Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa
File:                     4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa (raw, json)
Hash identifier:          472bJuwwcrQXdTE3RZOuHJ/EBImt44mOoIbYnAeVprE=
Subject key identifier:   3C:8D:2F:E8:DC:06:45:C8:23:AC:1E:CD:AF:47:2C:49:65:9B:F9:6B
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F43285845E45E6E5071868148F2626EE0
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     3630
IP address blocks:        2620:f:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:6e:50:71:86:81:48:f2:62:6e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=d07563da-3352-4686-92e7-0c6a71da09bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:93:b3:f2:2a:03:2d:55:5c:90:16:48:3b:
                    81:f7:87:7f:8c:79:14:2c:53:26:16:d9:07:e5:5f:
                    d0:c5:ca:c1:3c:3f:85:4b:0a:e7:dd:5e:fc:62:18:
                    a2:ac:e5:fa:fc:2c:ff:ad:ec:05:a2:d0:4c:79:d5:
                    14:18:d9:bb:77:8f:71:23:e1:cb:30:ed:61:af:0b:
                    e2:cf:9d:fe:c0:b6:7b:f0:e9:33:a1:dc:68:8f:d0:
                    fc:cc:da:cf:47:ea:b9:04:bf:3b:ca:34:ad:3e:70:
                    24:17:c3:f9:74:4c:39:7b:81:5a:49:54:bf:7e:fe:
                    f3:1f:84:4f:cd:99:d5:8e:5b:47:57:55:23:59:e8:
                    22:ad:a0:97:67:c8:f0:df:d1:78:4f:19:90:af:77:
                    5c:45:34:a9:05:6c:4a:f5:a3:52:4c:0d:c9:ce:4e:
                    a3:bb:c8:8b:7f:ea:15:3a:08:33:80:b7:2d:52:fb:
                    40:76:a1:5e:b7:bf:57:ef:f3:d5:e7:c1:2c:56:eb:
                    b3:4c:04:80:89:53:82:ef:8c:14:14:d0:93:4e:54:
                    e1:82:00:77:94:1a:aa:c2:4e:19:22:7f:be:3e:4c:
                    cc:63:d1:27:fa:6a:a0:b1:30:43:6c:8b:05:dd:e3:
                    db:fc:c1:62:6a:38:33:7b:d5:04:58:10:5e:bd:b1:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8D:2F:E8:DC:06:45:C8:23:AC:1E:CD:AF:47:2C:49:65:9B:F9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:56:ee:ea:94:cb:26:81:68:3d:91:bd:08:4b:30:80:d9:
         f8:e6:23:8e:67:82:ca:0b:67:4e:b4:46:7d:8a:2d:5f:3c:9e:
         e0:67:4e:c3:12:00:de:69:32:c3:7b:48:5e:76:f4:10:32:a2:
         43:0e:62:9d:a7:d4:51:8b:4c:e0:a6:48:53:c3:7a:00:41:15:
         db:25:5f:ff:c8:37:df:d6:e8:a7:f0:ca:48:13:a6:04:91:15:
         86:0a:68:42:fc:e4:a6:d2:a1:8e:11:96:3d:55:12:14:7a:50:
         51:88:8c:f8:6c:ad:2c:41:76:e6:97:56:1f:27:49:65:75:3b:
         76:3d:92:ab:00:94:20:8e:2e:4f:0f:bc:51:45:e3:e5:a6:ba:
         e9:46:d8:fb:ac:56:ed:3a:d5:e8:04:74:8d:33:0b:a1:1c:20:
         28:d3:29:6b:15:eb:2a:45:cf:10:28:95:ee:8e:72:11:a7:b2:
         29:41:9c:ca:5f:ed:8a:17:e8:1b:86:8b:0c:0f:1b:bf:bb:5e:
         88:04:66:47:cf:11:c1:1b:93:af:ba:17:53:92:6f:d8:79:fb:
         94:70:1f:ed:9f:99:4b:5c:71:5f:a4:ec:53:5f:02:d6:0d:45:
         41:e6:d7:7e:ca:7a:6f:60:03:01:3b:ef:00:72:46:69:86:37:
         62:7a:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:42 2024 by rpki-client on console-ams.rpki-client.org