5c:
         04:5d:8d:9c:56:eb:2a:7c:7d:2d:fd:c6:dd:0f:d6:ea:bc:69:
         b5:a5:6b:93:a4:01:49:46:98:75:b4:2d:58:ca:43:f2:e6:88:
         3a:9d:39:a4:1b:39:63:13:44:f1:8c:4f:7f:3e:6e:69:e3:7b:
         3f:5b:ef:a7:5a:54:26:64:1f:a5:41:83:de:46:e7:40:d3:6c:
         db:2e:be:09:62:55:80:e5:6e:66:2f:48:79:d6:b3:83:43:a2:
         84:50:c8:60:5e:bf:2c:06:15:c6:83:86:6e:60:fb:6c:df:50:
         86:ee:3c:9e:71:5e:b1:90:db:1e:9b:d8:14:bb:33:79:c1:1a:
         6c:e7:4a:ef:97:72:a2:6e:a4:36:35:9b:7b:29:4f:24:c2:d8:
         74:bd:c7:74:e7:62:54:93:62:76:c0:ea:af:9e:91:36:3c:35:
         95:b7:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:51 2024 by rpki-client on console-fra.rpki-client.org