Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa
File:                     c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa (raw, json)
Hash identifier:          7eGsSLDccbSuHvZ8WXzvEw2Wv3XkKgAKvnnfha+akxw=
Subject key identifier:   B4:FF:43:00:A3:78:AF:B9:C7:98:45:92:2B:80:CD:65:B7:77:14:2D
Certificate issuer:       /CN=6dfb8a83-8fe5-48a4-88df-ad72541dae26
Certificate serial:       010D0C9F432858455E5DA640B3A4CBFFF99AB140
Authority key identifier: 9D:4F:21:1C:94:F3:51:87:DA:8B:C9:E5:34:B0:F1:93:01:05:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     393454
IP address blocks:        2620:119:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a6:40:b3:a4:cb:ff:f9:9a:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfb8a83-8fe5-48a4-88df-ad72541dae26
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=4a0e495e-639e-45da-8d0a-d47c96aa7645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:41:e3:7b:82:91:cf:33:37:6e:ef:be:55:
                    07:91:96:61:c2:a1:39:e8:4b:ef:c9:03:79:19:f9:
                    8c:2f:3d:01:f2:fc:3b:d5:23:41:e5:1a:f1:cc:52:
                    a6:3e:1c:58:02:c9:d8:7b:44:86:e3:67:39:4c:5b:
                    5f:09:e9:ec:ff:fa:45:61:2b:db:89:1f:a7:82:2d:
                    92:fc:3e:ba:8d:ac:9e:8a:88:b8:f3:ca:7c:97:3d:
                    9a:e0:b9:93:4e:53:f1:c7:cd:a9:da:ff:33:3a:b7:
                    56:29:58:44:f1:76:d6:87:81:6d:1e:45:6e:cd:bd:
                    0a:cc:c0:bb:d0:55:6c:08:3f:77:8b:57:87:02:bd:
                    b0:ed:7b:e2:40:79:f8:76:71:36:c3:fd:d0:f6:70:
                    8c:38:fd:ea:53:28:58:7b:54:55:9f:50:c2:90:82:
                    bc:cd:8d:50:99:ab:10:81:26:84:48:f3:31:14:08:
                    80:5c:ba:3a:5d:a6:a4:44:4d:6f:79:f3:05:d4:64:
                    7d:5f:ac:85:1a:11:6c:a3:c6:6f:a7:07:d6:7c:c7:
                    45:65:b5:b2:78:c2:16:fc:21:f2:05:8d:92:8e:55:
                    77:83:f1:0d:66:dc:57:f9:e9:24:bd:ec:3d:78:40:
                    05:db:3f:4e:5d:af:72:73:9a:00:c7:2c:1c:59:3e:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:43:00:A3:78:AF:B9:C7:98:45:92:2B:80:CD:65:B7:77:14:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.crl

            X509v3 Authority Key Identifier:
                keyid:9D:4F:21:1C:94:F3:51:87:DA:8B:C9:E5:34:B0:F1:93:01:05:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:27:e7:8a:2b:18:ff:8c:6e:9b:85:8a:9c:11:0f:22:5d:
         be:18:8d:c9:1a:5d:9e:8c:85:db:58:4b:b5:67:62:00:fa:b3:
         78:b3:ab:e9:df:7f:62:1d:65:80:0d:1a:2f:2d:d4:b3:d8:3e:
         d7:ac:af:6b:7e:a0:78:32:82:6e:3d:20:05:b6:ec:53:16:e6:
         7b:f5:f3:15:85:7e:fc:ea:d2:dc:d3:d2:83:73:c1:c7:19:5e:
         48:97:ce:ea:de:04:0b:14:b1:45:8a:68:1c:ba:b2:5d:17:6a:
         3b:80:99:3b:d0:33:18:a9:de:20:f9:db:aa:6f:5f:2d:dc:11:
         90:6c:e9:51:13:a9:17:4d:0c:29:49:b6:53:78:5a:cd:8d:0a:
         3d:65:f1:c9:f5:b3:3c:e2:7c:93:03:6a:a2:d7:4c:a6:6e:a9:
         71:17:d6:52:30:7a:ce:5f:6b:4b:8a:39:08:6b:13:0d:46:43:
         8d:35:26:0f:30:67:8c:a6:3e:21:60:dc:21:e4:db:0c:e4:53:
         4c:6d:22:70:02:8f:34:a2:c5:88:63:cb:8c:f8:4a:12:0a:a7:
         73:af:91:61:c0:a1:5e:22:04:ea:a3:4b:ab:ef:89:c4:33:c0:
         e9:e4:10:05:fe:05:b6:7a:c7:a1:d3:41:18:54:ab:02:3a:d8:
         df:ba:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:38:25 2024 by rpki-client on console-ams.rpki-client.org