Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa
File:                     cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa (raw, json)
Hash identifier:          T+6qw4FItBUmF66Gq65yb743aycpw0fjXuYcJSiOFbg=
Subject key identifier:   5D:FD:A1:D9:86:1F:8F:29:02:45:7F:92:A1:3C:80:4C:1B:2B:64:36
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F43285845295291CDDCC5CA52183D6200
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     399728
IP address blocks:        2620:98:e005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:91:cd:dc:c5:ca:52:18:3d:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=fa284293-e2db-4411-9b3d-bf29ec7eef1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:b9:89:4b:f4:1a:ee:2c:3c:d0:02:71:95:
                    70:7e:4e:9c:2b:28:d9:bd:7f:e3:14:36:56:54:69:
                    fb:40:97:84:9b:db:ed:96:d6:64:2f:26:e0:8e:3b:
                    3d:19:75:60:07:86:7f:70:77:16:19:df:aa:d8:b8:
                    2f:2c:1a:3d:8f:ee:f8:db:aa:37:7a:d1:8b:44:15:
                    38:19:ed:25:14:9d:e5:4a:31:15:e9:8e:cb:90:ec:
                    96:bd:03:a4:4a:e9:ed:1b:a4:fa:66:58:12:d3:f0:
                    9e:be:e6:97:85:27:6e:0f:e8:73:8b:e9:01:1a:3b:
                    f6:f7:06:84:ef:0e:73:fc:0b:37:c4:f2:30:53:f6:
                    bb:d4:79:8d:aa:b2:7b:15:41:36:ed:73:66:c6:c9:
                    54:03:3f:56:ec:35:2a:a5:83:10:9b:cc:dc:8d:35:
                    d0:8a:5a:81:56:b6:13:6b:87:39:57:80:0c:81:ea:
                    27:51:80:43:1d:d6:2d:7a:4d:90:36:2d:59:ab:84:
                    f0:cc:e5:02:50:3d:fe:f5:b7:b0:1e:bb:e0:fc:59:
                    ef:ec:9a:45:16:6a:90:24:db:a5:90:2e:44:bd:bc:
                    88:e5:0d:84:8d:e0:fa:de:29:5f:2c:2b:4f:4f:fb:
                    79:05:33:a3:66:14:e7:66:2b:cf:9e:4a:aa:f7:31:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FD:A1:D9:86:1F:8F:29:02:45:7F:92:A1:3C:80:4C:1B:2B:64:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c3:44:da:7b:e6:df:d9:5e:27:7d:29:eb:3a:9c:01:60:7d:
         75:76:fa:b1:c1:3d:88:8d:31:07:10:ec:00:56:0b:00:1b:3f:
         7e:ad:19:54:7e:04:01:f9:96:7e:23:26:54:04:09:4b:61:3d:
         fe:ed:46:47:6a:b8:4b:81:12:86:42:70:82:ce:ee:ea:df:16:
         bc:b1:97:82:9b:b5:6e:4e:03:07:86:cf:f8:34:b8:50:23:81:
         4c:44:76:51:81:78:96:b6:09:ce:19:52:76:c3:51:66:0a:27:
         92:60:5f:64:01:64:d1:39:70:b3:79:d3:0a:25:17:6f:aa:ff:
         b8:d7:df:07:27:8c:d9:4a:12:8b:d4:87:91:f2:09:16:c3:52:
         9f:ec:29:5f:f8:14:26:4c:c1:d2:94:5a:e8:78:bc:66:f8:38:
         01:86:be:df:1f:35:c7:11:69:8a:2d:e1:c4:36:b0:fb:09:9d:
         bb:e1:37:8e:e8:6b:38:05:0b:aa:ed:04:ed:67:5f:a3:5f:47:
         f2:54:90:38:bd:15:a3:a1:85:ef:79:27:e4:db:2b:62:b6:44:
         8f:38:0f:8d:b3:a9:f6:7c:dc:a3:ad:09:f0:0c:92:82:6b:59:
         c9:d1:ee:2b:f4:7f:77:14:9b:58:6f:9f:65:42:b7:5c:54:bd:
         53:61:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:41 2024 by rpki-client on console-fra.rpki-client.org