Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc237681-3007-3c7d-b92d-873983c1ff1e.roa
File:                     fc237681-3007-3c7d-b92d-873983c1ff1e.roa (raw, json)
Hash identifier:          GGjqhx0Tbvbvd55CrrmoiVkgI9Hj+x803DdmFWosScs=
Subject key identifier:   38:5D:FF:54:23:81:2F:13:C4:24:34:52:5A:9C:3D:18:54:6C:B0:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC896C6C567F5EC40C7889C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc237681-3007-3c7d-b92d-873983c1ff1e.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        2601:44::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:6c:6c:56:7f:5e:c4:0c:78:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=aaeb2fb9-a85f-46e3-be7c-b7bebe1be263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:98:53:fa:07:c2:f7:30:de:ce:16:a7:65:
                    65:45:77:dd:dc:ba:b9:bc:34:c2:61:6e:19:73:85:
                    66:ae:bc:92:61:35:bd:72:78:d9:5e:65:d5:73:27:
                    80:d7:ff:d7:dd:91:11:29:82:56:56:ef:40:7a:01:
                    fd:48:fc:df:9f:78:aa:f6:77:b4:64:d8:64:f2:0b:
                    52:03:a5:a3:c3:8c:c7:dd:45:82:46:72:86:af:7e:
                    80:62:b3:95:9f:aa:00:47:5f:1e:9e:d3:ab:32:e7:
                    b1:35:b6:21:ff:ec:00:ce:c2:bd:15:5d:7d:2d:f6:
                    57:1a:0a:2f:f2:eb:68:ff:56:f3:4c:bf:96:6e:2a:
                    cc:db:16:47:fe:05:5a:1d:65:b5:8e:56:89:3f:cd:
                    20:7c:0f:a7:95:96:9b:ef:f3:30:cc:b6:26:95:8e:
                    37:07:00:41:fb:54:93:0e:38:df:6a:d9:2c:ba:20:
                    d4:bc:74:2b:95:50:b7:43:78:20:ec:06:8a:ad:42:
                    62:77:14:d1:63:71:ae:c6:d2:58:d8:59:16:22:ae:
                    76:b7:73:9e:ab:e5:97:61:23:67:44:50:61:5a:c3:
                    d2:89:bd:2c:0e:31:21:aa:44:f8:82:89:bf:52:6e:
                    93:38:b1:e1:7d:4b:94:c8:8e:31:a4:37:4a:40:05:
                    00:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:FF:54:23:81:2F:13:C4:24:34:52:5A:9C:3D:18:54:6C:B0:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc237681-3007-3c7d-b92d-873983c1ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:44::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:81:a0:c9:f1:f5:f6:a1:06:3a:f4:49:fc:b6:56:fc:2c:34:
         61:c6:be:ad:6b:00:35:39:eb:88:11:e5:15:be:e8:72:01:d0:
         fd:28:19:a2:69:c0:62:34:80:e5:6f:9a:15:d3:96:67:49:39:
         8a:dd:95:a4:ee:df:e0:89:30:82:2a:53:3e:10:c7:a7:f2:3e:
         55:1a:fd:0f:2d:e6:dd:f4:60:54:e8:d6:39:58:e6:45:65:16:
         7e:07:a1:49:d5:7e:8a:9b:52:2b:c0:cd:1a:55:2c:8e:c2:b7:
         b0:fe:96:0f:e2:ff:2a:d4:9b:a7:19:25:c1:14:4a:2a:1f:4c:
         ca:4e:9c:2a:cb:ea:0f:a2:c3:c1:38:cc:85:09:b4:b6:d9:fc:
         4b:7c:9f:ae:f1:20:1c:91:19:83:ed:19:9b:56:d2:f8:dc:60:
         6f:00:92:44:b6:40:2c:b4:07:ef:26:6a:68:4a:96:36:eb:57:
         21:a0:c0:b3:00:9b:21:94:9d:3f:12:76:b4:5f:16:e7:84:32:
         06:bf:3c:c2:18:dd:fc:93:74:8f:87:b8:a4:d2:af:b7:f3:f8:
         24:66:89:d3:8d:86:ea:91:8b:1e:41:ab:18:59:d2:df:7d:89:
         05:31:62:fe:d5:b7:c0:05:51:b5:bf:fd:86:55:64:b9:df:4d:
         d8:c2:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:24:16 2024 by rpki-client on console-ams.rpki-client.org