Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa
File:                     d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa (raw, json)
Hash identifier:          5Im80mYaO5KYHhkZpiGFv8oa9CBykawILNno1BC50ZQ=
Subject key identifier:   8F:E6:AF:6A:E9:9D:34:CC:D3:74:A7:B6:C2:76:A6:9F:38:23:2F:8F
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584524F92F2E732B6D497E2757C0
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa
Signing time:             Fri 08 Mar 2024 23:37:15 +0000
ROA not before:           Fri 08 Mar 2024 23:37:15 +0000
ROA not after:            Thu 06 Jun 2024 22:37:15 +0000
asID:                     396982
IP address blocks:        2620:1b2:1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:f9:2f:2e:73:2b:6d:49:7e:27:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Mar  8 23:37:15 2024 GMT
            Not After : Jun  6 22:37:15 2024 GMT
        Subject: CN=75df3ff9-bd9c-400b-beff-f2ca98dffca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:b1:7a:f3:a0:36:83:fa:d4:9f:b6:2f:50:
                    24:c8:d8:f0:1f:aa:42:ea:3e:f0:0f:66:76:d3:cf:
                    84:01:95:71:7c:d5:75:a2:20:fa:68:d7:ab:8f:6c:
                    cb:b5:88:4a:90:53:ca:70:72:9c:08:5e:4a:5d:bc:
                    76:8f:53:ec:30:2a:2f:02:49:89:32:aa:8a:01:fe:
                    e4:8a:29:0c:69:0b:e0:53:ed:1c:07:c6:b4:07:38:
                    e2:40:c4:50:02:4d:69:57:f0:19:c1:c6:d6:b5:69:
                    84:e5:6f:31:cd:59:01:04:1d:03:bd:ff:e6:3f:c7:
                    ee:1c:14:37:9f:7b:aa:66:08:a5:ef:09:80:eb:04:
                    cd:c2:ef:f4:28:e9:f3:9c:e4:5e:68:2f:4f:6e:4f:
                    85:20:41:1a:44:ba:1b:4f:2e:08:7b:77:4f:d6:7c:
                    23:85:ed:67:1d:ba:71:49:81:46:d2:38:b1:37:77:
                    50:13:b9:c9:41:6d:02:71:16:41:4d:ca:70:4b:1d:
                    9c:e1:ab:74:03:e1:bb:10:c6:1a:ba:ad:78:90:8b:
                    13:9d:6f:5c:53:f0:ec:1a:fd:09:e7:a8:0a:5c:10:
                    62:57:87:f9:ea:32:9b:79:22:a5:6c:3d:ba:9d:00:
                    1b:69:94:1e:f0:fb:32:3f:52:b5:aa:53:fa:0a:30:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E6:AF:6A:E9:9D:34:CC:D3:74:A7:B6:C2:76:A6:9F:38:23:2F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d1ccf14a-810f-3d2e-9a73-987ed6b3ee71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:5d:6a:93:a0:8e:ef:5e:50:b8:c4:8d:e8:34:83:29:b4:
         27:b2:b4:91:5d:08:d7:da:7a:8c:db:24:fb:b6:2f:25:53:52:
         a1:57:ee:86:c7:0d:27:ea:a5:90:88:3a:40:b5:27:3b:64:20:
         49:de:6e:0e:81:1d:c0:18:01:df:4f:9f:f9:4c:fc:32:d5:c9:
         97:6c:8a:41:fd:d3:c8:a2:b6:8a:b0:01:b5:c6:d0:3c:4f:94:
         e9:2a:48:52:05:33:3f:6e:4e:ed:49:a7:d8:dd:c8:08:22:79:
         9a:94:f3:08:cf:9f:4e:7b:15:51:e1:7f:c4:43:4a:d0:0d:07:
         f8:c1:af:91:50:65:da:1a:b4:6d:21:c9:33:2e:c5:9b:79:c8:
         1b:1e:a0:21:b7:96:e3:17:d2:05:ea:3b:77:cf:a8:d2:cc:93:
         09:d9:a3:be:dd:39:a0:68:18:f0:70:1b:dc:26:e4:fc:d2:70:
         cf:f9:3a:68:e6:a1:4a:ce:14:34:03:a0:57:c6:97:59:d6:49:
         b2:54:2b:19:63:1e:cf:64:de:3d:9f:c7:bb:77:d9:7e:c7:b9:
         f1:32:cc:51:7f:d8:f2:54:a2:c1:03:db:4e:03:39:a1:b2:4a:
         44:fc:22:80:ef:a5:8e:d4:0c:d9:6c:85:96:70:69:3b:23:38:
         74:13:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:11 2024 by rpki-client on console-fra.rpki-client.org