Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8563be-7036-367d-9a4c-5a740baca40f.roa
File:                     2a8563be-7036-367d-9a4c-5a740baca40f.roa (raw, json)
Hash identifier:          4q5kHPKuAPYjHAI2Ti3T/Y4/jFlqiB0mm2wjlq3EWhM=
Subject key identifier:   17:91:DB:AE:6D:4D:A9:A3:78:72:8E:88:5F:B1:DE:43:50:E7:D8:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8937789360E1F8B7A7EEC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8563be-7036-367d-9a4c-5a740baca40f.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        2603:301b:2f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:37:78:93:60:e1:f8:b7:a7:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=a6361cc1-ad3f-4f68-9f6c-27cc77e12ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:19:b9:f9:b1:33:dc:c3:d7:66:ab:25:b1:
                    81:08:49:ba:b3:aa:db:1c:25:ae:fd:9e:69:72:2a:
                    c2:0c:3e:65:f4:5c:b7:6b:6e:4b:4e:3c:92:68:6f:
                    1a:7f:0b:00:a6:1e:c3:03:44:92:7c:94:94:1c:33:
                    2a:98:f0:4c:90:8b:16:72:74:f5:98:77:8f:8f:5e:
                    15:44:cd:14:d1:44:2a:05:68:b6:7b:2b:b6:d3:1e:
                    b1:a7:70:7c:ae:e0:a7:4f:69:99:96:80:da:e9:ac:
                    d4:b4:e3:9f:56:36:9a:a3:3f:02:69:b2:ac:20:cb:
                    17:05:5e:b7:27:f9:d3:49:e0:69:43:73:97:51:15:
                    aa:ea:aa:a9:12:98:d4:a7:b1:8c:d9:b5:bd:cc:f9:
                    3b:d4:df:d3:c3:b6:a7:d2:a0:e8:5e:4a:f7:a3:a2:
                    8e:45:13:28:88:59:29:e5:59:6f:aa:65:65:99:69:
                    cd:59:b4:fb:7d:b9:b7:ca:39:dd:38:fa:d8:03:7d:
                    c6:94:42:5f:f4:eb:72:83:88:31:88:fe:db:08:f3:
                    5a:2c:88:f5:1a:e7:17:dd:56:78:e4:6c:6d:36:2c:
                    ae:34:88:c6:62:f4:7b:14:26:13:33:f2:6c:09:7b:
                    a2:0a:c2:fe:04:ef:84:91:c9:5e:7e:7a:78:e6:ce:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:91:DB:AE:6D:4D:A9:A3:78:72:8E:88:5F:B1:DE:43:50:E7:D8:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8563be-7036-367d-9a4c-5a740baca40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301b:2f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f8:96:60:66:28:34:81:1a:1e:82:04:81:59:99:d6:20:f3:
         10:c6:02:b8:c4:e0:6c:c6:3e:72:18:be:f1:c1:56:5f:b3:e5:
         b2:ee:d8:14:9c:27:83:e8:73:a6:5c:8c:7e:d1:72:8e:85:5f:
         fc:ba:40:e0:74:c6:ef:fb:02:d9:7a:f3:97:cd:2b:a5:7c:a3:
         59:ca:61:fc:c2:cb:da:53:b7:d8:ba:90:d2:5b:19:4f:cf:35:
         f2:96:84:89:13:28:1b:1b:f9:c2:81:67:9a:95:f8:ca:d6:0f:
         9e:0c:92:70:79:0a:b8:f2:8d:14:49:0a:0f:a6:e5:5c:82:af:
         d1:c9:a6:a5:ea:1a:5b:40:28:e8:44:76:ea:66:81:d4:23:6d:
         67:6b:f3:3d:5e:67:8b:04:7c:10:a8:db:c5:4c:db:78:31:19:
         04:bb:33:20:78:67:cc:a4:5d:0f:a0:61:5d:24:6f:41:f7:94:
         dc:f6:45:84:30:0e:38:30:6f:41:70:f7:bf:7e:ce:90:62:56:
         ba:60:e6:91:ac:73:d9:64:3f:26:6c:a4:df:4e:c6:46:e7:ca:
         e1:0e:57:4e:3a:91:56:cf:e8:af:1a:ba:e7:37:20:ef:00:73:
         94:26:d3:b6:4b:65:66:22:f1:06:ea:0d:1d:58:c8:4b:bf:c7:
         69:6a:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:36:28 2024 by rpki-client on console-fra.rpki-client.org