Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa
File:                     e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa (raw, json)
Hash identifier:          Ulwras9Gqc5T1mu9ZjTsBHUkuKbKcNJHqMOaVgHNyMY=
Subject key identifier:   6F:BF:7E:75:48:CB:A4:1B:78:AB:4F:12:6A:85:54:2A:92:92:CC:91
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F432858454272B8954EE95285D3C3D480
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     399728
IP address blocks:        2620:98:e00a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:b8:95:4e:e9:52:85:d3:c3:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=558297f8-29fd-495f-b6aa-21f8133311f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:fd:05:c9:4b:92:6f:af:91:67:21:21:23:
                    b8:a2:52:86:47:c5:20:75:33:49:1e:f8:7c:a1:06:
                    b3:d9:c4:00:25:bc:63:14:f7:04:89:cb:ea:5f:69:
                    12:73:e7:23:d1:78:b9:5c:e7:ee:b1:97:01:da:00:
                    25:14:6e:7a:fc:22:e6:b9:c5:4c:25:37:f4:c8:7d:
                    12:28:46:5c:5b:14:9b:e6:3c:e0:bb:a2:cd:3e:c5:
                    6f:29:d7:cb:87:1a:50:d3:40:4b:90:52:45:5c:39:
                    72:f7:af:61:25:69:14:71:ab:bf:97:a4:ff:29:10:
                    e3:94:7d:cb:49:84:b0:91:ba:3d:26:f4:99:12:24:
                    7d:e0:f1:24:b9:98:76:b7:14:8e:13:77:a1:4b:52:
                    38:20:37:63:98:f6:6d:d2:9d:4f:8a:d9:a0:84:31:
                    a6:27:23:43:ff:ba:45:b8:66:c5:f5:f2:ff:ab:2e:
                    da:c0:a1:e9:72:b5:e0:0c:fc:30:58:0f:86:3e:c1:
                    ac:01:9e:d9:2d:01:ca:39:6e:53:e4:64:ad:b2:2e:
                    88:d7:c2:35:44:c3:c0:be:e0:17:02:34:8d:e1:d7:
                    fb:2e:9b:41:c2:b0:1b:e0:3c:93:91:34:0d:0b:4c:
                    e9:1d:56:1a:74:16:74:9c:05:fb:96:7f:34:54:20:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:7E:75:48:CB:A4:1B:78:AB:4F:12:6A:85:54:2A:92:92:CC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:72:ba:e3:28:37:31:09:54:ec:a2:7c:17:7c:d9:13:d4:0d:
         22:3f:b2:42:29:d7:23:79:40:f9:80:d3:82:e4:cf:2b:fe:e3:
         7a:0f:50:bc:b8:9e:b9:44:9a:8b:76:7d:75:ac:f0:e6:e5:73:
         9e:82:55:71:ef:7d:15:9c:ee:0a:ca:84:12:04:1d:95:a1:2e:
         7c:36:ed:63:b8:8d:68:f8:c0:bf:fd:2c:61:45:85:e1:9b:4b:
         aa:76:12:36:b0:b5:7f:7c:99:de:52:ac:ad:56:c8:e8:64:a1:
         57:10:3f:16:c6:b9:a6:98:c6:43:d0:8b:51:20:25:98:97:fd:
         8e:99:35:b0:23:63:8a:e0:5e:29:c1:e8:e6:d4:d5:a6:af:63:
         16:28:75:20:c3:f8:7c:6e:5f:41:6b:1d:3e:c8:07:f3:b4:4c:
         fc:a8:ec:8e:f1:d0:a6:67:43:e8:50:d9:ec:1e:4a:9a:be:07:
         19:67:be:dc:a5:7e:22:ca:48:c8:8c:75:c2:a7:bf:45:b0:00:
         be:b0:b4:57:bc:7e:95:20:96:9c:aa:7a:04:99:26:13:20:c0:
         50:8a:05:a9:84:92:59:27:19:2b:a6:b5:36:83:2c:f2:f5:f4:
         39:99:a2:2f:d2:38:1f:ee:e8:ac:6e:4d:0a:f0:d1:65:7e:f6:
         33:09:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:24:57 2024 by rpki-client on console-ams.rpki-client.org