Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6fd1007-7253-3135-ad76-5ac8a518862d.roa
File:                     a6fd1007-7253-3135-ad76-5ac8a518862d.roa (raw, json)
Hash identifier:          pSWGSnj+DRqmXjZ4iDH5QChEqmRWV2L+AzumHzKXJr0=
Subject key identifier:   E1:50:C1:E9:81:73:5A:C7:FF:3F:96:05:7E:D6:0A:AE:86:34:1D:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89369BF4E7818F3DF53D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6fd1007-7253-3135-ad76-5ac8a518862d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        2603:208b:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:36:9b:f4:e7:81:8f:3d:f5:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=147d4da1-cc0d-45ac-b711-5d357d356be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:30:74:b6:5d:d1:77:26:54:80:ec:78:ff:
                    50:c3:d8:5a:ee:a1:f5:0f:e7:cb:f4:0d:da:3e:06:
                    60:1d:c7:8c:49:e6:b0:3c:0e:50:7c:be:df:3b:aa:
                    d5:cb:26:c1:02:d0:e6:11:a9:18:38:b9:82:cf:3a:
                    97:39:3e:f0:61:aa:7d:54:10:73:63:b9:78:bc:ba:
                    f5:6f:0f:26:28:d2:54:55:a4:0a:bc:1b:19:c1:2c:
                    14:5a:c5:e6:b1:43:02:e8:c3:83:2e:3e:f0:c6:6e:
                    fd:d6:70:b1:f4:d7:bd:90:90:48:d1:67:8b:4c:b3:
                    92:c8:ee:e9:8f:3b:d7:7e:9e:92:d0:70:06:4d:34:
                    f6:46:92:0b:58:d0:79:e3:3a:07:e4:ec:6d:86:68:
                    54:dc:75:7d:1b:32:42:a5:ab:b2:01:75:2b:ed:ec:
                    c5:65:e5:d0:f4:4c:d2:13:de:49:04:94:31:ca:05:
                    da:6a:aa:17:a0:a6:e8:fc:3d:79:39:55:a7:ef:96:
                    1d:12:b8:35:b6:25:1e:63:64:b9:ed:30:ad:35:e4:
                    13:0f:fb:50:27:ad:63:2b:9b:f1:e2:2c:4f:b2:1d:
                    e3:25:15:95:7b:eb:a5:b1:98:22:97:55:58:c8:e5:
                    98:96:49:2e:0f:12:25:5b:0e:07:ef:9c:35:a6:9d:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:50:C1:E9:81:73:5A:C7:FF:3F:96:05:7E:D6:0A:AE:86:34:1D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6fd1007-7253-3135-ad76-5ac8a518862d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:208b:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:dd:6f:70:86:f0:0b:c5:79:cf:04:e5:1c:3d:4c:00:f5:
         18:fc:bb:19:e4:f6:65:1c:48:fe:51:be:2d:8a:06:81:b9:2b:
         ea:a0:1b:69:4d:1a:23:d2:f1:5d:ca:23:cc:95:4a:ea:78:15:
         74:2d:36:1f:d4:a8:90:0e:32:2a:2c:05:77:53:fc:82:0b:3d:
         da:7a:60:fb:ec:53:9b:e8:63:c9:78:11:e0:29:ea:7a:a0:50:
         26:66:ef:47:cc:84:38:82:7a:04:4d:b8:eb:56:f1:07:97:e1:
         a3:3b:23:65:b5:47:30:32:b7:83:c0:c7:06:21:b9:45:a6:c2:
         6a:59:29:48:29:9b:f5:b0:07:ce:40:35:a0:d5:a0:fc:d8:a1:
         8d:79:bf:2e:c2:0e:62:32:6c:bd:09:c6:e4:e7:d3:ec:6f:c3:
         33:f2:4c:82:34:98:f8:56:53:9a:66:e4:23:cf:8b:45:25:f5:
         7b:3d:24:b5:ee:6c:d7:56:37:78:62:a1:2b:a6:14:8d:44:f8:
         9e:31:ea:82:90:02:0e:7c:66:0a:15:50:da:45:2d:49:24:95:
         71:55:13:a6:9e:45:c5:27:5b:80:ac:b6:e3:9a:3d:0c:47:9b:
         99:fc:ce:1f:e0:f4:e9:9f:91:74:00:fa:be:b3:23:a4:bf:38:
         29:b7:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:44:17 2024 by rpki-client on console-fra.rpki-client.org