Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e7c5a19-5d24-342e-b002-eb92b4173470.roa
File:                     5e7c5a19-5d24-342e-b002-eb92b4173470.roa (raw, json)
Hash identifier:          EM6eGhnxPlOymCbb3Cp9PN632SKgB48eD8PO6CjIM3I=
Subject key identifier:   F2:99:18:6D:4C:CE:9F:52:E2:45:40:74:31:E2:FF:4A:6C:F7:3A:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB32F4A4BE556CE2493C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e7c5a19-5d24-342e-b002-eb92b4173470.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2603:3018:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:32:f4:a4:be:55:6c:e2:49:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d7a756e8-49b3-4eb2-a893-086d5e9c9fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:48:91:25:0f:73:94:be:79:34:8a:38:3d:
                    4a:61:15:c0:3b:c7:f5:9e:4e:77:18:b0:a8:c0:8c:
                    93:0e:e8:c8:43:fd:bc:6a:45:87:80:95:45:d4:cf:
                    ab:63:21:85:1b:ac:20:72:eb:70:01:c5:92:db:13:
                    c9:5d:39:ce:96:fc:42:3d:c3:3b:f2:af:d3:71:e4:
                    2a:50:ba:2e:51:f1:08:3e:b3:76:cc:cb:ca:46:61:
                    53:6b:14:95:63:d2:37:1d:d9:de:a1:94:09:af:b8:
                    1c:93:bb:82:85:80:d9:b9:3f:c8:7c:20:45:bb:16:
                    bc:40:95:33:09:3c:f8:0d:cb:7a:bc:3d:f5:bb:8f:
                    d7:37:d5:68:04:bd:df:aa:84:42:22:cf:ab:d0:ff:
                    66:2e:f0:43:8c:b5:c5:04:14:23:6c:77:aa:e4:b3:
                    bb:d2:4b:96:99:5b:03:1d:d4:2a:5d:4f:13:e3:9c:
                    f7:e3:86:97:ba:06:94:3f:f7:6d:15:81:18:58:a5:
                    f2:50:95:4a:79:bf:aa:05:7f:f8:2d:6f:69:b0:b8:
                    ea:1a:88:d0:fa:39:4a:77:7d:df:4b:21:70:ae:50:
                    7f:1f:da:49:39:5f:13:13:d0:55:77:a2:c2:ea:e8:
                    a2:71:4b:50:22:db:5e:c2:94:23:36:16:fd:62:9f:
                    f2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:99:18:6D:4C:CE:9F:52:E2:45:40:74:31:E2:FF:4A:6C:F7:3A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e7c5a19-5d24-342e-b002-eb92b4173470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3018:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:4b:54:79:45:9d:de:e4:7e:c9:52:30:47:a3:de:19:1f:
         73:5f:08:68:e4:a3:ec:b8:99:3a:98:e0:f0:f2:e7:31:90:8a:
         a7:b0:e1:ff:22:82:e6:bd:ae:4e:f7:00:4c:c4:80:eb:cc:d6:
         c0:a5:9e:2f:57:ab:91:80:eb:d7:b0:11:52:60:1e:c7:cf:c4:
         5c:27:c8:23:3b:0c:22:40:81:1b:60:92:7e:f0:b6:39:3f:53:
         f9:f4:e8:7a:b8:ea:38:6f:9b:d2:d5:ec:b1:60:4c:5f:8f:d2:
         4b:48:05:68:63:82:96:15:99:e5:57:43:1c:ba:95:5d:d0:94:
         33:d4:72:fd:62:9a:0d:46:f2:be:59:43:24:01:f6:e2:59:6d:
         97:01:02:62:07:b3:03:9c:c6:55:59:d4:c4:be:0c:d2:b7:2b:
         dc:51:bf:b4:7e:51:dc:30:9c:05:5f:c2:69:be:96:ba:b4:e6:
         e6:88:c9:c1:9c:cc:8e:95:c8:38:90:84:a0:9e:ad:de:0d:2c:
         1f:63:c1:3f:a4:7c:4e:e5:9e:b3:3c:1a:f2:4f:55:c2:60:95:
         3a:43:bd:fc:58:f3:39:2e:af:3b:8f:16:19:8c:96:c6:90:29:
         f1:f0:c3:dc:14:ed:7e:75:ed:25:21:2b:ad:7e:5c:6c:a1:91:
         3d:3a:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:17:20 2024 by rpki-client on console-ams.rpki-client.org