Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa
File:                     02b3d6de-dde7-3c25-aba8-656086e431bd.roa (raw, json)
Hash identifier:          XSBagy0hUpBgIV/Pkp+v5TkzIghvPcd38155LBKC4v4=
Subject key identifier:   7A:66:90:38:BE:BF:27:E8:09:DA:A5:E2:4C:3C:57:22:2C:5B:16:2C
Certificate issuer:       /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
Certificate serial:       010D0C9F43285841E46CF428D3D6850DCC0D9D80
Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 17 Jun 2023 07:00:24 +0000
asID:                     399668
IP address blocks:        2620:98:a000::/48 maxlen: 64
                          2620:98:a001::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 May 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:f4:28:d3:d6:85:0d:cc:0d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 17 07:00:24 2023 GMT
        Subject: CN=6dc9fa9c-f5b1-4d6c-8f44-4f129868bbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:6e:1c:8e:20:72:9e:49:c3:45:33:0c:22:
                    07:fb:e8:99:6c:29:45:ca:65:9b:b6:de:2d:e6:8a:
                    be:2c:3b:3a:db:17:55:b4:c0:8e:15:b7:f3:28:9e:
                    90:f3:93:fe:1a:07:5b:4d:23:e5:34:e8:16:df:c4:
                    3a:ff:6a:60:d4:f9:69:a3:a6:30:48:ac:c1:77:26:
                    a5:68:16:70:84:99:71:7e:9e:96:01:b9:5e:5d:0e:
                    37:3d:c7:1e:ef:4a:c1:1b:b0:ab:94:ec:29:fa:33:
                    53:04:c4:e1:53:ab:93:30:ce:76:f0:68:1d:91:f1:
                    c2:d3:cf:18:7b:87:eb:0a:07:04:4a:91:b0:7e:46:
                    89:0b:ef:61:4f:e4:b8:c9:c0:3c:b6:11:d2:26:a9:
                    83:f9:4d:b9:2e:b2:d2:a7:92:e0:04:f4:c1:97:c9:
                    d2:d8:5f:5d:ba:73:64:58:03:14:10:59:76:d6:4d:
                    7d:39:2c:50:a4:3e:e7:5e:5c:4b:df:ed:d2:0a:58:
                    5e:dc:d3:09:80:3e:55:db:06:d5:7c:44:31:a2:ba:
                    bd:1e:cf:bd:e8:39:8b:e0:9d:2c:14:6e:dc:e1:fc:
                    46:66:35:16:93:fc:01:29:f0:59:9a:52:59:8d:8f:
                    92:3c:72:35:f0:c7:35:c0:e9:e0:7e:46:b9:03:78:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:66:90:38:BE:BF:27:E8:09:DA:A5:E2:4C:3C:57:22:2C:5B:16:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl

            X509v3 Authority Key Identifier:
                keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:a000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:a3:86:e7:88:a8:ed:56:01:65:be:1a:97:89:c5:ea:77:
         b2:1c:a7:30:4b:df:bd:c9:8e:e8:cd:b1:89:c5:f7:21:6d:1a:
         35:d8:9a:a7:4b:da:a8:c8:7c:98:7b:f0:76:1e:61:f8:36:5a:
         a2:29:95:c7:00:88:ee:00:8f:97:a6:aa:61:36:76:40:3a:34:
         ec:b1:19:c5:0c:23:da:26:1d:fc:de:38:23:ad:50:b2:d7:57:
         57:4b:51:e2:d8:ef:6f:84:31:e7:92:5c:f4:69:4e:bc:c3:bb:
         a8:cb:28:4d:fc:6c:1b:2c:f3:19:57:18:4a:be:eb:91:96:cf:
         6c:85:f2:d1:0d:29:3f:aa:e0:12:8a:3d:aa:0f:1d:84:f7:e8:
         24:41:f3:d0:cd:c3:c9:0d:04:29:01:ef:f6:e5:6b:3e:c2:c8:
         49:02:83:89:e9:fe:7d:a9:7f:c2:8e:b9:09:2f:17:80:43:90:
         a4:d3:de:88:8d:cd:3c:b8:a5:85:c1:01:79:ca:ae:37:32:f2:
         43:7c:96:fd:e1:05:ee:80:62:a8:9b:04:e8:38:49:e0:92:48:
         24:c7:f3:5e:fe:cc:be:26:3f:e6:a5:2b:d2:53:91:f6:19:2a:
         43:87:a7:c1:04:03:db:b4:39:4f:26:67:9e:34:69:61:c6:9d:
         25:2e:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:30 2023 by rpki-client on console-fra.rpki-client.org