Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/414a9310-3a2a-369a-9bf9-e72ba64ae992.roa
File:                     414a9310-3a2a-369a-9bf9-e72ba64ae992.roa (raw, json)
Hash identifier:          SODxGGADU+mMSht0q5Z05ZT6WGeb0sdFwpqsD647kvw=
Subject key identifier:   E2:45:93:3E:D2:40:D3:55:C3:0E:7D:2A:B8:98:E6:12:86:D0:80:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89CD7FEAA901D0D7768480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/414a9310-3a2a-369a-9bf9-e72ba64ae992.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        2603:208b:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:cd:7f:ea:a9:01:d0:d7:76:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=a2643885-26d3-4186-9a79-c2aa98a00bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:28:ac:e5:a2:7c:8e:c2:1a:59:61:6c:4e:
                    c0:2e:e1:21:b7:ce:78:b2:7d:18:ec:30:06:55:2b:
                    71:07:0c:cb:4c:8c:e1:4c:a3:4f:d3:70:c9:3a:f2:
                    0a:00:9f:9c:de:9d:cd:27:ae:75:80:3b:0a:55:dd:
                    a1:11:e5:f8:2d:85:0a:fb:eb:e5:b7:1b:03:9a:97:
                    7c:22:3c:b0:99:91:3e:dc:d4:72:14:ed:d4:8c:bc:
                    31:95:fb:48:1d:57:17:1a:44:c2:ac:37:f9:86:35:
                    92:52:ef:1f:6a:7c:33:0a:bd:89:66:3e:00:19:e7:
                    11:b7:80:91:a8:1f:1e:21:7f:f6:bc:10:99:7c:a2:
                    29:fe:0e:d1:7f:24:eb:e5:e5:ba:e0:04:7f:f2:b8:
                    a5:c6:be:0c:71:4c:51:7e:34:bc:d6:b5:85:86:37:
                    33:60:60:35:41:99:2c:8f:b9:42:c3:c8:47:9e:9a:
                    98:fd:69:de:e6:f6:22:08:47:b1:10:1d:a5:b0:65:
                    34:e2:6b:92:4e:00:86:bd:d8:9c:e0:f9:ab:b3:29:
                    d9:f7:ac:3e:d0:3f:6b:53:82:b7:17:38:f8:3a:a8:
                    9c:db:d3:58:9e:31:fd:be:f4:cf:71:df:ab:fc:a3:
                    68:5e:a5:e3:c3:6f:c2:9b:14:d9:15:6a:1c:fc:2f:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:45:93:3E:D2:40:D3:55:C3:0E:7D:2A:B8:98:E6:12:86:D0:80:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/414a9310-3a2a-369a-9bf9-e72ba64ae992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:208b:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:06:bb:ab:7c:a9:f7:c1:20:66:eb:b4:bf:d8:49:53:b3:
         c3:c5:2d:3d:75:fe:19:c4:d2:90:a5:9a:b5:b1:f1:52:4a:75:
         85:fc:c6:a9:bc:62:2f:97:7a:21:c6:26:35:da:0b:fc:5a:fb:
         2b:e1:4a:4a:60:b1:89:d5:29:91:35:2f:19:c1:8e:b6:04:27:
         e4:59:27:5e:2a:46:2e:71:e1:9d:da:b7:ec:3f:1c:32:6b:85:
         a7:84:00:2b:27:d6:74:c5:59:6d:6f:10:63:82:ef:0b:df:fd:
         2e:1a:25:53:eb:cb:03:16:7d:04:e2:b8:9c:60:37:b3:ea:b1:
         0e:06:9b:95:bb:7d:ed:b7:f6:2b:25:dd:80:77:ae:d6:ed:da:
         a8:da:63:4b:7e:ea:4f:5e:1c:40:c6:4a:a9:36:04:c5:a6:7d:
         48:a6:6e:1c:c7:fc:d0:30:25:c8:ee:8a:21:e7:ae:2b:16:f6:
         64:7f:2a:ce:a5:14:20:50:c2:9c:e1:5d:93:f9:df:cd:42:7d:
         aa:9c:6a:f0:c2:9c:26:9f:f6:4f:88:4f:1d:59:c1:98:13:a1:
         e8:db:ba:4e:da:9f:8b:73:6a:38:3a:cc:09:ca:08:a9:1e:ce:
         06:c8:ea:00:86:e3:02:58:03:c6:e0:ab:45:89:78:3b:32:7a:
         01:7c:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:45 2024 by rpki-client on console-fra.rpki-client.org