Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
File:                     ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa (raw, json)
Hash identifier:          x+ICaLRjhMPuaro2FgDtsnM/1loklF+702ag2nO+X+c=
Subject key identifier:   A2:45:9C:04:E3:CB:5F:99:0E:83:49:75:CA:45:4C:94:45:27:33:66
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285844F2FFF9E50FE411DD47A76600
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2620:116:800d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f9:e5:0f:e4:11:dd:47:a7:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=14e23aed-a1d8-4c3f-aed9-1686ef58689e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:3f:9c:d4:2f:c1:03:61:e0:ea:92:b3:1b:
                    c2:1c:27:d4:60:9a:e0:82:c2:7a:cd:50:ba:75:dc:
                    9c:73:62:9a:fd:33:89:a0:de:43:ab:30:d5:6a:71:
                    1a:80:00:cd:c2:7b:10:6d:66:be:7c:5e:96:1a:63:
                    0e:3e:ee:f2:d2:cf:10:48:cf:e5:67:8f:1b:61:25:
                    a4:79:9e:33:90:e9:d4:25:39:28:ed:61:10:7f:3f:
                    64:89:a3:8a:39:97:36:27:e2:11:8e:29:eb:ca:b8:
                    c5:ac:12:9f:06:d6:e4:e6:6f:9a:76:63:ef:45:56:
                    f2:b4:01:63:26:1f:d8:42:eb:c7:5b:75:fa:c0:d1:
                    e5:34:9f:ee:c8:d3:67:57:2e:ed:cc:b6:6b:b8:b0:
                    82:19:99:77:02:c2:29:1f:32:4d:bd:9f:1f:b6:f1:
                    ae:d4:c2:ec:5b:20:e5:06:b0:4f:79:cd:38:d9:7d:
                    a7:d1:6f:e6:e2:f8:f2:c6:d4:6a:46:f3:15:43:87:
                    b2:cd:20:32:d5:81:ee:44:fa:65:2c:71:0d:72:c1:
                    39:fe:63:08:c9:40:4d:c4:d0:fe:0f:42:3a:4a:e9:
                    e0:19:f7:f1:25:7a:42:f1:63:81:87:1a:98:8b:d2:
                    14:f9:7f:08:91:3a:ad:47:66:36:07:29:a7:ae:47:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:9C:04:E3:CB:5F:99:0E:83:49:75:CA:45:4C:94:45:27:33:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:1a:fc:15:2c:08:bb:31:d8:3e:d5:02:57:97:79:13:cc:46:
         5b:ef:bd:79:05:aa:dc:76:a7:6c:b3:4b:87:3c:38:af:f9:ac:
         c2:03:4a:be:ac:b1:3f:e0:a2:bc:75:7e:e0:a7:a5:8d:72:2e:
         f6:c8:74:7a:ba:3c:8c:d9:d5:7c:46:85:6f:72:14:ac:ec:5d:
         3e:5a:62:3b:c0:3d:63:bb:61:39:6d:a7:80:fe:a9:90:5d:e2:
         d5:95:f2:14:28:6e:50:e8:42:3d:b3:71:10:2d:a0:e1:7d:c2:
         55:4e:f3:69:7d:77:43:4a:c2:62:b2:36:5d:6f:db:eb:d6:67:
         71:e5:d3:df:9c:27:68:48:97:78:1a:52:d8:0b:dc:88:13:7d:
         47:12:d2:4c:95:1e:81:c8:2f:32:37:c5:36:17:6d:22:b5:51:
         d4:ec:a7:0e:11:29:87:d5:69:6b:84:9f:8b:7d:8f:a9:63:29:
         f9:4d:c5:ff:20:ea:19:3b:5a:22:30:70:11:b9:e7:68:80:d2:
         80:01:e4:3f:08:66:2c:09:cc:8d:0d:83:dc:7d:b2:94:7d:47:
         85:10:41:46:23:8c:b2:17:fb:4b:47:20:20:1e:1a:3b:70:69:
         11:a1:67:53:23:27:b5:3b:4d:9d:e3:11:48:d8:d9:c4:ab:13:
         f9:c5:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:02 2024 by rpki-client on console-ams.rpki-client.org