Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
File:                     39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa (raw, json)
Hash identifier:          7rKrjjxBXHR6tTN9FbZjAIUOuN3d4NDF6DsTc7/W01s=
Subject key identifier:   A7:63:5E:AA:E5:D9:86:44:9F:E5:B0:C9:B1:80:28:34:21:AA:93:2A
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F43285845068AC237D677C9CC85F97180
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     3754
IP address blocks:        2620:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c2:37:d6:77:c9:cc:85:f9:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=08f1cd69-7c2e-4704-a5bb-1fb6fbcac0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:36:cf:a5:1e:93:bb:62:e9:e2:4e:d2:fc:c9:
                    e6:39:dd:28:6e:cf:8c:68:06:82:69:85:20:ce:ee:
                    26:55:2f:f1:ec:e2:2c:48:8b:6c:b3:e0:2a:fc:8c:
                    b5:13:ab:83:3c:e7:81:53:75:a7:24:e3:45:a0:4c:
                    c0:61:b1:53:26:6c:f9:53:e7:4c:11:97:ef:5d:03:
                    c8:1f:98:bd:7c:b5:e4:ca:f0:8f:46:c8:47:18:5a:
                    0c:d5:0b:f5:18:f9:56:92:3b:e5:58:ea:83:29:e3:
                    2b:c0:6b:14:98:e0:4b:e8:f3:23:cf:56:f7:bd:53:
                    92:2a:59:92:89:03:56:c0:b8:38:d4:bf:51:26:45:
                    b5:9f:4e:2d:31:6e:c3:b0:f7:f1:8d:fe:9a:52:d2:
                    f1:5a:e2:18:cc:86:c4:93:7e:8c:f0:27:11:f9:01:
                    88:26:c2:03:44:e8:8a:bc:c9:69:58:95:c4:98:1d:
                    fb:1d:3b:19:1a:ce:2c:ce:9f:af:93:9a:92:ac:1d:
                    ba:2a:58:90:0f:80:26:25:ee:b5:84:8d:12:0a:c4:
                    6f:08:7a:f6:97:64:93:91:f0:1b:fa:61:50:e7:8d:
                    50:ef:bb:26:71:8e:f6:56:34:44:1d:86:5b:ea:2f:
                    6c:4d:36:ee:7c:0c:ba:77:cc:1f:79:ae:dd:e0:26:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:63:5E:AA:E5:D9:86:44:9F:E5:B0:C9:B1:80:28:34:21:AA:93:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:0c:bc:d7:c5:ea:2d:8d:0e:95:9b:4e:1b:a6:e0:88:64:f8:
         21:72:f1:75:11:8e:ec:69:68:5b:61:15:41:62:e2:bf:ea:6d:
         cf:7a:a5:eb:3b:8a:c8:6d:47:ec:10:1b:aa:f7:27:98:87:0f:
         75:2b:bf:b2:d4:40:46:62:e5:fa:e9:c9:66:f0:79:94:9e:b1:
         76:0c:51:73:5a:7e:75:64:65:68:ad:a5:6f:32:d5:74:57:34:
         0e:e4:d8:c6:1c:54:bc:b5:fc:dc:75:b8:5e:38:b1:a4:0a:18:
         45:44:f0:d7:49:4f:d3:40:7e:2b:95:8a:53:58:ec:3b:ca:80:
         af:16:a0:ff:20:a3:64:ea:a7:5a:23:86:6c:92:00:73:61:86:
         db:49:f0:a9:1c:b7:23:3a:0c:82:b9:c6:56:06:57:36:0c:8e:
         7b:c1:4d:da:7e:7d:b8:f0:c6:a2:1f:ec:84:2e:54:48:e5:2c:
         92:12:ca:8f:6b:db:aa:54:c2:01:f6:e1:3a:dc:d8:81:63:f1:
         ff:71:b1:8b:bf:d0:97:31:d8:9b:d2:8a:38:ec:17:53:d3:32:
         b2:d9:c7:65:4c:d6:54:2d:3a:3c:6c:34:86:8b:be:56:01:2d:
         99:35:ab:dd:ad:ae:3e:e6:a9:75:59:d5:85:ca:00:4f:be:83:
         3e:65:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:59 2024 by rpki-client on console-fra.rpki-client.org