Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098efd7b-80b6-39b7-a16e-ba0da0058180.roa
File:                     098efd7b-80b6-39b7-a16e-ba0da0058180.roa (raw, json)
Hash identifier:          g1dCYL9lzY+wjjkBM4Ot5tX49/GEAhdU2opZxK498VE=
Subject key identifier:   4B:2B:7E:D4:FA:05:40:DE:97:F6:5E:9B:F9:D5:04:26:E4:52:47:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A74200F6CBD3C100EF500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098efd7b-80b6-39b7-a16e-ba0da0058180.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        2603:3016:2100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:74:20:0f:6c:bd:3c:10:0e:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=37d7048d-6eb1-4bf8-99de-ff1f7db6c495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:4b:8a:5a:2d:cb:e3:ab:fb:24:4e:1a:69:
                    ad:70:65:c5:48:c0:23:86:fb:84:ac:5f:0d:96:02:
                    bb:e3:61:56:c5:6e:b4:ce:32:8f:d2:e0:be:39:e8:
                    71:2d:19:2a:48:7f:f9:c9:1d:5e:06:96:8e:81:af:
                    a8:6c:85:59:55:ab:34:fb:7b:ec:71:86:f6:5c:5f:
                    03:7c:da:88:b6:9c:b5:d4:8b:7a:7b:53:75:61:fb:
                    ab:aa:2d:0a:89:26:8a:62:a9:b1:91:53:e4:15:cb:
                    d9:11:fc:1b:12:cf:98:f3:b2:e9:02:33:be:ba:89:
                    a8:5e:5d:20:bb:4f:d7:43:12:0c:a6:7c:e0:2c:72:
                    f1:2b:c4:4b:d9:1f:47:ee:e5:47:6e:00:f5:bc:03:
                    d5:ec:90:17:1c:1d:74:5c:e8:f9:e6:29:60:f4:dc:
                    b4:ac:10:98:bd:83:d3:48:32:ea:16:1b:2e:0b:e0:
                    35:98:fa:c3:a0:20:c6:cc:3b:d6:4d:f0:15:ae:93:
                    0a:71:bf:79:05:06:66:64:af:64:27:7b:86:a8:69:
                    83:21:8b:18:ae:0d:65:e5:d0:06:fc:94:6d:14:c0:
                    4e:a6:63:07:d3:3b:04:c9:41:2e:0a:45:69:92:21:
                    a9:6c:b2:87:02:01:db:64:3b:7a:08:1b:af:1b:0c:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:7E:D4:FA:05:40:DE:97:F6:5E:9B:F9:D5:04:26:E4:52:47:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098efd7b-80b6-39b7-a16e-ba0da0058180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:36:43:82:78:ee:a8:e3:52:86:d3:aa:67:f7:ba:ed:72:
         7b:78:22:dd:39:0e:61:9d:6b:36:1c:51:78:56:5d:5f:ea:cc:
         de:0a:22:0e:a5:76:2a:57:d7:a7:c6:6d:3a:c6:b2:35:c4:bc:
         d3:ca:22:16:4d:ad:a4:9d:32:52:a3:12:c3:52:3c:cc:dd:71:
         0e:34:a5:90:41:10:0a:21:fb:d0:a2:90:f2:92:bb:9f:48:46:
         3a:17:e3:13:46:f5:b0:19:71:54:bd:05:b8:c2:29:be:59:6f:
         7b:00:3c:51:01:2c:11:9d:96:32:11:41:59:00:0b:0c:36:c2:
         f0:ad:c6:69:df:5e:b2:23:87:ed:35:a3:95:e9:81:61:58:a0:
         fe:15:33:c0:88:5a:06:d3:12:4c:83:9c:7b:56:8f:60:1a:62:
         d3:a0:0e:6a:de:11:f6:b3:91:a0:b5:91:52:5f:78:8a:45:d9:
         18:7f:0e:95:52:52:b3:fd:06:80:7d:67:d0:8c:93:9e:40:fb:
         7e:a1:cb:ad:c6:3f:e0:fb:c4:a9:f0:88:cb:1c:fe:28:71:14:
         cb:0e:2b:a7:e5:c2:b0:d5:66:4f:20:c1:11:3d:94:7d:b4:38:
         4e:aa:3d:73:32:5e:9f:04:1a:5f:ce:eb:1c:74:d9:58:4e:ba:
         59:16:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:45 2024 by rpki-client on console-fra.rpki-client.org