Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa
File:                     21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (raw, json)
Hash identifier:          ey5DZ+sfD05tpaojiHwTVcQYjAO8EZn6LLx3HWq2Vok=
Subject key identifier:   29:90:A1:29:18:30:D9:81:55:F1:D8:DA:66:C3:45:D1:C9:82:A1:DE
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584566BDB4D7681847C025DBBD00
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     395287
IP address blocks:        2620:128:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b4:d7:68:18:47:c0:25:db:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=ca81c4d0-6935-4d75-9035-bf9b40113bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:4f:05:71:24:cb:0b:ba:d2:f5:d7:f2:29:
                    be:cf:3d:fa:8c:ac:e9:e7:3f:fd:1e:50:5e:a4:96:
                    3f:99:8f:08:83:aa:d6:3c:8a:b1:e1:f7:aa:00:2f:
                    70:80:4e:99:24:68:e6:e2:bd:19:14:7e:dd:b0:2f:
                    e4:fe:43:24:cf:53:0c:14:a7:42:9e:dc:6e:87:bd:
                    fd:7c:36:24:77:c3:4f:b8:a5:ac:4d:b6:c4:bd:e6:
                    f1:d4:bf:42:ba:91:cd:99:2e:f1:5e:29:dd:b5:b2:
                    1f:fc:52:6d:ff:6f:50:27:11:90:ab:dc:c9:52:b7:
                    a9:ec:2a:57:4b:2c:37:98:0d:6d:11:d3:71:5c:43:
                    9f:eb:09:e9:c1:29:3e:40:88:e3:31:b7:2c:1b:37:
                    83:e5:03:e6:76:0c:e7:7f:5e:90:65:e1:00:2e:02:
                    2d:68:ff:9d:f4:f5:61:b5:19:47:97:be:d2:54:8b:
                    de:3a:bb:6d:5b:44:c6:f4:a3:9b:0d:eb:f0:91:df:
                    6e:b5:55:c9:b5:27:04:89:8e:05:63:18:1c:b0:1a:
                    16:6d:92:7a:8b:27:ed:c5:77:2a:c0:39:06:65:54:
                    97:8d:15:ad:b1:33:3b:22:7c:1c:f9:15:08:7a:7d:
                    30:c9:f7:40:0e:32:26:b1:47:c1:4e:3a:37:02:d9:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:A1:29:18:30:D9:81:55:F1:D8:DA:66:C3:45:D1:C9:82:A1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:128:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:04:9b:42:6b:c5:53:f0:29:2c:a5:88:78:43:4d:ea:ea:
         44:a7:80:b1:9b:07:eb:1c:b7:da:77:25:53:a5:0b:5f:43:55:
         98:13:7d:7e:4b:40:91:9f:73:05:52:e9:14:3a:79:94:9c:bd:
         70:81:86:4c:b3:e5:40:54:8b:35:c9:c2:63:9a:07:54:e3:58:
         e1:72:46:6a:18:a3:ee:3a:99:b9:86:a7:95:00:2d:b5:a0:9e:
         24:3b:79:7a:d7:52:10:fe:c5:8b:e7:cd:d2:f1:75:b0:8d:9e:
         cc:c0:c8:70:08:e2:d2:c8:01:17:2d:cb:93:96:14:29:94:ee:
         6b:94:0f:af:d4:ee:63:20:95:d1:a9:62:0c:06:23:d9:fc:bf:
         de:9d:5b:e9:dc:c8:fc:04:5a:66:11:12:a4:bf:c3:9b:03:76:
         c1:01:60:cb:72:bb:48:87:39:23:cc:9d:ca:3d:68:15:94:bc:
         d2:da:1a:62:57:1e:6b:9b:88:35:77:70:9b:fa:96:3c:7e:60:
         b3:3a:ea:30:f3:19:35:1b:2a:43:9d:a0:3c:0a:d4:86:50:dc:
         f8:3a:0f:bf:a2:d6:a1:ce:28:9c:99:85:45:1b:8f:11:67:10:
         ef:85:80:20:3c:22:f7:f0:c4:08:fa:70:db:38:4a:6a:28:74:
         aa:ea:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:51:13 2024 by rpki-client on console-ams.rpki-client.org