Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cc3e969-c03f-38ff-ad57-fd51a0614dcd.roa
File:                     1cc3e969-c03f-38ff-ad57-fd51a0614dcd.roa (raw, json)
Hash identifier:          z4uwhF6T3g15dtJq+9KwGxAeJ8RYsAE6hCWUW+hUAS4=
Subject key identifier:   EB:97:3E:0C:63:E8:FD:C8:61:80:8C:30:38:DB:EF:F4:7C:AB:3E:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8A11B69525F5889068AE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cc3e969-c03f-38ff-ad57-fd51a0614dcd.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        2603:2048::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:11:b6:95:25:f5:88:90:68:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=29fb5199-d77f-4558-9c30-7e90778c6408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:9e:26:0d:94:15:fe:88:b6:dc:42:17:18:
                    07:eb:d6:17:bc:60:26:1e:60:23:fb:04:49:05:9b:
                    22:10:69:f4:83:7d:89:40:e3:08:bd:dc:7a:94:a5:
                    3b:af:8e:10:bf:9e:f0:a7:69:65:60:c8:c2:e9:b7:
                    3d:13:b3:9a:43:32:cc:be:54:62:6b:e0:75:6f:11:
                    dd:63:f3:ec:68:ef:86:48:91:bb:4f:7b:d8:7a:50:
                    cf:48:4b:ba:85:90:75:f9:1d:66:bc:b2:1f:b1:31:
                    8e:9c:bd:67:9a:f2:59:e3:e7:64:61:c7:3c:9c:f2:
                    dc:2a:0b:dd:c7:15:87:cb:61:fb:d6:52:e3:74:0c:
                    9f:f2:b3:37:dd:72:49:03:25:1c:98:3c:23:05:3b:
                    79:0c:69:36:1f:3a:0a:38:29:d4:2a:05:b2:48:34:
                    6c:91:19:9d:7b:de:dc:9b:55:76:85:9b:b5:09:d3:
                    37:60:c6:a8:5b:1d:74:8f:b1:e4:fa:89:d5:a4:49:
                    19:77:4a:5d:0b:74:25:b5:44:db:c6:d8:53:83:5e:
                    5d:a2:69:df:14:16:3a:98:f9:74:be:fd:f1:d5:69:
                    a7:bc:2a:1c:3d:7e:e8:7f:a7:fe:a3:6e:0c:05:5a:
                    af:06:07:05:bb:a9:ee:3b:41:b4:97:b3:22:88:e7:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:3E:0C:63:E8:FD:C8:61:80:8C:30:38:DB:EF:F4:7C:AB:3E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cc3e969-c03f-38ff-ad57-fd51a0614dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2048::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:e7:4e:10:50:bd:22:ed:56:b5:fd:5e:f5:87:5b:bb:84:02:
         cd:20:8d:a2:e6:13:c5:af:66:80:72:8b:ad:d5:e7:c3:96:c4:
         82:d1:de:08:fe:f5:4d:fb:fb:2a:23:ac:19:0e:97:3b:bb:53:
         79:c6:9d:7b:b3:40:0a:ed:66:20:b2:ce:18:02:7a:9f:56:70:
         ea:a0:d2:1d:de:2f:6a:76:41:95:74:e0:fa:05:76:9f:a1:58:
         a0:55:08:a3:a6:17:9a:b5:18:b4:e2:c9:55:cb:60:dd:e6:e5:
         d7:42:bd:eb:81:8d:9c:22:0f:2d:a8:d5:21:e5:0e:a0:2a:7f:
         03:8b:e6:75:af:6a:c5:6e:89:f5:f4:6e:3e:f1:e1:dc:e2:d9:
         de:81:9c:02:5e:ba:d3:52:1b:7e:ff:8f:05:9c:b4:32:57:5f:
         89:b9:f7:05:03:f3:cf:8c:fc:f3:45:55:3a:72:57:11:5f:01:
         68:cf:7f:be:b7:05:f4:20:0a:71:97:32:ba:00:be:7c:a0:f1:
         8a:a8:2d:1f:bd:a1:f3:76:49:c9:56:c6:7f:82:06:36:a1:fb:
         14:35:b6:b7:d8:bb:4a:f2:53:8d:24:8d:c0:98:a7:0d:aa:b7:
         cd:ea:60:a7:31:f1:9b:95:20:f8:f8:90:2e:d8:ae:38:c2:ac:
         2d:15:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:45:33 2024 by rpki-client on console-fra.rpki-client.org