Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa
File:                     c8e3155a-cda7-369b-bd52-09077eb2faa8.roa (raw, json)
Hash identifier:          c1GZTWcrLM0DJ624HO/fO99cwnLIxVTE0lrQ8I4Qcdg=
Subject key identifier:   2A:65:FC:FA:98:C9:AC:CF:23:02:DC:E2:DA:F0:46:61:8A:64:EB:49
Certificate issuer:       /CN=633665d1-105e-4258-8cc6-d23d617ef3cf
Certificate serial:       010D0C9F4328584563F3074175B7A5C55D5D4A40
Authority key identifier: 28:E6:44:7C:71:D9:6A:E2:E4:4B:D0:2C:91:32:FC:81:96:1A:0C:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     33470
IP address blocks:        2604:d200::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:07:41:75:b7:a5:c5:5d:5d:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633665d1-105e-4258-8cc6-d23d617ef3cf
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=20decaa9-3589-462e-9636-fc3848568bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:09:5f:12:db:7c:b5:b9:81:2f:4a:bd:0a:
                    14:74:41:34:f0:08:93:ad:55:ba:a9:8b:f4:65:71:
                    e9:10:e1:43:7f:60:85:7b:c0:23:74:b3:62:ef:07:
                    23:09:b4:f5:7e:4c:4e:d1:a4:48:36:bb:2f:0f:db:
                    dd:62:dc:a6:92:bc:3c:7b:9a:ab:71:1b:b8:56:f0:
                    40:49:41:7d:c3:52:5a:66:9e:7e:0b:c3:77:75:97:
                    8b:e9:d3:1d:55:0a:cd:e1:8f:27:78:1c:94:f3:b5:
                    3d:10:33:47:53:2d:fa:79:76:85:40:d8:de:e0:66:
                    5d:1c:93:04:53:91:55:ce:d6:0e:d5:90:58:9f:53:
                    c0:28:0d:a4:04:95:3d:e9:4a:23:57:ee:8a:e5:45:
                    5d:a5:ac:4c:7a:a5:bb:85:a4:dd:fa:d4:1c:e2:62:
                    0d:3d:51:01:64:0e:a5:2c:24:61:ad:d4:9d:4d:87:
                    73:60:ca:a4:6d:df:14:ff:af:91:84:26:56:c2:09:
                    57:bc:b4:3c:7b:72:c4:6a:95:48:58:6c:96:00:79:
                    41:7c:ff:0e:de:b1:5b:80:37:73:b7:12:db:f4:e8:
                    39:de:d0:d4:57:49:05:67:25:f9:64:22:02:da:20:
                    c2:13:be:bb:ef:46:db:f1:2e:cf:e7:db:27:77:73:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:FC:FA:98:C9:AC:CF:23:02:DC:E2:DA:F0:46:61:8A:64:EB:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.crl

            X509v3 Authority Key Identifier:
                keyid:28:E6:44:7C:71:D9:6A:E2:E4:4B:D0:2C:91:32:FC:81:96:1A:0C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:75:a3:7a:c0:27:99:50:19:70:c1:61:c5:70:3e:53:08:
         8a:86:da:fc:e2:98:0d:50:b5:24:33:4d:0b:b2:60:73:a3:2b:
         19:e5:7c:28:37:1d:27:33:69:bd:a3:cf:69:98:0d:36:88:12:
         b7:36:5d:fb:de:12:5f:df:7a:3f:eb:d1:ac:2a:ab:8b:f9:9e:
         64:04:e9:d0:01:15:87:c5:10:72:b9:f8:ad:c8:10:dd:1e:d3:
         c8:9e:bf:ca:73:98:93:4a:33:a0:90:58:f6:f7:d1:2f:36:78:
         58:68:c6:17:79:e2:14:cc:e2:ab:ff:1f:54:a8:5c:04:0c:e5:
         6f:b0:dc:bf:52:6e:07:73:b6:4a:1e:64:c4:a7:3c:e5:c9:85:
         b0:74:7a:5d:2c:13:83:28:ed:15:e7:24:bc:c2:d7:ca:75:3b:
         bd:d4:57:3c:26:e5:4e:9b:d7:5e:8f:3e:f7:4a:b4:18:70:ba:
         8b:a6:df:b6:32:f1:64:96:dc:0a:31:ba:64:57:5c:56:18:5f:
         40:87:1b:0f:68:d6:b0:e2:cd:d0:c5:37:06:67:b8:aa:68:f2:
         f1:50:ba:e1:b7:e9:26:cd:36:dc:78:12:05:e5:07:31:af:86:
         6b:50:7f:68:f7:da:0b:bf:70:91:4d:9f:26:ba:3a:29:24:7f:
         e7:78:44:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:53:08 2024 by rpki-client on console-fra.rpki-client.org