Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa
File:                     b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa (raw, json)
Hash identifier:          vwnay1iz3XKzz5Dzg29tLKWdMGGPckf4sxMq60xI92Q=
Subject key identifier:   EF:38:00:AE:50:3C:3A:60:9C:A6:56:7E:89:09:16:FF:93:01:C2:69
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584524F9B27EB45C4253CE4A0F00
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa
Signing time:             Fri 08 Mar 2024 23:38:17 +0000
ROA not before:           Fri 08 Mar 2024 23:38:17 +0000
ROA not after:            Thu 06 Jun 2024 22:38:17 +0000
asID:                     396982
IP address blocks:        2620:1b2:6d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:f9:b2:7e:b4:5c:42:53:ce:4a:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Mar  8 23:38:17 2024 GMT
            Not After : Jun  6 22:38:17 2024 GMT
        Subject: CN=3b57c0ff-b077-4e74-adb4-ae7f841f3772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:f3:13:c0:d7:29:38:9e:81:ab:bb:68:5d:
                    1c:35:07:a1:b9:6b:39:a9:f3:0a:e3:f8:eb:ef:ae:
                    a8:d8:7a:69:df:c7:1c:0e:6a:a1:d7:42:03:34:6d:
                    9e:8d:53:e1:1a:4b:43:b7:8d:0e:0c:f3:b8:8e:9b:
                    a7:1d:15:d3:11:77:4b:4b:24:33:38:b8:8f:e2:0d:
                    09:ce:b3:85:96:50:90:f1:b3:77:62:89:7b:dd:fa:
                    fb:63:7e:bc:f8:fb:87:35:8b:79:67:86:1b:96:e9:
                    1d:16:d8:cb:67:81:7e:07:77:cd:8d:cd:69:f1:2a:
                    eb:c2:85:9b:de:11:f2:b3:b2:7f:60:67:56:4a:e4:
                    e1:d4:a7:c6:85:5f:f9:7e:9b:b2:13:18:22:29:f4:
                    54:1d:7f:16:35:23:b1:1e:27:c2:01:4b:a8:87:67:
                    f5:1c:4d:02:27:bc:20:02:a7:2e:b5:64:b9:3e:9a:
                    49:d5:84:56:90:24:52:8a:08:f0:5a:46:db:b4:c0:
                    21:4a:2c:e0:d4:64:8d:ff:3c:c0:33:68:85:53:a2:
                    a9:3c:88:28:cc:63:85:99:9a:5d:96:e4:61:02:65:
                    d8:89:12:18:b7:e7:87:b9:82:98:9e:2e:52:da:22:
                    3c:f6:ec:fc:55:c5:42:97:4a:32:e1:70:6f:5d:d5:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:38:00:AE:50:3C:3A:60:9C:A6:56:7E:89:09:16:FF:93:01:C2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b5821df1-8fcb-3fb5-8bea-c2394ae29d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:6d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:14:ba:10:ef:6c:f9:c1:f3:62:72:28:f1:3a:68:69:c8:42:
         e0:5f:a8:f5:14:98:c6:47:05:78:d6:da:5e:01:be:1b:13:42:
         52:c1:ba:04:04:3c:d6:69:05:74:cf:e5:e4:df:4e:5b:0c:ec:
         4e:00:60:02:5d:5d:41:39:2b:1a:18:26:83:c1:2c:c3:c3:36:
         d9:f7:fa:7e:4d:f7:42:de:6f:34:62:f5:3a:ac:c4:16:7b:71:
         de:6f:63:a8:ba:1a:1e:03:4c:19:d8:51:b0:63:00:ee:ff:c8:
         2c:a7:af:61:29:a0:a0:a6:73:a1:22:43:d6:ac:30:0d:f1:57:
         2d:ff:05:8c:1a:e1:df:00:67:96:be:fe:c4:ce:27:17:b6:5e:
         d9:bf:64:39:9c:95:e5:f0:65:3c:ff:68:fa:bb:6c:51:27:b9:
         ee:5a:a6:40:41:cd:07:7c:e2:d9:fb:4d:20:42:58:4d:11:ea:
         f3:33:6f:fd:01:c1:70:60:9d:62:65:2f:5a:4e:82:e2:ad:a2:
         5b:39:73:de:67:33:46:42:b0:f8:99:a4:c5:33:ae:b7:77:b1:
         62:0c:89:fa:27:fe:1b:8e:84:1f:5f:53:56:8d:fd:9e:b9:62:
         52:37:6b:7f:e4:b9:c3:b7:36:85:a0:67:1a:3d:f2:30:db:ab:
         b9:5e:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:05 2024 by rpki-client on console-ams.rpki-client.org