Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa
File:                     4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa (raw, json)
Hash identifier:          UkRxA6uXCPubNnpkhUsoDe2xsE9T4JlMGMsCpy54N9U=
Subject key identifier:   07:3A:53:EF:C9:79:BF:DC:79:30:95:3A:54:A4:36:6A:04:4E:6C:D0
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285845EF89339CF708FBBFE6E2F700
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     30103
IP address blocks:        2620:123:2098::/48 maxlen: 48
                          2620:123:209a::/48 maxlen: 48
                          2620:123:2099::/48 maxlen: 48
                          2620:123:209b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:33:9c:f7:08:fb:bf:e6:e2:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=5e5aac25-b35d-4d52-8bbc-e176a2d00d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:35:9a:89:d2:6c:30:7c:6c:e7:13:72:1d:
                    31:1c:8f:f7:65:6b:47:71:1c:3e:2a:b2:11:e0:a1:
                    64:1e:a3:bb:68:9c:28:88:98:fb:f6:4c:5d:d6:65:
                    2c:4f:6d:3f:e8:03:28:a8:cf:38:a9:fd:bd:b5:4f:
                    6c:8d:c7:9f:16:6b:c3:15:dc:c5:b9:ca:fa:a8:c9:
                    3f:22:e7:e0:20:2e:da:cd:92:7d:0a:5d:48:c3:d7:
                    a9:2e:a3:84:56:1c:be:12:6c:58:c1:54:3a:3e:6a:
                    7c:35:bf:48:e7:a9:1d:ad:a9:aa:19:54:83:61:15:
                    a0:63:4d:a4:71:46:9c:d1:83:ce:12:5f:6f:84:0e:
                    3e:d7:b2:a5:57:a9:3a:cd:4a:a1:cb:0a:6d:66:a0:
                    0a:88:ac:bc:5d:ba:7f:81:d2:27:2b:c6:26:a9:23:
                    aa:14:ec:6d:bb:f5:66:3e:4c:f4:8c:30:3e:22:b4:
                    3a:ac:33:0f:e2:41:b3:2e:2c:98:54:10:9f:28:8d:
                    04:16:46:6b:c9:ee:72:3b:5b:3a:33:ac:b6:cc:6c:
                    a0:3e:8a:14:b1:87:09:b2:a1:e3:21:77:6e:af:36:
                    f0:1d:51:6d:31:23:63:b7:ed:cd:03:25:d2:62:aa:
                    e4:26:7a:c1:f2:0c:53:ac:90:08:87:a7:8a:6c:37:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:53:EF:C9:79:BF:DC:79:30:95:3A:54:A4:36:6A:04:4E:6C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2098::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:27:80:62:1f:7b:22:90:2e:18:d2:a0:9c:1b:4c:bd:2d:ea:
         b1:8a:9a:b3:25:15:34:bb:b2:c7:66:8d:d3:9d:0f:26:84:b6:
         87:1a:18:07:79:84:a0:99:c3:b7:3e:2b:2b:7c:8b:8f:03:c1:
         62:1c:9d:f6:e1:01:f5:f9:db:15:98:06:68:72:8d:20:67:86:
         27:fc:5b:0c:8f:19:a6:3a:80:b2:90:8e:68:50:8c:82:34:fe:
         7f:3a:b0:a2:86:db:f5:7a:16:a2:db:a0:58:a2:c8:63:87:e6:
         05:71:81:0f:4b:e4:cb:46:53:be:9f:ca:a8:ce:13:ed:3d:c1:
         22:7f:f0:49:1b:2f:08:7f:b8:d7:02:fe:fa:ff:c1:a9:ed:86:
         e4:2e:ae:ef:2e:de:92:ac:e9:68:7c:d0:00:09:ca:b0:33:9b:
         2d:10:00:6e:21:e2:de:78:6b:42:61:6e:61:6b:2c:2c:57:65:
         e1:f4:39:0b:06:09:d3:9d:71:e1:15:dd:6a:44:08:53:70:b5:
         e9:05:e5:2d:a8:20:22:89:a3:31:e7:aa:a5:29:af:c7:45:10:
         7a:00:09:bd:d6:41:d9:e6:0c:95:8b:76:27:d7:8a:17:16:f5:
         1b:dc:8d:5e:56:75:29:ef:4a:3b:3b:8d:5e:8e:a1:84:c5:b1:
         83:70:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:26:34 2024 by rpki-client on console-ams.rpki-client.org