Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
File:                     6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa (raw, json)
Hash identifier:          oZtZ5nyHntgJoty4Aec0Z0PLiYQivYinFvnywaS0F1w=
Subject key identifier:   EB:2D:A2:82:D2:41:2C:16:BD:A3:D0:A1:8F:13:48:7B:57:4A:78:E0
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F43285844F2FFF6F6C34F36B6DA5F1D00
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     399728
IP address blocks:        2620:98:e007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f6:f6:c3:4f:36:b6:da:5f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=f123e381-bcaf-4c0c-a0e1-e42cd21fc183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:00:9b:fc:d6:30:54:7f:9f:6b:11:7f:87:
                    0e:f7:55:fc:25:48:3f:88:d2:0f:81:24:47:ff:2a:
                    94:5b:75:37:b4:9e:bd:fa:5a:f0:0f:10:ac:f8:fc:
                    6f:87:5b:23:f0:80:f5:97:f0:57:c8:5b:99:5a:d1:
                    76:fc:d3:da:3a:99:1c:e4:c5:b3:a0:3b:d2:ee:35:
                    a4:e4:99:3b:f4:22:bd:28:c8:76:21:f9:77:ed:7c:
                    80:48:91:1a:82:f5:e8:b2:96:08:41:d7:46:64:e2:
                    dc:15:67:0f:e4:54:73:af:e3:28:11:12:e6:1a:d4:
                    fe:67:99:16:65:6e:1d:e2:0d:bb:ca:2f:ed:4e:26:
                    8f:7a:e4:16:10:1b:bf:64:ec:a7:7a:5d:a8:52:06:
                    50:e0:00:62:6b:97:ff:04:2a:8a:09:84:f6:ae:1e:
                    0e:05:b2:59:5f:7d:78:d9:db:fc:e3:75:19:ff:93:
                    83:59:5a:43:da:e0:e9:06:84:85:35:96:6f:91:b6:
                    dc:d8:ff:c9:f0:ea:c3:88:98:00:08:a7:77:9f:ed:
                    58:20:d4:a4:12:f4:e0:9b:61:fd:98:02:8b:5f:f1:
                    8e:69:c2:a1:83:c6:6b:f5:c3:14:7a:bd:34:c9:b3:
                    5e:ec:ef:4e:ae:53:6e:39:b1:c2:0e:f1:7a:63:cf:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2D:A2:82:D2:41:2C:16:BD:A3:D0:A1:8F:13:48:7B:57:4A:78:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:3e:73:af:64:0f:82:7d:93:f8:4f:fe:04:6a:3f:53:f5:ab:
         97:f4:07:85:2f:a7:ca:31:b7:4f:f0:0a:c0:88:27:32:c6:90:
         e3:1f:f4:7c:8c:29:4c:06:5a:4c:7f:a7:85:63:73:3c:e5:78:
         6b:67:b1:18:bc:a9:ad:fb:3d:75:14:22:c7:43:92:34:5f:73:
         6b:b2:c0:9c:a3:06:73:a2:71:a9:c3:b4:56:f0:a5:7c:3f:3a:
         69:ed:a3:66:94:40:ac:06:44:00:54:1b:8a:45:4d:b1:49:15:
         d5:9f:1c:38:b6:62:98:5a:f2:78:61:27:6b:35:da:a3:a6:42:
         32:5b:9c:5a:7e:75:03:b0:af:22:a3:89:29:51:fb:59:84:e0:
         02:8d:93:1e:dd:27:c4:90:52:8b:80:cb:96:66:9a:67:c3:64:
         33:77:84:9a:ab:07:f4:bc:bc:cd:58:7f:03:8e:1a:26:c1:f2:
         f4:1e:ee:29:60:96:41:ca:b4:7f:ca:ad:a9:0e:e7:61:9c:75:
         98:69:d4:40:84:a7:4b:7d:ee:df:65:a3:5a:98:97:f8:d9:78:
         20:9c:0f:0a:dd:ab:a6:ff:53:51:e2:31:80:6d:17:57:cd:e3:
         d6:b1:38:52:dc:66:d1:8e:2b:bb:81:e2:a4:59:b2:d1:2f:f1:
         80:15:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:12:35 2024 by rpki-client on console-ams.rpki-client.org