Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589986d6-2eee-34a1-8843-fa06b0a99ee4.roa
File:                     589986d6-2eee-34a1-8843-fa06b0a99ee4.roa (raw, json)
Hash identifier:          mD6ScajUDMFVsOYM8OWaVvEE3CX+7tUtxU/ugdn4Ml8=
Subject key identifier:   45:A6:3D:18:68:DC:CB:76:8D:1B:D8:67:59:B8:7F:CE:24:34:48:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A0EFC3563F044C0532EE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589986d6-2eee-34a1-8843-fa06b0a99ee4.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33662
IP address blocks:        2603:300c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:0e:fc:35:63:f0:44:c0:53:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=8fe2a927-a605-4578-8563-e60158f1d3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:47:23:1b:3a:4e:6d:48:44:0d:33:b3:b5:95:
                    ae:08:08:74:05:01:2c:6a:52:0c:46:f7:9d:82:25:
                    e2:4e:67:e3:62:54:4c:9d:e8:c2:c2:b4:5b:db:cd:
                    95:85:f5:d4:0d:26:24:8e:3f:ff:ec:d8:da:f7:60:
                    f3:56:2d:a2:87:8d:d6:4c:73:22:59:d7:8e:32:05:
                    6b:9b:d1:eb:07:c0:bb:e3:33:40:82:f3:2e:64:45:
                    8f:af:1d:16:2d:05:31:db:53:44:d8:1f:13:63:f2:
                    7c:0d:52:d1:18:7e:0a:84:9a:94:1f:22:6a:fd:48:
                    81:db:14:2d:bf:65:98:8e:7f:f5:7a:4a:91:f5:46:
                    78:ca:ba:ae:8f:a5:78:3d:dc:43:c1:97:53:1d:3d:
                    d4:4a:e7:56:a5:f4:c5:56:be:a6:91:b2:5a:9d:9c:
                    0d:bf:20:4f:06:41:a1:ce:34:31:fe:5f:7b:4c:c8:
                    b7:14:96:97:4a:a4:1e:25:41:19:10:aa:a2:fd:04:
                    3d:0d:b7:f2:68:c8:d7:01:79:85:9a:16:ac:bb:4c:
                    b9:3c:b3:1d:08:08:cd:ab:16:38:54:06:f5:8f:c5:
                    83:bd:ec:e4:a7:21:e5:a7:c2:6e:1b:58:8e:58:bf:
                    51:d1:85:96:d6:d8:f2:ac:6b:c7:aa:e7:ab:75:53:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:3D:18:68:DC:CB:76:8D:1B:D8:67:59:B8:7F:CE:24:34:48:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589986d6-2eee-34a1-8843-fa06b0a99ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:56:b4:ca:7b:58:7d:9e:66:67:4a:0b:11:5e:e6:6f:a3:
         d7:3a:de:1e:fc:47:b8:f0:79:64:ad:2f:24:d0:dd:44:22:47:
         9b:bc:bb:5a:35:d7:40:00:33:7e:8f:52:62:71:bd:36:09:8c:
         be:f0:3a:27:f7:ee:04:9f:6d:be:bc:46:1e:4b:02:27:66:5c:
         4c:fc:8b:0f:2c:30:37:fc:a6:02:49:b8:9d:13:11:a3:f2:e0:
         06:ac:26:8a:6b:d1:24:ce:15:e9:6b:50:8d:75:61:a4:d6:62:
         39:bb:66:59:ef:60:fb:2f:de:cd:35:c9:d1:d1:e4:b2:f8:9d:
         e7:ba:89:1b:ef:ea:57:3d:40:01:2a:68:2e:e2:44:9a:f2:09:
         97:81:fd:50:72:e3:1b:96:27:85:b9:e3:55:1d:05:3a:0b:a2:
         58:ed:09:e9:89:b5:ae:80:88:fc:46:2e:0d:69:77:2b:d3:26:
         bf:91:fb:8c:2e:17:f8:79:76:2d:a4:5b:e5:45:ab:30:8c:88:
         cd:8f:80:b4:7b:4c:e6:c5:82:83:ac:b1:92:10:32:72:2d:ac:
         ec:04:78:30:fb:c2:bf:37:89:9b:f1:f6:7f:54:b4:2f:09:2b:
         2a:12:08:ef:e1:a1:ff:fb:e4:77:32:cf:8a:e4:6c:57:90:72:
         1f:18:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:10:13 2024 by rpki-client on console-ams.rpki-client.org