Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa
File:                     8dde01f3-144b-3f64-9c50-533507cff3ae.roa (raw, json)
Hash identifier:          teIYoTpQU2n8k1xKk+DlnIwUpcOK8nKCNIXZtK/puos=
Subject key identifier:   3F:E0:E2:C2:97:F0:49:1C:AA:16:7B:0D:50:E4:C0:D5:3C:5C:D1:F0
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F4328584561285D92A657D0CC0E0F7B40
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     3677
IP address blocks:        2620:0:e58::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5d:92:a6:57:d0:cc:0e:0f:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=50455dee-1c2f-4985-a548-707ece63e676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:cf:23:a5:bf:d5:de:60:57:9c:f1:d7:6f:
                    b7:14:43:ad:0d:32:17:6e:32:a3:b8:a8:26:ef:71:
                    7e:db:2a:9c:ac:cb:97:c8:1c:43:f8:ef:ea:8d:ae:
                    6f:16:df:21:9d:0a:61:a3:53:e9:78:08:55:9a:da:
                    64:34:07:b2:77:4d:08:e2:42:94:d6:4c:df:f8:78:
                    68:52:fc:83:ea:74:3f:58:33:60:19:4a:02:62:d7:
                    7d:8e:4e:e1:f9:5a:e6:20:98:72:68:c6:28:1f:5a:
                    75:72:4a:9f:34:2a:77:f2:44:4f:e9:ca:f9:61:4d:
                    fc:d9:a3:11:37:8f:32:7b:3e:e6:ee:e9:6e:2b:d1:
                    c2:f8:26:54:04:10:8b:f5:10:8c:75:d6:1d:a5:7f:
                    cf:64:43:f2:d1:b4:18:89:e1:1a:36:fc:43:f3:b6:
                    f4:e5:3f:15:66:0b:02:0b:09:be:fe:ad:6d:af:ba:
                    61:6f:cf:a0:9a:c9:d8:12:28:08:46:22:b5:cf:00:
                    72:07:0a:28:3e:5f:65:b6:c8:e6:87:21:57:ba:b9:
                    36:8b:4d:7f:86:5c:39:a9:95:57:3b:df:f2:33:30:
                    8f:09:ef:02:6f:28:9c:75:3c:04:67:57:3c:9e:07:
                    ad:3d:46:d7:26:86:5a:31:bc:40:f0:f1:86:e0:31:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:E2:C2:97:F0:49:1C:AA:16:7B:0D:50:E4:C0:D5:3C:5C:D1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:e58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:d3:92:aa:e2:6a:7b:bb:f9:5e:ae:56:d3:2b:38:f0:aa:
         85:d8:23:c5:aa:cd:2e:55:d9:ea:31:0a:56:3a:7e:4c:55:49:
         d9:7d:92:3f:f9:a9:85:f1:7c:87:96:17:13:1c:62:5e:1a:2b:
         de:83:c5:f8:9f:72:59:99:5b:15:78:2a:9c:44:7d:89:04:c2:
         41:db:2e:99:f7:b8:bc:ef:10:8b:4e:16:7c:df:ca:c6:a4:4b:
         5a:f6:74:5c:77:d5:d5:57:03:57:cc:c7:37:07:c7:61:da:a2:
         3f:2d:f4:04:7c:5b:a6:0f:1e:f8:49:88:73:8b:4e:1a:c2:32:
         2a:0b:9d:80:27:5f:0c:cd:42:10:5d:78:65:b8:8f:7c:1e:e0:
         98:6a:d6:51:5a:9e:17:87:03:97:b3:d4:89:ba:a0:89:4b:99:
         20:b7:8e:65:47:09:44:37:64:f0:68:21:ed:62:91:21:f0:ac:
         53:8e:23:20:32:9d:d2:1c:b8:ea:ee:56:d4:6e:80:90:19:bf:
         21:8a:a1:3b:fa:ee:c1:dd:38:ce:61:bf:68:ee:b3:46:c5:a0:
         21:91:00:c5:0b:ec:a4:4a:fd:1b:f7:57:6d:31:96:a4:18:a7:
         e7:f9:c5:25:84:e9:13:bd:cf:6c:8a:ca:bc:44:92:99:9a:6a:
         55:05:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:29:39 2024 by rpki-client on console-fra.rpki-client.org