Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13df90db-d4a2-3844-8606-511d239a1941.roa
File:                     13df90db-d4a2-3844-8606-511d239a1941.roa (raw, json)
Hash identifier:          6lj8RMec2p9dn48k1ab9CwkSwN03mTq2MQ+Z14Mqt6c=
Subject key identifier:   8A:DD:38:19:17:03:E2:1E:F4:09:03:6C:EB:E1:72:89:A5:F2:30:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB3A12A69F5AEC217C4F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13df90db-d4a2-3844-8606-511d239a1941.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33666
IP address blocks:        2603:24c0::/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:3a:12:a6:9f:5a:ec:21:7c:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=35fd14f8-9c4d-43c2-a73a-5ac9aaeb5923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:3b:f1:65:e9:76:15:94:71:6e:27:4b:e3:
                    39:44:96:96:83:7c:10:81:3e:25:84:d4:8c:56:5b:
                    75:ea:e2:2a:0f:51:60:c1:93:3e:90:b1:89:42:7a:
                    f2:bf:37:37:28:fa:98:40:f1:93:37:6d:84:b8:30:
                    b5:54:f0:5f:45:be:51:62:1d:51:f9:cd:f9:6f:d7:
                    c2:52:90:5b:fd:10:9c:94:64:71:67:f5:19:b9:83:
                    6e:64:b8:85:d7:03:c7:b0:2a:2d:3b:10:fd:1f:14:
                    40:82:60:48:24:f3:44:60:ea:d1:3e:ff:8a:c5:1c:
                    e3:c4:fa:4a:61:49:72:b3:96:f6:06:45:fd:c1:bf:
                    f7:b3:06:f3:49:0f:25:d0:d2:0e:19:da:7c:59:32:
                    63:af:31:ec:63:cf:df:02:38:bf:5a:e7:d5:6c:8e:
                    63:0f:ed:6b:fc:4f:eb:f4:d4:0b:da:2c:65:14:e7:
                    d9:6b:8e:2e:33:20:5a:dc:c7:83:11:2c:6b:df:50:
                    35:81:39:09:09:dd:60:b1:84:69:67:dd:70:48:1b:
                    fe:87:13:4b:87:c7:24:3a:74:1a:c0:92:fe:ba:8e:
                    43:18:54:63:39:e1:01:8a:54:17:f9:04:b1:30:38:
                    93:0a:ac:d9:7f:e3:a2:95:4f:04:4f:20:4f:9e:8d:
                    3b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DD:38:19:17:03:E2:1E:F4:09:03:6C:EB:E1:72:89:A5:F2:30:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13df90db-d4a2-3844-8606-511d239a1941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:24c0::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6a:72:c0:2f:5d:75:c3:6b:b3:26:88:51:a4:88:3d:7e:0a:
         43:8c:3f:cb:5a:2d:25:5e:7a:8f:14:97:24:4f:3a:47:77:4c:
         9e:d9:c5:2b:d7:b6:fd:cf:20:b3:da:19:e5:6a:0d:dc:4e:b6:
         a4:1b:98:20:57:27:57:66:b6:54:1a:92:ca:37:fb:e4:a1:30:
         fb:a8:e6:4b:79:ac:18:1c:8f:05:62:c6:68:81:e3:29:93:a8:
         6a:50:62:15:0a:a2:c0:67:4b:84:2a:b5:bc:87:5d:de:6b:15:
         2a:7c:1b:18:aa:3a:51:13:61:cb:90:90:9e:5f:b4:e8:b0:6c:
         a1:3d:a0:f7:b4:e8:21:1f:df:a2:89:de:f0:99:3f:8e:7f:74:
         2c:ca:bb:11:3c:f1:f9:fd:c3:1f:52:67:f0:0d:87:5e:a0:a7:
         0d:0a:5e:d4:ad:91:ed:c6:be:35:c8:d7:e2:30:d6:86:4f:b9:
         b7:d5:ad:6d:b5:ae:1d:a2:59:fc:b6:05:13:b9:b8:cf:00:5e:
         f5:d2:ce:6c:59:da:40:99:24:8d:a8:e5:e4:96:94:b5:6d:0c:
         77:91:d2:3c:c7:d8:1d:28:51:ef:10:a8:2b:8f:85:da:08:6c:
         57:d4:71:ad:12:45:60:be:5c:c2:65:3f:82:cd:d1:17:26:c4:
         a9:c0:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:35:08 2024 by rpki-client on console-fra.rpki-client.org