Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bb3af48-2107-3323-9e8a-f879380e2199.roa
File:                     7bb3af48-2107-3323-9e8a-f879380e2199.roa (raw, json)
Hash identifier:          QrfORJ3wYrfiLmYYnJH6zPzFrXfV6cdD6aI+sjTADmI=
Subject key identifier:   E0:A2:BA:45:9F:40:A0:9F:43:20:40:2C:D6:4C:5A:B1:13:F7:5B:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB2F4A493D7E77068ABE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bb3af48-2107-3323-9e8a-f879380e2199.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2603:2480::/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:2f:4a:49:3d:7e:77:06:8a:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=aa8175e7-2e86-4691-aca9-99ba607204ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:9e:14:3a:cc:3b:46:f3:d0:85:ba:d6:9f:
                    9f:cb:20:b1:3e:d1:ef:84:1d:1a:d1:b7:ed:56:92:
                    f5:3f:95:0e:25:cd:77:f5:4b:bd:a1:b4:73:d2:06:
                    30:dc:74:3e:0b:51:1f:6b:5f:79:9d:9b:a7:0f:78:
                    ca:0e:1b:2f:0f:a3:85:4c:75:20:8a:7f:54:fb:bb:
                    1b:a2:c8:f1:e5:8c:ae:0d:88:70:99:e9:5b:9e:43:
                    3c:2d:cc:e1:7d:10:10:e3:2c:13:5f:2e:64:ae:dc:
                    8a:ff:26:ee:d2:72:ab:e3:d5:25:75:b7:7f:17:15:
                    0a:67:95:8f:c2:01:45:f1:51:c7:ac:36:af:03:ea:
                    66:90:4c:a3:8c:18:6f:39:05:7d:6a:13:bf:96:e9:
                    53:2e:a0:77:32:ea:95:93:55:f7:4e:b7:8f:b4:25:
                    12:a5:73:0b:48:bf:36:f1:27:42:cb:06:01:f3:fe:
                    e7:dc:25:f6:6d:96:31:f7:af:95:23:07:48:cb:36:
                    e3:92:2b:6b:fc:38:2d:0f:dc:ac:01:fa:8a:70:32:
                    f4:4e:96:84:33:2e:77:bf:f5:62:56:c2:cc:dd:93:
                    8f:8d:52:c3:84:f8:b4:47:fb:81:80:dd:93:8e:04:
                    f7:7d:3a:91:b3:84:e1:fd:ab:5c:78:09:50:c4:43:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:BA:45:9F:40:A0:9F:43:20:40:2C:D6:4C:5A:B1:13:F7:5B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bb3af48-2107-3323-9e8a-f879380e2199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2480::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:27:2b:da:ce:a7:1a:dc:de:31:c6:07:cb:27:3f:c2:9a:
         a0:ff:8e:71:26:16:4a:32:90:3b:02:10:02:02:57:53:7a:c0:
         48:dd:a7:b7:3e:61:b6:46:ca:74:ac:06:f9:55:c4:d4:f1:73:
         9e:04:d1:50:a0:8b:18:48:3b:91:9e:ae:26:f6:74:e5:c6:c1:
         3b:6e:6f:ca:8f:0b:01:60:4a:4b:13:a1:d6:7a:b4:17:28:63:
         d3:9e:ee:1a:8b:61:1c:e6:9e:68:72:69:df:ef:ed:4e:6d:90:
         5c:22:f9:09:18:fc:9f:08:53:63:85:11:f8:68:2c:0b:c7:8a:
         97:12:c9:9e:3e:a3:43:b3:d9:df:2c:1f:f1:1f:b9:08:9b:7e:
         e3:56:40:51:99:25:be:d7:ab:85:05:51:6c:d1:fe:19:b8:c9:
         85:87:4b:e8:c7:6d:85:d7:04:8b:a9:0b:e2:fa:20:52:c6:fe:
         0c:38:a9:59:c5:11:39:c7:80:fb:44:70:bb:b7:aa:6b:39:43:
         9d:28:c2:c1:a7:1f:5b:90:a6:0c:b1:fb:db:42:ef:a7:0a:07:
         5f:82:ba:a0:3d:26:1d:3f:64:73:c3:45:68:15:4c:4c:f9:2c:
         a9:a8:51:56:5f:14:54:66:bc:b5:75:34:48:b9:7c:11:1b:31:
         b8:3c:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:53:22 2024 by rpki-client on console-ams.rpki-client.org