Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4528072e-9d47-3274-add2-a30e84227521.roa
File:                     4528072e-9d47-3274-add2-a30e84227521.roa (raw, json)
Hash identifier:          dNArBtf7HD+ZUD8B/QV++35eGAxiTDjSxnZqnoTBhBQ=
Subject key identifier:   3B:56:A7:09:6A:79:64:BE:1C:85:4D:E9:4C:AA:8D:A1:6F:C8:79:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004989B124EEC52A77BE9200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4528072e-9d47-3274-add2-a30e84227521.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        2603:2480:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:89:b1:24:ee:c5:2a:77:be:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=6791c3dd-d2d2-4c55-b1a4-5f275ecd0001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:a1:20:90:d6:08:0b:47:38:1b:89:6f:ff:
                    bd:0b:df:0f:41:5f:71:7f:e3:f5:66:46:51:c4:10:
                    2b:95:5f:a3:fc:11:8d:2f:04:0d:cd:af:f7:27:91:
                    24:45:44:12:69:8a:ff:89:68:75:e9:a6:a7:13:c7:
                    3e:75:06:15:02:7f:fa:4d:a3:79:78:0c:e4:6f:6b:
                    f8:61:c3:bf:d3:19:fc:81:fe:05:3c:7d:53:97:5e:
                    72:a4:08:97:61:fb:58:d5:28:31:a9:ee:68:db:e2:
                    97:e6:22:13:0a:2f:3a:b7:d9:b8:c7:18:4c:c5:f7:
                    c3:67:79:13:b3:b8:1f:c3:af:78:85:e2:81:7b:69:
                    2b:8e:0c:7d:d4:ff:bc:b4:5c:18:a6:11:27:9f:2d:
                    db:24:ef:9b:b4:48:05:89:2d:74:e8:29:43:70:ff:
                    db:b1:d2:ef:c7:96:dc:c1:bb:67:d1:29:2b:9f:24:
                    f3:f6:66:dc:09:e1:c6:91:95:bb:15:90:70:2e:e3:
                    30:80:8a:c2:b7:c5:5d:26:5a:59:11:af:43:89:86:
                    6a:8c:d3:ca:6b:51:74:16:ff:d8:c7:90:fe:a8:39:
                    ac:d9:04:db:fa:ab:55:15:c0:7b:6c:fa:34:af:aa:
                    62:07:52:17:ef:1d:2d:b9:5b:67:15:f9:15:be:18:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:56:A7:09:6A:79:64:BE:1C:85:4D:E9:4C:AA:8D:A1:6F:C8:79:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4528072e-9d47-3274-add2-a30e84227521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2480:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d8:6a:a9:db:00:62:ec:05:c4:89:15:de:bf:9c:91:f3:97:
         79:47:ab:ca:3d:3f:ab:f3:e7:d8:62:cd:ad:a7:82:6e:c4:85:
         5f:73:18:7c:dc:4b:23:3d:a9:f1:5f:93:40:df:46:5f:31:ba:
         36:fc:0d:ac:e0:73:16:e5:12:86:40:4e:bc:b3:ed:1d:58:79:
         c9:ef:65:0a:ea:b5:3b:0e:ea:c1:fc:7b:8b:d1:92:32:83:6e:
         be:68:ee:a8:41:bb:59:be:1b:e6:3b:07:07:76:2a:53:5f:5d:
         cf:e0:0e:16:fb:92:cc:b3:82:2f:50:3a:85:5c:df:c8:a0:b0:
         d6:ab:0b:a4:18:e8:1e:81:cc:6b:e8:c9:35:c2:f1:dc:05:71:
         6a:8f:d7:be:61:27:a9:9d:a7:2b:be:56:ed:9b:f8:e6:87:9c:
         3b:95:bc:15:42:13:2e:ab:d6:a2:8c:47:88:45:da:ce:60:7e:
         04:8e:39:8d:1f:fd:3b:40:5d:bb:f4:98:2a:5f:c5:51:7f:83:
         ab:18:bc:09:bd:d8:6a:06:aa:3a:0a:7b:94:1b:c3:6c:ea:d2:
         33:61:af:51:c1:87:de:ba:a6:82:f2:9c:eb:81:92:51:c2:a8:
         04:cb:c3:30:fc:b8:b1:d5:9c:a8:92:81:02:74:31:be:a9:19:
         24:bb:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:02:33 2024 by rpki-client on console-ams.rpki-client.org