Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bdec801-f0f4-3d65-a2cd-38f9b7ae2512.roa
File:                     1bdec801-f0f4-3d65-a2cd-38f9b7ae2512.roa (raw, json)
Hash identifier:          rIrnqzdmMhSdQKpitrr2m7GcH4jwAYS+bdixJjVWzro=
Subject key identifier:   2F:86:E4:69:16:87:D2:8B:9A:D3:71:BC:5F:DA:7F:5B:52:6B:4F:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC896EE83744AB6F1559F970
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bdec801-f0f4-3d65-a2cd-38f9b7ae2512.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        2603:301d:1d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:6e:e8:37:44:ab:6f:15:59:f9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=1a81a830-85a9-4569-af5f-5355ed5a3bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:7c:ff:ca:c0:02:c4:d8:00:77:b5:23:fa:
                    25:a5:6b:76:76:0d:e8:8a:48:c4:a9:3e:02:74:f6:
                    e7:4f:49:7f:af:ba:95:b2:3f:f8:50:6a:d1:4b:86:
                    be:a5:3f:99:a1:98:a4:a2:16:d6:29:2b:c3:14:93:
                    e5:f5:b6:98:3d:c2:46:c3:63:4f:4d:54:ec:f4:71:
                    8f:e5:88:b4:b9:e5:e6:c6:ba:64:d7:22:ae:ad:74:
                    47:58:11:1c:d0:5e:de:fe:66:2f:03:ca:ac:57:84:
                    9c:dc:02:3d:f1:37:9e:98:a2:da:7a:ee:a8:a7:3c:
                    e0:e6:d6:58:41:ef:c0:da:ea:5c:d2:90:38:d0:dc:
                    6e:48:50:93:fc:fa:5b:8d:97:5c:1a:1b:73:c4:06:
                    84:2b:b1:09:83:d2:57:ba:d0:8b:3b:74:65:b1:c3:
                    32:0a:9a:6a:1d:be:08:0d:c0:16:bd:b0:ab:85:3c:
                    da:aa:cd:75:7f:b2:63:6b:32:be:f2:88:98:6e:fe:
                    40:08:61:ef:10:e7:52:e0:f5:df:27:d7:fb:be:b1:
                    19:69:e5:8f:31:6f:ca:d2:eb:b0:80:a5:33:e7:b9:
                    a6:e1:3b:b2:11:c4:8d:fc:79:aa:6d:6c:5e:50:d1:
                    64:c5:c4:88:cd:91:65:55:8b:3d:a4:c7:15:54:9e:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:E4:69:16:87:D2:8B:9A:D3:71:BC:5F:DA:7F:5B:52:6B:4F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bdec801-f0f4-3d65-a2cd-38f9b7ae2512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301d:1d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6e:86:04:16:ca:06:96:91:5b:f9:13:e4:7e:36:b0:bb:f8:
         a2:4d:5e:79:aa:4c:13:2e:0d:62:06:a6:98:5b:04:47:a2:d3:
         ab:1f:1c:ad:0b:a4:22:4e:2f:dd:51:5d:6a:e4:b9:87:5d:9d:
         9e:98:cc:56:96:20:de:62:66:b2:88:d3:71:b7:9f:05:6f:7e:
         13:08:93:8c:cd:82:b5:73:47:f2:54:07:cb:c6:43:06:29:9b:
         e6:69:67:be:ff:df:c4:91:7a:d7:ff:46:0d:15:a3:d2:c2:20:
         46:e3:02:61:e7:3d:30:b0:3f:b4:61:53:06:50:a4:9e:dc:54:
         b4:be:0d:1b:03:f4:61:a8:f2:7f:86:50:c5:d3:d8:58:f0:37:
         28:d0:99:84:c8:04:e6:bd:cb:51:47:ae:14:9f:d4:77:6f:29:
         a8:80:ee:c5:a2:61:2a:2b:f2:fb:05:67:11:32:97:e0:94:43:
         26:80:b8:03:da:4a:fa:1c:17:0c:63:ef:75:45:8c:d1:1a:b0:
         4b:0c:17:1d:9c:72:ea:be:70:25:7d:c7:62:1c:ee:15:cd:27:
         90:0c:4f:ea:6f:45:6b:53:c6:36:87:f6:c4:52:82:c0:89:12:
         48:9e:b3:98:38:a4:74:4a:54:b9:ed:ae:f4:c0:f3:5b:86:a2:
         ac:5e:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:57 2024 by rpki-client on console-ams.rpki-client.org