Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
File:                     4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json)
Hash identifier:          oCQbxQxKQi4HAcZbplkGu0ed1wy1lPyGfLleDUQIm5w=
Subject key identifier:   6C:67:FA:61:97:85:E4:B0:FA:90:72:3A:22:8A:62:59:FA:B1:56:50
Certificate issuer:       /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial:       010D0C9F432858455068253992F894EB831DE900
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     394449
IP address blocks:        2604:3dc0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:25:39:92:f8:94:eb:83:1d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=d82c1e4e-8de6-4c38-9602-221d207cc2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:7c:7f:ba:1f:13:4b:3f:3a:07:1a:dd:59:
                    df:78:35:32:19:f1:c8:1c:16:2f:de:60:96:a7:b7:
                    f8:63:5a:07:62:ae:22:55:cb:99:ee:19:4a:57:34:
                    85:62:17:00:b9:aa:dd:35:e6:f6:a6:b9:9e:28:f7:
                    c5:d6:b8:6a:e1:24:c0:86:f5:03:73:bb:4a:25:a8:
                    5b:55:21:f0:4f:4d:aa:89:56:06:52:68:fb:ed:c6:
                    17:7f:a8:64:d9:22:50:c1:6b:78:f3:af:8a:bd:1f:
                    e4:7f:53:1e:40:91:ab:8f:e7:f9:95:2e:82:e9:a2:
                    9d:a0:15:94:19:65:71:f4:5f:fd:9d:1b:48:38:12:
                    6b:f1:c1:c1:ef:2d:f3:f4:6c:a5:27:6f:8f:0e:8c:
                    b2:8d:b5:f2:7c:e6:7f:46:8f:0b:d7:c8:3e:b2:90:
                    f4:f0:96:5c:32:c5:e6:9e:83:7e:ac:74:6d:71:55:
                    ad:f3:10:cb:b3:5f:65:95:b8:0d:26:5b:65:9b:4d:
                    ac:8a:4f:32:f0:34:63:7a:89:a5:73:7a:65:60:88:
                    f6:a7:01:da:28:e7:99:70:e1:c7:54:af:ea:2c:df:
                    e1:9e:d9:22:31:95:c1:3a:5c:78:49:2c:fd:fa:4c:
                    52:e5:ed:95:8c:2f:aa:42:2b:ed:65:cf:1a:a8:c9:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:67:FA:61:97:85:E4:B0:FA:90:72:3A:22:8A:62:59:FA:B1:56:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl

            X509v3 Authority Key Identifier:
                keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3dc0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:c5:95:35:00:67:ce:05:1e:5e:97:36:f1:07:9f:7f:fe:
         4e:19:98:82:eb:d9:10:6c:78:bc:4f:c9:6b:80:b5:cc:ca:06:
         73:7e:05:d8:f8:ca:85:c0:59:d0:47:f4:2f:fa:9e:3f:17:c2:
         8b:02:62:02:c7:f0:3e:5e:ba:a5:f4:26:b5:50:ad:02:7d:65:
         4e:be:ce:6d:88:31:e7:1d:ff:6a:65:5d:1c:af:b5:8f:b1:9f:
         f0:f3:61:0a:6b:0d:1b:7e:82:f2:b5:e9:7c:cb:c4:e6:1e:81:
         7e:3d:ca:07:fd:f1:2c:76:6c:ef:56:87:67:18:d5:33:3a:97:
         62:5a:ea:d2:c9:95:d1:94:67:69:ed:38:6a:ab:55:27:8a:1c:
         ba:2d:c0:89:3b:7b:51:dc:e6:40:b3:58:60:e8:7f:87:ce:26:
         0b:7b:c7:1b:95:02:7a:d5:3a:67:27:5a:5f:20:76:e6:1a:16:
         af:f6:e0:d4:b8:f3:d3:6e:fc:f9:61:7c:00:62:ba:07:33:7d:
         61:41:fa:b7:99:7a:68:d5:e8:f7:15:9b:92:59:39:ec:14:fd:
         a7:65:2f:4c:60:70:8f:1d:25:97:a8:dd:ab:70:ec:e3:c5:da:
         03:3c:41:1b:83:78:99:92:6a:0f:83:3e:8a:d4:c0:97:4f:2a:
         2d:19:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:44:25 2024 by rpki-client on console-fra.rpki-client.org