Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa
File:                     86d93acc-2536-31bf-8950-1dfaa1b48d16.roa (raw, json)
Hash identifier:          yY2Haad0CXi1qCXitNJ6ct7w9Rte+KkpFr90h44gTuw=
Subject key identifier:   09:B0:44:5B:0B:1A:7F:41:B6:E7:04:AD:EF:04:F5:7D:DA:BD:09:47
Certificate issuer:       /CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
Certificate serial:       010D0C9F4328584563F3017BB5483A49137025C0
Authority key identifier: 59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     19694
IP address blocks:        2620:136:4000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:01:7b:b5:48:3a:49:13:70:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=5edd078c-3cdb-4255-9e92-7fce15f8ad5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:b5:cc:35:c5:ef:00:2b:81:6a:68:ad:50:
                    ef:27:f0:91:67:9c:77:17:1f:88:b3:9f:43:ba:93:
                    6b:75:c4:56:5c:8a:88:7a:bb:85:08:2d:25:9d:06:
                    c5:40:89:36:cd:a1:d0:eb:42:ca:dd:6a:78:ba:f2:
                    65:15:a5:41:3e:ce:a8:8d:48:ee:5d:ca:b0:e7:22:
                    1d:ae:2a:c5:99:45:f6:96:4b:be:9c:ee:be:23:37:
                    20:bd:44:20:19:21:47:43:a4:db:4a:aa:35:dd:93:
                    03:a5:60:03:6c:f1:6a:0b:17:b6:66:4e:14:f1:06:
                    53:2b:55:12:17:3b:dd:c6:9d:34:fc:e0:f9:cb:7f:
                    01:4d:a1:9c:b5:8e:f4:de:5f:02:8c:96:0f:26:99:
                    d5:c3:87:c7:9c:f7:9f:04:a1:c6:f1:08:c7:f6:5c:
                    c8:39:98:5c:b3:a7:07:bb:5a:5d:58:3a:91:e4:6e:
                    68:ef:e0:d1:13:2e:92:f8:09:55:4d:58:2e:2c:0e:
                    03:58:a8:02:df:f8:96:39:5a:b7:ca:59:4d:79:71:
                    98:6c:c0:a6:c3:fa:40:66:49:01:be:8b:e5:9d:73:
                    e0:f9:f7:0b:b1:5a:b5:d9:40:1d:07:9a:d4:42:50:
                    53:b5:ea:ec:b8:4e:0e:df:00:0f:37:ea:dd:27:70:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B0:44:5B:0B:1A:7F:41:B6:E7:04:AD:EF:04:F5:7D:DA:BD:09:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl

            X509v3 Authority Key Identifier:
                keyid:59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:136:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:3d:49:77:09:40:95:b9:63:18:bf:83:ab:d2:6e:52:a6:
         5b:6f:17:54:0e:c2:34:9a:69:d0:9f:bd:c0:88:8b:32:09:07:
         47:79:2d:40:38:1f:dd:79:1b:fe:0f:3c:70:91:9e:b9:cf:5b:
         b1:7b:a3:48:45:38:e8:be:e1:fa:56:7e:c2:c2:0b:ea:1c:0f:
         2f:58:6a:4f:43:dd:12:5c:1b:07:f4:4d:30:1a:67:74:1d:c3:
         79:d9:c8:38:92:44:42:47:70:2f:e9:5d:4a:e5:18:30:07:a7:
         cf:f5:7f:29:b6:8e:03:aa:8c:45:bd:47:01:0f:9c:14:ea:cd:
         85:b6:7f:f8:c6:e9:fd:c8:4c:e6:38:b9:c6:c0:6f:8a:f3:cb:
         2d:03:f8:b7:61:a0:32:1a:e3:3f:5b:7b:73:20:be:ac:fa:17:
         f3:d6:76:f5:6f:bb:51:fc:a7:a3:72:39:30:d1:66:17:43:fc:
         81:15:37:42:5c:3e:75:2e:18:36:b8:af:2a:41:57:1b:83:e3:
         04:6d:20:59:bb:5c:12:fe:b8:7d:7c:8d:9a:86:ad:f5:f7:5e:
         09:be:00:05:9d:41:f2:db:c1:5c:ab:3c:87:7d:03:ad:46:1e:
         3a:49:fc:7b:a0:48:4e:f8:d0:f5:5a:3b:04:fd:31:52:43:27:
         54:91:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:52:56 2024 by rpki-client on console-fra.rpki-client.org