Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa
File:                     3af3759a-1d33-3553-bb4a-6789e2c80c41.roa (raw, json)
Hash identifier:          CP6Z03zQaLqpooBbgeok9GR+r2a2nX0I0m+VkvM8T3Y=
Subject key identifier:   B7:9E:49:BA:28:C4:D7:E0:81:AC:2E:38:BB:3E:E8:5B:94:58:5F:AE
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285845D933DB8480585CFC72521CA0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     30103
IP address blocks:        2620:123:200b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:db:84:80:58:5c:fc:72:52:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=2902970d-ef6e-4089-8b93-370e087281b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:c4:9d:de:12:45:08:ed:01:58:37:f2:d5:
                    3d:10:51:d3:95:5b:19:ca:88:44:20:49:1a:0d:05:
                    8f:4d:6e:4e:e5:ca:bb:a4:af:c2:31:9d:d7:9f:86:
                    ee:ed:5e:32:d6:74:6d:9a:c3:54:3b:d1:bb:e0:4c:
                    db:a0:76:55:0d:9a:19:37:2f:05:19:cf:b0:fa:29:
                    22:a6:9d:bb:19:de:21:38:3b:5e:70:4b:9c:44:84:
                    76:d2:2d:a8:71:61:cb:f9:5d:cf:6d:7c:60:b7:29:
                    6b:39:3e:18:a7:98:f8:e1:2e:94:49:2b:cd:92:a5:
                    3a:8b:4b:45:c2:17:3e:40:2a:9c:7a:e0:6f:ff:34:
                    2e:ec:5a:75:75:1c:27:8b:99:1c:8d:c8:31:f3:65:
                    66:fa:70:87:3b:5d:2e:9c:f0:1a:17:43:bb:68:4a:
                    d4:81:3b:39:af:b4:6f:be:4d:f9:96:9b:fb:2d:f3:
                    27:34:19:6b:f7:f7:6e:84:9a:f4:77:42:62:98:f8:
                    e1:56:7e:8c:14:9a:76:b9:19:49:90:aa:a1:f2:8f:
                    47:bd:cc:8a:c7:ff:f5:3e:bd:20:f5:e3:69:da:07:
                    fb:3b:d8:bf:7c:b2:7c:4a:22:ab:6f:ec:41:52:f8:
                    7a:da:ea:6f:d3:07:34:8d:a3:01:6a:ce:6e:1e:37:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9E:49:BA:28:C4:D7:E0:81:AC:2E:38:BB:3E:E8:5B:94:58:5F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:200b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:19:38:18:35:7e:7b:6b:8e:b5:eb:35:c9:21:de:26:54:
         dc:8c:b1:f8:a3:eb:a1:89:31:ed:11:25:29:25:a2:96:fd:e4:
         97:ea:02:9f:cb:c7:d7:87:80:0a:c1:3b:c6:70:5a:e8:df:bb:
         2c:d2:1b:c5:9f:10:d5:a5:0b:5e:27:a8:b9:14:3c:58:30:99:
         0b:ab:0c:55:6a:c6:33:d8:89:2b:7f:9d:de:e2:a3:4e:a4:46:
         f8:4b:52:51:4f:1f:48:a3:91:eb:91:dc:9d:9d:bb:c7:08:86:
         cc:23:83:0b:5e:40:6a:da:84:2b:b1:c8:a3:19:b1:39:1e:70:
         8c:4b:71:8e:c6:cc:35:95:af:95:e6:63:8c:b9:2a:7a:71:9b:
         96:4c:b2:55:1d:cf:2c:2d:0f:1c:2a:64:54:3f:ad:56:f9:31:
         c7:26:c1:d4:51:5b:69:a1:26:11:97:fa:46:d9:77:e9:06:9a:
         30:30:ca:7e:5c:52:70:88:f8:d3:55:33:96:1c:24:11:3f:c7:
         cf:ee:56:1c:bb:70:6f:32:a8:3d:01:47:8d:35:bd:28:ac:b3:
         c2:d8:9d:ac:a8:2a:80:30:6d:52:a4:d9:4c:18:4d:07:b9:a2:
         20:12:bf:d6:53:2b:99:4b:af:dc:96:38:55:b8:d1:9e:ea:61:
         82:e6:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:26:34 2024 by rpki-client on console-ams.rpki-client.org