Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa
File:                     8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa (raw, json)
Hash identifier:          wbI7TXPUWhoBBxzF3+Em+qCaeKL64hKkf0aUxnYFrOI=
Subject key identifier:   90:A3:9E:7F:62:24:0A:6F:33:08:67:33:D5:6D:5B:67:E1:DE:63:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB6E4BEDC92A841FCC3760
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     21508
IP address blocks:        2603:3021::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:6e:4b:ed:c9:2a:84:1f:cc:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=a63ca82b-2b91-45a8-a071-d923726b47be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cc:0e:bf:2b:da:93:93:bd:36:b6:72:98:0e:
                    cf:11:e2:22:c3:c7:7c:c1:29:bc:eb:48:d9:d0:47:
                    c6:fe:63:fc:fe:3a:67:e2:76:89:b3:6b:b8:7d:78:
                    f5:c4:19:e0:7f:16:65:58:dd:68:e8:62:e7:e7:8a:
                    e8:cb:7e:ca:51:d5:69:c6:bd:74:e2:45:d6:a4:79:
                    f6:33:ca:6a:67:c9:f3:d5:73:c0:ea:f3:ca:68:db:
                    cf:7f:54:0e:2e:1e:48:14:a1:35:01:46:1b:15:6a:
                    e2:45:5c:34:08:2a:2b:fa:6d:40:04:9f:bb:a3:fc:
                    0f:de:d3:a0:71:f0:8b:15:92:ef:8b:41:fa:31:e2:
                    d4:1c:c7:df:13:ca:c4:2e:4a:d7:1b:1a:3e:b1:44:
                    f9:4e:70:83:b9:47:ff:e4:8c:52:1c:d5:f5:2b:c6:
                    ff:fd:a2:c6:db:04:a6:2d:ba:0b:b5:4a:18:da:46:
                    11:08:d3:a1:11:79:a6:10:d8:f8:d9:5b:4c:9d:5c:
                    49:26:d5:ac:a7:75:c7:6b:eb:90:2d:51:b3:8e:30:
                    14:89:1c:72:ab:96:cb:db:1e:c8:c0:a9:5a:c6:48:
                    9f:da:d2:8c:5a:61:43:1d:7d:4c:7d:e0:ed:e6:f1:
                    5b:0c:b5:f5:82:74:ec:09:61:5d:06:e8:21:50:22:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A3:9E:7F:62:24:0A:6F:33:08:67:33:D5:6D:5B:67:E1:DE:63:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3021::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:59:40:40:f3:36:e2:ae:8e:c6:e1:8e:34:54:36:30:65:
         86:59:ae:10:49:2e:26:3a:a6:7a:9f:d0:2f:c5:8b:76:e0:1d:
         a2:3c:52:05:12:aa:37:5e:2f:23:ef:a4:6e:90:9a:df:2d:61:
         48:55:f2:57:c6:b5:ce:34:5a:0d:17:bc:0c:63:b1:3e:86:c4:
         28:53:2a:4a:13:10:2a:f9:80:23:a0:20:12:6f:6c:47:73:8d:
         7f:76:b9:22:75:d0:4b:b6:d9:2f:d9:5d:50:a7:05:fd:b2:73:
         f9:23:aa:71:d5:ef:ef:a1:46:d0:c5:5b:e6:8f:3f:b1:59:c8:
         74:7b:5d:74:eb:55:b8:c8:8b:b6:50:dd:a6:d3:98:2b:ca:ed:
         d7:45:96:5b:bb:d2:f4:9c:ff:3d:e5:0e:99:3e:c8:95:89:d6:
         46:b9:e8:46:04:f7:63:67:69:2c:c7:a2:17:d2:45:ec:ae:e3:
         95:7d:74:85:6f:c2:18:e2:fe:3e:ed:bb:7e:57:8a:e8:bf:38:
         25:23:2a:e9:ea:d2:39:68:e4:aa:28:eb:22:f3:a0:77:45:f0:
         73:e8:ef:38:b1:3b:e4:5d:3b:4f:b0:69:ee:dc:93:e8:14:73:
         39:06:c8:92:30:9e:fa:da:2d:47:f1:66:9c:c5:6e:88:ba:43:
         0e:67:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:42:31 2024 by rpki-client on console-fra.rpki-client.org