Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa
File:                     d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa (raw, json)
Hash identifier:          IcrjTInNNQU25f4oqxreBSdJ+ru/cg51/SCZgJrVbN8=
Subject key identifier:   28:20:C3:FD:61:B5:5A:99:1E:F4:BA:50:24:3D:DE:78:1B:B2:D2:9C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584531B299DBAA74C7A32F807680
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     396982
IP address blocks:        2604:a940:301::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:99:db:aa:74:c7:a3:2f:80:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=e3a75404-37e7-4a79-a163-e5679b6c0781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:74:25:58:37:4a:d7:22:d0:84:c6:33:8f:
                    10:ee:19:b9:6b:a5:84:78:14:8a:61:a4:0e:97:f6:
                    86:10:f2:69:a0:db:6e:97:27:ab:37:5d:e9:8f:3d:
                    2a:fa:4e:f8:8a:1a:1c:5f:24:70:e7:e3:ee:68:25:
                    93:4b:c5:14:59:df:3e:fe:f1:75:c0:d1:78:db:b4:
                    23:2a:24:e3:dd:82:45:c4:fe:38:48:8d:30:e8:19:
                    19:73:57:43:50:5c:55:5c:db:62:a4:12:4b:64:d5:
                    ab:ce:56:45:be:b1:63:1f:56:29:d8:48:5c:30:fc:
                    8d:95:0e:77:0c:1f:2f:bd:69:fe:5c:26:86:89:8f:
                    ca:a4:d5:14:9e:3b:5a:0c:1c:47:a5:33:20:fc:9f:
                    0a:95:99:0c:e3:4f:5f:cb:db:2b:88:78:09:7f:52:
                    2b:c0:00:2e:8c:aa:be:f8:fc:b7:9c:de:d0:30:4f:
                    45:c3:3d:83:38:30:67:55:6a:30:3a:85:8a:08:ee:
                    38:6f:cc:a9:0c:30:ee:6c:22:a0:24:1f:cf:02:4c:
                    21:ff:2b:37:f3:7b:b3:40:97:67:e1:e1:e4:16:af:
                    a3:63:a3:b5:0a:ef:93:b1:06:83:28:45:59:c9:05:
                    c8:bc:97:74:df:b5:86:3a:4e:e6:ce:48:d6:a1:3c:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:20:C3:FD:61:B5:5A:99:1E:F4:BA:50:24:3D:DE:78:1B:B2:D2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d53fca0b-8e52-336c-a8ec-a6c5f2e1d930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a940:301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:42:3d:c1:51:79:ee:8e:be:b1:09:13:88:e7:ce:8a:a8:33:
         d2:b3:e5:a1:04:78:d8:62:df:cf:b0:53:72:f2:f3:d0:05:ed:
         37:76:bd:d4:e4:1b:66:53:91:0c:9c:84:4c:48:62:43:a6:63:
         fd:72:e7:c8:ac:ce:6f:a0:0d:29:a9:91:2b:92:62:fc:e8:bc:
         02:f8:a7:55:01:fe:8e:82:a1:43:2d:0b:16:08:77:69:60:a0:
         24:57:54:5b:4b:0a:0e:ed:82:6b:a7:ed:17:2b:9b:b0:b7:f7:
         05:31:e3:6b:0f:a1:d4:ed:b7:86:19:fb:78:ed:a5:88:ef:95:
         bc:c0:ee:85:87:f6:03:73:95:d3:1a:59:3a:02:3e:a0:a9:78:
         3e:21:39:63:27:f1:10:d3:f5:a2:53:37:0f:1b:e3:7b:21:cc:
         42:55:f8:84:46:ff:20:f8:9c:93:75:46:52:bd:15:af:33:ec:
         e7:7f:6d:70:9c:94:d0:22:5c:75:61:9e:2f:52:ea:b2:a1:7f:
         18:55:d6:81:b9:4f:5c:ab:d0:aa:28:d8:65:f5:03:93:55:4e:
         2b:41:56:d3:6f:e6:38:82:3d:01:4b:00:1e:53:f6:fa:f1:69:
         c7:51:cd:d7:b3:77:a4:05:eb:61:1a:97:f7:77:50:94:44:94:
         07:38:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:44 2024 by rpki-client on console-ams.rpki-client.org