Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa
File:                     56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa (raw, json)
Hash identifier:          rnHiE1jeRCX2fGn0Qcvooo98/3crh2CftLakizoeoEU=
Subject key identifier:   BB:F3:CE:59:9D:40:5D:ED:64:32:B4:B2:D3:0F:F2:FE:40:FA:1D:42
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584554981F6317678CA10039F580
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     399728
IP address blocks:        2620:98:e008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1f:63:17:67:8c:a1:00:39:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=333e4b81-ee96-4785-95f1-66c618a71d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:cd:02:8d:55:67:c2:d9:0e:11:df:79:f1:
                    d4:8c:03:a4:bf:40:5b:be:3a:99:65:44:8c:a1:b2:
                    9f:3b:74:d2:57:aa:36:12:98:54:97:cb:67:5b:81:
                    f8:70:79:79:40:7d:47:ca:a5:75:54:71:ba:5a:40:
                    12:fe:d4:78:2d:b5:ad:5e:db:3d:3b:bd:e4:f6:73:
                    0f:63:21:40:73:ac:6e:b0:4f:10:ad:d2:a1:72:6b:
                    e1:58:66:af:75:f2:51:9e:7b:65:db:d7:1f:8d:15:
                    ad:f7:df:fb:27:2b:f0:68:1e:89:a7:07:6e:91:b4:
                    bd:bc:14:5a:db:f7:a3:38:74:a8:22:a0:3d:11:ef:
                    e1:6e:34:dc:ca:3c:47:dc:9e:d7:74:8f:66:ac:7e:
                    4b:d9:53:04:28:7d:89:64:c1:ba:12:95:1f:6b:12:
                    76:29:8a:f1:d9:6e:b3:43:d8:8c:d9:fe:ff:27:ce:
                    15:7d:42:90:c6:1f:4c:e2:92:5e:f2:4b:f1:9f:d3:
                    50:89:3f:48:1d:66:ff:75:f8:d7:db:52:97:92:8b:
                    12:45:85:ea:7c:c4:e8:1a:80:7d:85:67:fa:12:c8:
                    fa:12:06:04:7c:c5:83:65:ec:f9:eb:95:eb:13:88:
                    2e:1a:fd:f0:d7:a3:bb:4a:b0:45:ad:c5:9e:71:41:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F3:CE:59:9D:40:5D:ED:64:32:B4:B2:D3:0F:F2:FE:40:FA:1D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:21:85:d3:ba:f9:5a:52:da:13:c2:5c:7e:58:9d:3b:bc:e4:
         19:68:b5:b8:2b:36:94:27:95:ed:c9:32:15:ef:5a:d2:56:15:
         16:66:5b:0d:07:df:79:5a:83:da:5d:d4:e2:ba:3e:53:cf:35:
         4b:fc:bd:b2:fd:18:02:b2:f1:1f:5c:5f:e0:d0:ee:81:36:a5:
         d0:ff:c3:16:ee:21:48:36:f9:70:e1:12:22:37:02:6f:1d:f4:
         96:ec:37:87:5d:74:82:be:87:ba:66:dd:4d:40:a9:ff:10:6d:
         f6:17:6b:2c:4b:82:75:4f:90:d3:03:6f:85:4c:b1:61:3b:3a:
         41:9b:b5:c0:b1:29:ee:7f:71:21:3f:b3:b2:65:08:7f:f8:c4:
         1b:0f:af:9e:56:cd:47:69:f8:64:7d:f6:2b:99:cc:f9:da:1c:
         1c:7d:ab:3f:bd:70:13:7e:8f:87:a2:19:24:02:3c:8f:cf:18:
         43:ac:ae:33:9b:52:9c:50:c7:25:3f:98:4a:94:3c:a1:ee:c5:
         86:52:2b:52:59:f5:05:8b:7e:e3:00:2a:a3:f3:a7:8e:78:4c:
         61:36:56:95:20:a6:88:46:c5:8e:85:f4:73:9d:bb:7d:8b:ea:
         00:71:48:0b:51:93:c7:6f:f3:d7:a5:c0:76:b1:d5:5b:64:0f:
         c3:84:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:10:43 2024 by rpki-client on console-ams.rpki-client.org