Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/2fe383f6-932c-31db-b72e-7464e9caaa3e.roa
File:                     2fe383f6-932c-31db-b72e-7464e9caaa3e.roa (raw, json)
Hash identifier:          0YI4/Ec3u+SPZz0hmNeNAFPmf1BtusOFVYCuOJyg56Q=
Subject key identifier:   CD:F9:3F:58:BB:92:0A:28:6F:E8:A9:26:EA:B4:DE:F2:D0:F0:F1:28
Certificate issuer:       /CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
Certificate serial:       010D0C9F4328584561285A6837D20C3FF9D09100
Authority key identifier: 39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/2fe383f6-932c-31db-b72e-7464e9caaa3e.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     394731
IP address blocks:        2620:124:b002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5a:68:37:d2:0c:3f:f9:d0:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=1aaeb3d6-ae9a-4e71-b0b2-83dcdbfdb0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:75:bb:a8:04:eb:b5:af:e4:6e:23:14:43:
                    92:f0:15:56:b2:28:22:76:c4:38:e6:1b:45:e9:ca:
                    31:01:b7:9c:fd:24:0f:30:1f:85:bf:aa:e2:6c:fd:
                    0b:63:fc:1d:5c:42:b3:d3:dc:c7:4e:e1:c5:c8:4a:
                    d8:7c:7b:a6:c6:3c:0f:de:fd:bb:48:a2:ab:ec:06:
                    34:96:43:7e:01:de:30:43:f4:61:aa:19:21:dd:f9:
                    f6:e9:c6:27:4f:92:0b:07:1c:d6:cf:c9:91:83:34:
                    5a:88:e4:9c:03:aa:2a:2c:5e:c5:5c:a2:69:d3:a4:
                    98:08:ae:8c:42:81:e0:32:c1:f6:e4:07:f0:a6:06:
                    0b:05:32:f4:02:40:80:56:e2:c6:25:5b:49:89:0a:
                    5a:28:3f:1e:2f:61:b2:ef:2d:d7:f9:67:90:cd:f4:
                    eb:11:0b:93:98:26:de:c8:fc:ec:4d:38:6f:d3:85:
                    08:e3:4f:85:2c:58:2b:c0:a8:01:6a:43:6d:f4:bc:
                    de:59:11:ff:f5:c0:f7:1c:86:ae:cd:8b:19:9e:f7:
                    b0:c4:94:42:ca:2a:d1:22:14:72:62:62:ad:1c:15:
                    ed:a7:78:ca:43:41:87:22:82:bf:6b:d4:bf:39:43:
                    79:38:76:0b:0d:e5:c2:c0:64:0e:9a:5d:2c:f3:29:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F9:3F:58:BB:92:0A:28:6F:E8:A9:26:EA:B4:DE:F2:D0:F0:F1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/2fe383f6-932c-31db-b72e-7464e9caaa3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl

            X509v3 Authority Key Identifier:
                keyid:39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:124:b002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:59:ab:c8:a3:21:b8:a3:99:f9:44:2b:56:3a:be:2f:aa:85:
         1f:ba:5f:ad:49:a2:8b:4c:82:f2:38:9b:7c:d4:f3:a9:ca:0b:
         25:ed:78:61:c9:9e:97:50:50:2a:c4:86:f1:e6:57:95:76:6d:
         06:fc:08:e2:51:da:09:60:53:e4:44:c8:e3:73:9d:07:64:de:
         82:56:b3:7b:e7:02:f8:bb:d7:3a:82:29:3e:03:63:c2:af:09:
         18:2b:85:94:d4:5e:86:d9:28:1f:cc:b3:de:0c:d8:a0:82:3b:
         b6:3b:8e:0c:4b:eb:7e:3a:65:2e:73:6d:2a:f5:20:6c:5b:58:
         4e:28:15:15:c3:f4:f2:06:08:bc:18:71:52:e8:07:83:54:8d:
         3a:82:1a:8a:2e:da:41:bf:e2:91:01:cf:01:29:81:7a:4b:89:
         fa:9c:93:9c:01:9d:a1:f0:00:97:b7:b4:c8:46:41:e1:13:34:
         a3:db:3f:b9:a5:ee:5f:30:4c:0f:3e:2e:b5:b1:c4:51:1e:db:
         d6:c7:c7:2c:38:dd:76:28:59:cf:d8:95:25:47:dc:4f:7d:de:
         54:2a:54:57:10:47:0e:33:47:66:8e:ad:66:cd:1e:36:6a:16:
         bf:59:40:95:8c:dc:98:3d:09:e5:dd:0e:bd:e3:14:52:76:6e:
         b1:78:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:31:29 2024 by rpki-client on console-fra.rpki-client.org