Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa
File:                     dc302fa6-4889-382d-aa84-e17c21a288f1.roa (raw, json)
Hash identifier:          qc4dcHjzkdFb07PmWui1iVJRoUSIBJnvNiXoAlvxOt8=
Subject key identifier:   9D:A6:2F:09:DE:9B:25:DC:A7:F2:9E:C0:42:AE:7B:E4:7B:D4:98:27
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F43285844FB600834B6384E8F81B375C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2620:147::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:08:34:b6:38:4e:8f:81:b3:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=4d014341-45a3-4ec6-91de-7300af2adcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:7f:b7:c2:ae:c9:e5:8d:12:4b:18:84:d4:
                    d2:fd:a3:79:8f:1b:9c:28:25:67:35:18:f6:8d:ac:
                    05:74:4b:6e:60:b1:11:84:7f:7b:54:5f:10:03:e7:
                    ee:6a:bc:15:b9:42:23:3f:fc:6e:30:e9:34:42:2f:
                    c0:94:a2:cb:24:fc:79:8d:ca:f5:66:70:90:46:a0:
                    b8:63:c1:8b:bd:89:99:f1:1c:46:c2:f6:db:ca:38:
                    e6:1f:e0:51:c3:9b:83:f4:b4:e0:5f:a7:54:93:71:
                    a5:d5:c0:90:dc:7c:81:ac:eb:15:c4:80:c4:6b:5c:
                    10:08:3d:de:50:40:c9:e3:60:be:fa:de:aa:f2:c8:
                    a0:1f:49:4b:a3:d1:70:d2:29:76:7c:77:fe:a6:60:
                    ea:be:e0:ae:6f:54:07:3b:a0:05:1f:46:f6:3b:ff:
                    fe:3a:3a:36:81:e3:03:52:a1:a9:4a:4a:1d:ee:99:
                    82:8c:04:85:7e:64:06:be:17:81:2d:45:14:ef:bc:
                    ce:00:44:bf:f9:63:9f:d8:f4:2c:54:57:89:e7:f8:
                    ab:4d:d6:2f:14:5a:b9:38:23:de:8d:11:5a:8a:af:
                    30:09:b5:95:d7:9b:c6:c4:8d:82:cd:62:71:94:ab:
                    e6:6f:0c:a2:88:e9:36:61:62:71:26:63:f5:85:35:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:2F:09:DE:9B:25:DC:A7:F2:9E:C0:42:AE:7B:E4:7B:D4:98:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dc302fa6-4889-382d-aa84-e17c21a288f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ed:ed:77:0a:fe:a1:87:1f:46:fd:12:17:48:c5:88:d8:ba:
         8f:99:dc:3e:a8:f5:95:39:59:39:dd:3c:97:4a:e6:cd:1d:db:
         18:34:ca:0e:30:ec:ec:85:4d:31:c9:79:b0:84:46:31:7a:8f:
         c9:47:52:19:29:fb:b2:31:17:d4:8a:61:6c:99:73:eb:ba:1f:
         ae:17:d3:aa:a1:46:28:b6:ac:80:9b:e2:af:93:e6:09:61:98:
         08:be:29:1d:34:8f:81:db:d9:f3:87:44:45:ac:44:c2:5c:35:
         35:d6:2a:ea:8f:4c:e3:32:c3:3f:30:8f:60:11:7e:21:12:81:
         f4:f7:71:c1:5a:c5:05:10:82:c5:cf:0c:23:27:67:38:d2:c5:
         6e:cc:71:c2:77:b5:96:99:4b:86:16:a8:eb:f5:a6:b1:08:17:
         3a:b0:58:a6:fe:4d:39:a8:d1:47:ee:94:ff:ee:f6:57:35:25:
         01:2a:96:8c:bd:5a:30:14:42:37:3a:a1:68:05:d3:13:5a:be:
         16:a5:16:b6:58:2b:8f:d7:5d:80:fa:b8:6b:18:e9:a2:8f:4e:
         b0:42:0a:b3:a6:d9:b6:4b:aa:00:5e:84:7b:d7:1b:c6:21:3d:
         e3:7d:dd:f3:01:70:98:cb:f2:bb:a8:44:29:df:d3:2d:75:1d:
         7f:9c:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:08:45 2024 by rpki-client on console-ams.rpki-client.org