Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa
File:                     0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa (raw, json)
Hash identifier:          uKnCAanpo7hZARYtx9V7YmoIE+BtmqJV6OhcknF0210=
Subject key identifier:   52:5D:B4:57:4D:EE:36:99:85:65:01:57:76:31:AC:57:B8:64:03:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB32588040CA09C16F4D50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2603:3011:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:32:58:80:40:ca:09:c1:6f:4d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=49f58bc1-31e8-4162-8729-d3bede994cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:c9:6f:10:25:f6:1b:b3:1e:24:bd:8b:08:
                    de:d2:ac:34:83:0f:72:f1:bf:aa:ae:91:bc:d8:df:
                    74:ac:ab:62:43:fc:f3:8d:55:42:1f:cb:27:90:06:
                    24:3e:36:41:cd:59:1f:9f:c7:99:ea:eb:44:91:04:
                    fc:bc:9f:6a:e8:34:37:44:35:32:22:04:59:b9:17:
                    be:d9:e0:3f:e9:f2:3c:b3:43:3a:39:44:2f:7f:b4:
                    ae:10:67:08:85:51:0f:ab:17:0d:29:dc:4e:f1:29:
                    7f:f1:8b:13:08:6b:a5:06:6c:7e:bc:29:13:29:bf:
                    49:a1:b6:f1:53:34:d5:c3:4b:b2:af:fc:b6:ec:41:
                    64:cf:41:b4:af:71:b9:11:08:d4:2d:ad:4f:67:c9:
                    e7:55:4c:87:f9:28:3a:49:7e:fe:4e:66:82:e2:8c:
                    78:d4:91:e9:dd:7f:fc:f2:fb:c6:46:bd:2d:1d:4c:
                    50:22:19:d1:35:98:b7:ef:56:07:41:de:c0:9c:b9:
                    8a:aa:e7:9f:ac:dd:65:3c:c3:21:b2:45:5b:e3:44:
                    21:db:04:74:ad:0c:ec:71:b7:8b:28:d7:11:a5:12:
                    ae:8d:2a:69:d0:9b:09:da:4b:5a:6b:2c:9b:8e:59:
                    09:f3:8d:1d:00:0e:6e:70:b5:db:8a:26:f1:24:c3:
                    7a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5D:B4:57:4D:EE:36:99:85:65:01:57:76:31:AC:57:B8:64:03:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3011:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:10:30:76:43:86:f9:21:c4:35:59:16:61:7b:ee:90:dd:79:
         e5:8c:45:1e:a0:7e:57:85:29:92:9f:cb:26:f6:de:10:13:7d:
         cb:1f:ca:d5:16:b1:cf:d2:b1:3e:19:1f:38:26:e7:e6:22:e2:
         d9:7e:6a:20:42:74:27:42:21:f6:44:73:a6:c7:74:4a:f6:4e:
         a3:b4:a4:25:ce:d7:6e:41:a7:21:25:5d:4c:7c:6b:ca:2f:8a:
         76:23:82:fe:c9:25:a0:29:e5:40:8e:88:df:b0:b9:be:72:a1:
         3a:89:ad:7d:9c:a5:ed:a6:a7:d4:c9:7b:c3:17:f8:b0:5f:f6:
         ae:ef:b0:b6:99:79:50:bb:60:c0:6f:11:14:10:c9:ab:66:8c:
         91:74:17:e9:7f:3f:93:4d:6a:b6:92:e1:55:12:f3:f0:32:d2:
         ed:4a:e8:8d:5c:e3:ec:f1:ff:0d:b6:da:3a:47:e3:3a:85:d3:
         09:8c:ba:fc:27:96:91:32:a9:68:94:e7:d9:ae:95:54:e0:41:
         c9:6d:86:33:74:a2:71:77:11:6b:b3:14:a8:c8:b8:1b:0e:62:
         23:16:4f:72:b7:ee:04:81:38:5b:7a:05:8d:a7:2a:a3:41:4f:
         45:5d:26:12:7e:44:e7:3a:79:63:d7:e3:69:11:c1:dc:1a:90:
         f2:34:58:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:34:39 2024 by rpki-client on console-fra.rpki-client.org