Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa
File:                     066aa71d-ecb5-3507-ab13-9e0344c68899.roa (raw, json)
Hash identifier:          T30D+lqIjijUQDRlxQ6TsQ+wPm3Z7U0SbkA5IE4INOs=
Subject key identifier:   93:9B:75:EF:0F:8C:14:F2:48:FB:38:C6:92:43:6C:70:6B:C4:CF:92
Certificate issuer:       /CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
Certificate serial:       010D0C9F43285845254046925332D3FDF62AE800
Authority key identifier: 3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     20381
IP address blocks:        2620:0:2b10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:46:92:53:32:d3:fd:f6:2a:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=821789a3-5aa2-4762-b5b5-cddcd2bc7805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:db:da:f2:f2:34:02:04:75:54:9f:50:e6:
                    6b:1c:49:de:d8:0c:a3:99:7c:2f:2a:1e:a6:e3:06:
                    d3:b7:17:46:92:cd:21:32:21:99:cf:92:88:5e:60:
                    a8:3f:56:68:ef:b2:2a:ac:40:bb:a7:05:bb:17:c7:
                    00:84:a1:71:42:68:03:a3:d2:db:ec:23:2e:18:60:
                    6f:51:60:4a:7f:5c:c2:36:9e:bc:61:59:83:75:3c:
                    d6:8c:12:02:44:5e:6c:a7:c4:ac:3c:07:d8:34:61:
                    9a:27:24:f5:f5:9e:40:9f:48:58:17:e2:15:be:25:
                    7d:60:fe:d0:82:6a:1c:40:68:a8:5c:bd:3b:4b:78:
                    53:e3:88:dc:a7:5b:34:af:f1:e5:96:9c:44:fa:01:
                    71:82:90:e1:ac:e2:07:65:2e:46:d5:23:a4:fb:32:
                    71:03:f4:f6:64:f1:65:b2:c1:92:c4:9b:61:d1:60:
                    2c:b1:fa:0f:01:de:d8:5a:d1:be:91:33:50:8c:33:
                    76:d4:56:34:7c:aa:70:90:35:6d:64:e8:a9:ce:33:
                    32:21:3b:cf:e9:66:39:a5:5e:6e:2d:97:87:95:63:
                    6c:a1:5a:b8:21:ac:ac:cc:de:7e:0b:48:32:f8:42:
                    bf:ef:ce:71:76:20:6a:8d:4c:07:2b:ca:ba:7b:28:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:75:EF:0F:8C:14:F2:48:FB:38:C6:92:43:6C:70:6B:C4:CF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:2b10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:84:c5:a2:1f:e6:41:78:97:c4:f7:21:01:66:c5:66:28:27:
         00:67:b2:50:29:f6:8d:71:95:a1:ce:1b:40:cb:65:6a:27:54:
         0b:96:3f:eb:81:73:22:9a:f5:ff:14:cc:cd:cc:77:48:8c:f7:
         fd:11:38:17:88:d0:13:90:7e:d2:9f:9e:e7:19:8a:c7:0d:f0:
         18:42:dc:4f:8c:5f:b6:f3:cc:a1:c2:29:01:af:f3:3a:31:05:
         64:dc:7b:78:b9:24:a6:80:85:d7:9a:9f:db:f3:2e:01:b5:8a:
         cd:c5:ac:d3:3d:ce:0f:2d:5a:43:d0:03:53:6e:6b:61:f4:4e:
         7f:93:c6:87:d3:6c:e5:32:52:ae:a1:ea:ab:c6:0e:23:9b:6d:
         cd:6f:7d:5c:9c:f8:49:a9:91:e8:c5:39:81:b7:dc:78:e9:52:
         ad:87:3c:13:1c:b9:b7:b9:e7:ac:91:7c:19:66:95:ca:6e:eb:
         49:0e:12:88:1f:32:1b:8c:d2:00:56:e1:35:4b:8f:87:23:f2:
         af:cf:3c:ff:01:27:68:08:21:a6:25:b4:db:8f:15:8a:da:56:
         ff:32:1e:f9:9c:33:95:e6:b2:56:a0:e9:20:a6:72:48:78:91:
         c0:a5:97:dc:a1:7f:ae:98:fd:07:15:7d:ea:6c:f2:23:dd:cf:
         cb:c3:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org