Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c02158-2498-3085-bec7-5fa4712d2f99.roa
File:                     64c02158-2498-3085-bec7-5fa4712d2f99.roa (raw, json)
Hash identifier:          bHDECDui9nBz0RQySzQKgmRBhO55Ljt/djys21qBlm4=
Subject key identifier:   AE:F4:E3:AD:5B:CD:97:32:AB:19:96:DB:1B:89:48:AF:15:CE:D5:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88F4F8FA76247E0F8D7B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c02158-2498-3085-bec7-5fa4712d2f99.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        2603:3026::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:f4:f8:fa:76:24:7e:0f:8d:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=23547cca-cd4a-4a5a-be99-07a5b3a2b8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:a7:ad:86:91:cf:23:ed:da:da:16:c0:ed:
                    01:61:01:0b:06:14:c3:30:af:de:e2:28:d6:81:a8:
                    5d:38:75:17:de:c4:b7:40:27:4a:17:22:35:96:2a:
                    1e:6f:c2:4f:4c:49:a8:d1:69:a0:58:6d:ae:b5:b5:
                    42:d2:68:3b:bd:20:5c:06:7b:c3:1b:0e:0e:12:cb:
                    9c:87:d2:61:18:98:1d:ca:5c:b1:16:72:95:43:22:
                    57:b2:94:51:e1:99:de:e7:77:c5:27:e5:f3:78:e2:
                    dd:15:9f:1e:1d:a0:dc:a6:b2:a5:08:a5:78:79:1b:
                    3e:c9:69:af:6f:b2:18:2b:67:e0:0b:7f:b8:00:00:
                    78:e1:0e:12:f0:31:1d:b5:0e:b1:3f:2b:4f:f9:7e:
                    8f:57:e4:27:de:a2:49:db:75:35:07:10:8e:11:e0:
                    16:9f:dd:9a:cb:61:54:b1:94:82:32:de:dd:4a:f7:
                    b6:49:0c:d9:e9:27:d4:56:f2:16:9a:3b:13:91:07:
                    14:6d:d6:84:06:a2:43:89:d6:a8:33:47:b5:58:1f:
                    66:3d:3c:29:a9:0c:ff:42:d9:88:ee:a3:99:c7:ad:
                    b1:9f:11:c7:86:4e:d2:0f:c7:df:24:2f:7b:6d:15:
                    33:6d:b8:a2:0e:ac:19:ab:f3:5a:b3:22:6f:bc:14:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F4:E3:AD:5B:CD:97:32:AB:19:96:DB:1B:89:48:AF:15:CE:D5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c02158-2498-3085-bec7-5fa4712d2f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3026::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:83:17:16:33:78:16:98:11:e0:82:50:61:90:f4:f5:6c:35:
         a2:61:e3:7c:fa:06:d5:2d:8e:c5:67:53:39:2e:26:77:f0:e0:
         7b:2a:02:a6:97:e2:f8:f0:dc:d6:00:dc:72:db:8a:d8:66:85:
         68:9a:83:ae:ef:81:a3:12:58:59:67:41:ac:eb:fa:43:d3:7b:
         cd:63:8a:48:02:a6:ee:12:d4:b7:eb:7c:be:6f:77:40:3c:4f:
         50:fa:14:09:62:bc:a8:ff:40:db:12:4c:44:61:fa:38:f6:70:
         e1:88:81:06:a1:33:15:f3:12:6e:f2:15:e7:30:d2:59:e9:92:
         e1:2b:84:93:b4:88:9e:e5:be:44:14:80:31:16:c8:ea:d4:c8:
         5f:2d:14:65:b2:4a:17:46:bf:df:de:f1:98:a6:6a:3e:ef:07:
         01:2c:2e:92:9c:93:3f:b9:09:6a:78:01:4b:b1:34:78:a9:c9:
         9a:7a:7d:2a:d0:10:bb:a4:81:78:5a:96:cc:e8:48:db:f2:a8:
         22:2d:1b:8d:ef:71:d7:a3:39:ad:e6:4d:ec:e8:fd:9f:a5:8b:
         a7:18:f1:10:e9:78:b6:cc:f8:ad:5a:c8:75:28:71:b3:f3:5c:
         e7:aa:83:14:c3:9b:d2:37:9a:50:4d:1f:23:65:71:dd:47:7a:
         7a:f8:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:55 2024 by rpki-client on console-fra.rpki-client.org