Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
File:                     503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json)
Hash identifier:          2BBz934V5bZK3RmBfnAv5MVj6TGnqm8GsIwwmv86Ud4=
Subject key identifier:   86:B6:EB:6C:D7:E9:A9:3C:F5:97:0E:E8:90:0B:36:B2:BF:71:2D:12
Certificate issuer:       /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial:       010D0C9F43285845C5A8F0DA7D25753A3759F080
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     30242
IP address blocks:        2620:84:c000::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f0:da:7d:25:75:3a:37:59:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=63a7d5c5-a1fd-4ba6-8e31-224e474a6ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:5e:25:a1:34:b8:06:f3:53:6e:cf:89:9a:
                    e5:6d:e3:df:72:54:ac:63:d3:02:7d:28:b3:37:d1:
                    96:18:06:7f:2d:2e:39:42:9f:a2:e9:89:46:2e:ca:
                    cf:1b:ca:a5:04:b5:31:d0:7b:ad:bb:69:10:27:59:
                    a1:f6:fe:20:91:2c:fc:27:98:ad:f6:7d:a5:c3:cc:
                    10:01:6c:ee:35:4b:71:b1:78:c8:46:d5:e8:90:72:
                    10:e7:13:0c:c7:2f:12:15:11:1b:38:37:a8:d2:9a:
                    83:4c:ef:60:16:e6:c3:38:51:72:d4:0c:cf:da:d2:
                    02:9e:30:f1:a5:70:c3:3f:4f:06:12:f5:f9:74:af:
                    a0:45:b3:ee:83:0a:fd:99:a5:b9:84:46:ad:2d:63:
                    ec:d0:c4:00:c9:84:89:7d:d1:58:22:28:27:47:3a:
                    ba:8d:8e:d6:4c:a5:89:80:7a:32:34:cb:49:b3:4f:
                    70:71:89:11:23:26:0e:97:90:68:b8:82:a7:08:68:
                    8b:dd:eb:57:4d:2b:f2:df:3e:5d:da:97:79:44:f9:
                    92:15:b6:4e:9b:8d:77:1c:f3:5c:ea:54:96:5c:ae:
                    30:c3:17:3c:06:32:c9:60:5c:f2:ec:6c:1d:7f:66:
                    2e:a8:08:cc:67:b4:4b:ba:78:00:8b:06:8b:30:ad:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B6:EB:6C:D7:E9:A9:3C:F5:97:0E:E8:90:0B:36:B2:BF:71:2D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl

            X509v3 Authority Key Identifier:
                keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:84:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e6:c8:d2:8e:1e:e2:63:d1:1d:a5:ea:ff:9f:c1:92:cb:df:
         b8:33:da:ea:1f:bb:d8:3e:03:dc:36:01:d7:a2:32:0d:11:82:
         91:40:f3:b8:e6:61:b7:96:1f:47:0e:55:be:d8:e9:a6:fe:d9:
         6c:74:8b:6a:96:53:8b:c1:d9:f2:68:ae:75:85:aa:9e:f7:63:
         8f:ec:52:8f:7c:02:3e:7e:89:71:ef:b0:0d:12:69:61:2d:4e:
         3b:d7:0a:09:59:16:4c:4d:f1:68:10:c4:96:4c:db:7e:a0:f0:
         23:1a:d1:b1:65:08:93:ec:5f:cd:b6:73:12:07:0f:8c:8e:ec:
         72:91:2d:9e:6e:f8:ad:9f:94:e4:db:8b:02:d7:34:55:97:cb:
         3f:d0:ce:2d:10:96:42:f4:87:04:34:57:f2:fa:5b:70:e1:25:
         b8:1c:bb:e6:ef:30:a8:f3:14:f5:0b:4e:97:a0:1c:04:31:e8:
         37:07:fa:2f:62:d6:cf:4b:09:d2:93:38:18:7e:e9:f4:13:25:
         97:3b:bc:19:ad:b9:3a:62:c3:83:62:1b:bf:5e:64:33:0e:bc:
         45:89:f0:7a:f0:f9:01:c4:0c:86:29:88:90:fa:c2:32:c8:70:
         12:5d:c3:53:2a:31:b1:c0:95:54:b5:01:82:26:56:d5:9b:ba:
         6f:fd:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:06:22 2024 by rpki-client on console-fra.rpki-client.org