Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f4918535-93c7-36cc-9434-fa54520d5721.roa
File:                     f4918535-93c7-36cc-9434-fa54520d5721.roa (raw, json)
Hash identifier:          Q2PFx0hTLSfrccOVK83OwXtjuqEq3KmmaXt7l/quQ1M=
Subject key identifier:   90:89:F3:88:E7:1A:EB:E8:3D:77:0C:FE:75:E8:E1:0E:70:DD:27:7F
Certificate issuer:       /CN=f357e341-9d26-4129-b5e8-c23c09471ee7
Certificate serial:       010D0C9F4328584561285D0300362669E5D5E5C0
Authority key identifier: E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f4918535-93c7-36cc-9434-fa54520d5721.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     46792
IP address blocks:        2620:139:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5d:03:00:36:26:69:e5:d5:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f357e341-9d26-4129-b5e8-c23c09471ee7
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=8ce6cc00-6af8-4895-b316-aec76902ae06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:b8:67:cf:11:d4:7e:91:74:a8:ae:89:e0:
                    30:80:3e:2b:24:d8:7b:ba:9d:fd:36:a5:53:b7:a4:
                    f8:2c:e2:d3:1d:c6:4a:ff:77:68:c8:e5:ed:c2:49:
                    f2:7f:b3:ce:5c:e9:bc:ac:03:7c:00:94:e9:e6:85:
                    c5:b9:d5:ee:54:41:6f:54:50:73:4f:e8:96:8c:00:
                    b6:19:95:41:11:e9:3b:64:ed:15:74:8b:f8:b6:47:
                    2a:ef:00:dc:36:b7:6d:07:d0:c7:00:83:54:c9:b1:
                    d5:99:04:64:cc:f1:4f:09:d6:1d:33:26:9e:da:03:
                    cf:fe:97:83:8d:93:db:09:13:44:b7:8a:8f:7b:16:
                    bf:a1:05:66:4f:e9:a0:e1:a6:59:5b:1b:16:d0:d1:
                    74:4d:a6:31:48:a8:1b:91:e3:68:ac:77:93:50:f0:
                    87:bd:76:ab:8c:26:09:cb:5f:49:5a:a4:f6:bb:1c:
                    4c:52:5e:0c:af:30:40:ba:f6:d8:15:ec:14:7f:fc:
                    fb:9b:3b:98:4e:5b:f6:8d:bd:f2:6c:4c:00:d8:b1:
                    9a:97:bc:8f:8d:77:58:4c:8c:c1:46:e2:91:f6:74:
                    68:4a:92:64:1e:43:51:e3:43:82:93:e2:ab:c3:df:
                    70:f4:da:65:60:f5:08:3f:75:68:25:16:22:98:44:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:89:F3:88:E7:1A:EB:E8:3D:77:0C:FE:75:E8:E1:0E:70:DD:27:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f4918535-93c7-36cc-9434-fa54520d5721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl

            X509v3 Authority Key Identifier:
                keyid:E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:139:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:e8:65:05:be:23:59:c6:e8:73:8f:41:de:6c:b0:1f:1b:
         42:8e:1b:3f:36:6f:e5:aa:cc:45:0f:a2:06:80:e0:f2:cb:89:
         0b:28:89:eb:cd:90:e1:3c:6f:21:dc:1f:77:ae:2f:5a:da:3c:
         68:f2:f9:ac:7b:53:e3:a4:c1:c8:ac:f5:2b:60:bc:0f:70:92:
         1c:90:c8:eb:ab:f4:76:fe:d4:2c:b6:51:a1:42:9b:0f:59:70:
         93:ef:22:a8:4f:67:ed:6e:1b:74:9d:e8:c3:28:98:bd:01:1e:
         35:f9:96:fb:f1:a4:40:5b:ea:63:2e:bd:81:de:16:b1:b1:5b:
         fa:16:32:55:ed:ac:92:79:79:51:7b:6a:54:33:39:78:ed:3d:
         70:ac:63:f1:27:67:12:ee:0e:a4:dc:d8:a1:95:55:dc:95:05:
         37:61:83:60:ba:45:de:2b:29:48:78:ae:e7:03:fa:9a:a7:ad:
         d9:71:18:a1:a8:07:35:47:80:4c:dd:e5:16:12:01:f3:04:ec:
         ff:e9:f5:ae:37:16:9b:a2:17:9a:e9:2a:a1:ef:02:77:8f:69:
         0a:16:79:1a:45:7a:8f:33:ed:13:47:e1:2e:2d:e9:9c:b9:93:
         c5:1b:5b:4a:be:1c:a9:2d:52:e3:c5:16:08:c3:6c:01:e9:ab:
         71:7a:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:39 2024 by rpki-client on console-fra.rpki-client.org