Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa
File:                     41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa (raw, json)
Hash identifier:          Y4hEoHqRC2Um9BVjscBREz5jFiqYYbf7FeULwu2FNYM=
Subject key identifier:   AD:86:1D:61:59:DC:91:04:F6:3A:99:19:67:3F:C7:51:19:FD:A5:C4
Certificate issuer:       /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
Certificate serial:       010D0C9F43285845612867445E479B1716FCFC1A
Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     32334
IP address blocks:        2620:17:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:67:44:5e:47:9b:17:16:fc:fc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=f0aa17e4-7117-400b-ac29-dce67730a81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:9c:b4:1e:64:db:d4:3b:c5:38:08:04:5c:
                    b0:ad:9d:5d:d8:1e:f3:f7:f3:73:ab:08:0f:45:77:
                    1a:d0:cc:3a:0c:93:31:4c:e1:ad:ad:3f:25:2e:46:
                    9b:35:c3:e6:18:23:dd:7d:91:11:ad:e2:d7:49:54:
                    b2:8a:3a:dc:20:ab:f8:ac:dd:0f:45:b1:ba:07:78:
                    2d:25:26:38:34:73:f1:f5:32:91:f5:52:10:07:27:
                    27:bc:11:66:ab:c5:a2:1d:3e:97:fc:28:a5:40:d3:
                    3a:05:0d:2a:1b:09:cb:0b:b5:f8:48:98:17:09:7e:
                    a5:f0:43:a9:9e:69:22:5d:38:4e:ea:0c:8e:38:98:
                    88:47:1c:3c:cc:30:58:c0:0d:e5:ac:78:3d:a3:9a:
                    fe:7d:43:29:ef:20:1b:ab:42:a7:fb:22:61:0b:e2:
                    ca:4f:1a:de:dd:ac:f5:6d:58:63:fc:fc:13:a9:41:
                    cb:84:ba:33:5d:57:26:e9:1f:e5:fd:f9:1c:0f:41:
                    78:34:55:94:b3:62:01:f1:a4:29:17:1f:45:5c:44:
                    43:f1:48:ba:ca:0a:b6:c1:84:23:eb:c1:c8:f7:df:
                    a6:7e:6d:98:2a:bd:6c:6e:c1:7e:7a:19:1b:7f:3c:
                    52:ae:ce:48:83:74:9c:ba:0c:40:11:2c:27:bd:6c:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:86:1D:61:59:DC:91:04:F6:3A:99:19:67:3F:C7:51:19:FD:A5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:17:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:8e:0d:72:8f:ae:70:b4:b7:31:a9:84:7e:93:f7:b4:f9:
         4e:49:cb:75:e2:2e:94:f4:ab:56:f2:ce:6d:24:85:63:c9:8a:
         c9:96:2a:da:f9:9b:3d:1b:2e:f1:08:99:af:24:ea:80:73:45:
         53:7a:74:f9:62:80:eb:77:d4:65:8e:37:3c:fa:a9:37:f3:02:
         0f:e6:52:75:4e:78:ac:85:36:b0:72:d7:79:14:b3:16:f2:3f:
         8c:b8:14:90:dd:71:8c:ab:45:8e:7f:76:a9:25:51:81:fe:8b:
         4f:72:bf:0b:25:6f:42:f0:38:b1:24:42:2f:13:9c:46:b9:75:
         11:e8:e6:51:65:89:7e:cc:b3:4e:1e:bc:de:2d:22:69:ae:2b:
         74:79:00:09:6e:35:4b:dd:36:e5:45:6d:17:86:27:0c:04:bb:
         3d:96:34:a3:7e:aa:45:ec:a1:9c:ec:74:72:47:df:4e:f0:df:
         b9:38:7c:4a:14:8d:d9:4d:f4:df:ac:28:a3:1f:70:e2:a6:33:
         ab:d6:6d:c9:7e:8a:28:36:c6:f1:81:18:cb:e5:ec:d2:00:f1:
         4e:56:74:59:57:8a:52:d7:af:4f:33:dd:e5:b1:92:d7:24:b7:
         93:f7:24:3f:9c:75:96:82:b5:c5:71:d9:b3:2a:1d:6f:b4:74:
         1b:b6:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:38:43 2024 by rpki-client on console-fra.rpki-client.org