Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa
File:                     98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa (raw, json)
Hash identifier:          dhrCXiQEA/2V856u4BvbQNMpllkcgdciDHrcqTncB+4=
Subject key identifier:   D2:56:49:72:B3:81:0A:C8:0A:DE:3B:CE:AF:33:F7:BB:BA:D7:21:7A
Certificate issuer:       /CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
Certificate serial:       010D0C9F4328584525404272526900A96E52FC00
Authority key identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     30330
IP address blocks:        2602:803:5001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:42:72:52:69:00:a9:6e:52:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=8b711bab-85ed-432a-99a3-a08ac879fbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:79:75:ef:54:6c:1d:9f:8f:2c:d1:5b:b2:0a:
                    20:3f:c4:df:28:ea:46:26:41:c7:b4:b4:84:41:73:
                    98:7a:c0:8a:b3:52:63:7d:1e:39:c6:51:10:ee:da:
                    b0:76:a4:69:f1:4c:ce:60:ae:37:77:bd:6c:27:89:
                    f1:a0:17:cb:6c:89:8f:17:bf:82:69:9a:8c:02:60:
                    f9:f5:77:be:a6:8b:89:38:be:cc:4e:ee:b5:97:b4:
                    84:2a:8f:ca:b1:9a:93:21:a9:bc:bc:3c:71:a1:f7:
                    6a:19:df:52:74:c9:06:28:a5:54:40:5b:49:ad:65:
                    50:9e:85:22:14:0a:bb:35:4d:ae:49:48:b2:2a:ac:
                    0d:c2:17:6e:99:39:71:e6:c1:44:c6:1b:04:b2:45:
                    59:2a:df:7b:af:01:e0:bc:8f:60:0d:8e:57:0f:ae:
                    42:f7:50:8c:e0:cc:41:58:57:b5:df:47:55:85:4d:
                    34:7c:d1:fb:de:b3:24:c5:de:bd:96:85:5f:c7:a3:
                    ab:94:56:74:ab:ce:54:2e:e7:f5:d0:b0:ec:b8:56:
                    18:17:09:81:31:be:41:2a:a0:e8:b6:86:bf:12:74:
                    a7:b1:d5:2f:ce:28:10:eb:0e:e1:d4:82:23:2b:54:
                    29:21:36:8c:ad:32:65:ec:1f:d6:20:fa:bb:6c:20:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:56:49:72:B3:81:0A:C8:0A:DE:3B:CE:AF:33:F7:BB:BA:D7:21:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl

            X509v3 Authority Key Identifier:
                keyid:8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:5001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:19:70:5e:da:ac:62:fb:7a:7c:c1:b9:b8:b4:9d:7f:82:06:
         19:b6:6f:14:46:74:9f:02:0b:8f:69:95:9f:e6:40:92:41:8c:
         24:e6:41:86:40:f1:ed:ae:bd:d0:00:b5:8e:bf:54:2a:40:4f:
         00:00:a2:46:af:40:b7:4d:24:90:8f:c2:93:79:0b:91:7f:d2:
         98:58:83:db:c2:c4:2e:f4:33:9d:ef:09:a5:d1:af:01:35:b7:
         75:2f:7c:62:e0:d3:95:87:d2:67:ea:39:19:57:d0:36:6b:61:
         0b:4f:07:13:f2:f6:7c:5e:d1:96:8b:be:a2:57:c1:81:9a:5e:
         43:b5:93:92:d6:f7:58:91:95:31:82:c2:a8:ce:14:f5:af:84:
         d0:b3:91:98:e7:b5:5e:f1:0c:67:c5:f5:cc:ea:13:07:bd:2b:
         8e:c4:ed:21:68:44:bb:3d:45:6c:ff:5d:46:f7:df:00:6a:dd:
         1a:6d:b6:9d:3d:9b:bd:fc:4f:1b:e2:63:e8:1b:22:ea:2c:47:
         37:27:f3:7c:b2:ac:d0:43:5c:83:cc:79:3e:be:db:fe:ff:5d:
         8b:20:d9:6b:72:d2:10:c7:37:88:56:be:dc:f6:62:de:22:22:
         5d:00:6a:35:07:a2:61:06:32:0f:2a:fb:24:db:60:67:dd:ef:
         38:1a:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org