Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/c3ed521a-ae83-3435-9480-593d70ad3dd3.roa
File:                     c3ed521a-ae83-3435-9480-593d70ad3dd3.roa (raw, json)
Hash identifier:          8L4h5G0pECnvT99CYPLXGApDTteQ6sDWRKet7PcU9nM=
Subject key identifier:   AB:21:9A:4C:F2:D6:48:EA:5C:14:D4:69:68:40:50:BF:B1:EF:33:71
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F43285845295291DFC8D1D4E914650280
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/c3ed521a-ae83-3435-9480-593d70ad3dd3.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     399728
IP address blocks:        2620:98:e00e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:91:df:c8:d1:d4:e9:14:65:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=ffd928c5-fa46-43f1-82ab-32169f347d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:21:96:19:82:0f:9b:86:90:cc:b5:22:ed:
                    2c:98:9c:cc:87:4a:83:cd:a0:b0:b1:21:31:53:25:
                    45:5d:ff:dd:01:3f:95:8c:3c:84:09:90:d5:ad:e9:
                    1d:17:06:1a:23:b1:33:57:bd:61:2f:1d:e9:f6:78:
                    06:c3:1a:05:73:59:6a:5e:ef:e9:8a:71:28:45:87:
                    36:7b:25:1a:a5:ef:46:92:ad:c5:6f:01:81:53:fa:
                    f2:d3:31:ed:9c:8e:4b:78:f8:c1:c8:d5:a9:d4:41:
                    05:91:e3:36:c1:70:79:10:84:79:51:a9:ab:d9:ac:
                    12:7f:f6:6b:ea:8f:7d:3b:59:4f:aa:35:97:a2:36:
                    6a:4e:a6:cf:34:ce:0a:4e:1c:00:cc:bc:d6:80:f3:
                    1c:46:5e:f6:28:b0:23:1b:0e:54:70:96:80:76:07:
                    af:bc:71:13:ac:4d:a5:a8:65:ea:35:b3:62:88:9e:
                    3a:48:56:a3:ec:7b:0f:54:91:33:4d:d3:4b:f1:fa:
                    de:31:ee:ad:43:14:61:78:26:7a:3c:0f:56:34:54:
                    19:b7:7d:67:e4:10:3b:7e:85:cf:d8:ca:98:e4:97:
                    f0:26:04:8b:b0:49:e5:a8:28:2e:f4:1f:f6:5a:70:
                    28:40:28:6d:a4:73:fd:44:bf:0c:e2:8e:dc:2f:92:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:9A:4C:F2:D6:48:EA:5C:14:D4:69:68:40:50:BF:B1:EF:33:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/c3ed521a-ae83-3435-9480-593d70ad3dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e00e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:57:54:61:18:6d:fb:b8:59:f9:b9:18:20:f3:a1:6c:7e:8b:
         40:da:6f:5f:2e:3d:2f:68:8e:e6:8b:72:38:fe:bc:d0:f4:07:
         d6:e4:8d:45:ad:94:c9:57:f3:ea:39:ab:b8:11:b5:9e:3f:6b:
         e1:99:1c:08:0b:df:25:ad:68:33:a5:c4:2b:a0:67:6b:bc:ef:
         83:d0:d7:14:ee:ad:2d:41:e6:c2:1e:a4:20:92:24:7d:d7:5e:
         a3:54:c1:67:a6:b7:43:35:b4:31:c1:b7:93:b9:68:53:cd:2b:
         33:f0:0f:1a:17:6b:27:92:3c:03:88:95:8a:4a:22:09:1d:52:
         38:a6:95:27:c2:16:5f:c4:b1:68:77:d3:d9:a6:38:89:9c:ce:
         83:c2:b5:70:2d:89:6f:3b:c6:c1:38:56:64:3c:49:12:66:5e:
         32:59:19:6d:53:e9:88:4e:d2:c1:44:96:cc:a7:ff:e4:f1:37:
         e1:33:79:70:65:5a:7b:2e:25:06:47:27:2e:4d:ec:e6:e6:7d:
         8a:38:ef:66:79:39:02:da:cb:e6:bc:fb:c7:e0:87:33:df:b2:
         ff:a8:53:cc:6a:2c:40:34:da:e1:03:33:4c:51:38:8f:bc:9e:
         0c:e4:76:4b:b2:ae:f9:3f:e1:b3:cf:f0:f1:b6:c2:73:3e:15:
         04:02:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 07:54:13 2024 by rpki-client on console-ams.rpki-client.org