Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa
File:                     30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa (raw, json)
Hash identifier:          7Y1jwavVx9I+bUlbBKffo+JfjX3NpMpV7eVZqqcey8U=
Subject key identifier:   56:C9:67:B0:FE:C7:84:1E:B2:F0:C8:ED:94:DC:D1:C9:7B:82:C6:72
Certificate issuer:       /CN=d60903a0-a127-4c7f-a403-6a3d8817015e
Certificate serial:       010D0C9F43285845AC8A1632BD01A3AE5180D9F4
Authority key identifier: 77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     40267
IP address blocks:        2620:121:6000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:16:32:bd:01:a3:ae:51:80:d9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60903a0-a127-4c7f-a403-6a3d8817015e
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=e1682db5-52af-41bb-a315-cefe059e2968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:2e:0d:e7:16:d0:e2:57:73:d2:1e:62:b7:
                    57:3a:1a:2a:f7:74:fb:64:07:63:bd:9b:ab:8d:5d:
                    c4:7c:77:97:7a:80:c9:ec:0a:85:2d:15:37:c6:df:
                    41:30:fe:5b:f4:a1:b5:61:24:c0:21:63:44:2e:52:
                    a0:92:5a:82:86:99:41:81:97:39:7b:4b:c5:df:30:
                    2a:50:ed:2b:1a:44:ea:ca:15:df:93:1c:3c:4e:aa:
                    8a:48:d8:75:af:fb:e6:3b:d3:8e:6f:1c:82:85:21:
                    ca:4d:6c:cd:ab:61:5c:5b:41:60:41:fd:a0:af:a0:
                    a3:8f:8a:80:f5:08:29:37:76:c8:2d:52:a6:c8:a6:
                    6c:1d:c8:bd:f4:df:e3:de:c7:b4:a1:00:d4:9f:ce:
                    83:89:a6:05:e6:7f:7c:13:ed:e2:4f:9c:08:24:f3:
                    bb:dc:5e:2d:a6:19:b7:c6:d0:87:e5:3a:30:04:72:
                    10:1f:a0:5d:c9:79:b9:8f:6b:f4:3b:8c:3f:82:0e:
                    7c:a8:9d:31:8b:c2:6b:e9:41:83:c4:0d:e5:8f:83:
                    90:bc:0c:e7:11:0b:63:36:5b:a2:b9:e9:9b:d7:01:
                    c5:70:b2:73:c4:ff:3a:e6:04:bd:2b:9e:f6:e9:7d:
                    1d:3d:03:3b:6d:44:94:1b:2b:e2:5f:5a:32:14:5b:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:67:B0:FE:C7:84:1E:B2:F0:C8:ED:94:DC:D1:C9:7B:82:C6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl

            X509v3 Authority Key Identifier:
                keyid:77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:18:73:08:83:4d:db:c0:7b:ae:36:60:ba:11:29:5c:89:
         e5:2b:d6:94:7c:61:5e:f9:52:e0:52:ea:c4:fc:9f:b7:78:86:
         50:a5:65:81:79:3d:07:60:35:08:24:41:49:a3:35:fe:06:bc:
         da:1a:23:fe:30:ce:a4:84:e1:ec:d3:f0:b0:e6:ce:a3:68:3d:
         86:e0:b3:1e:a3:6a:8f:12:85:4a:11:36:7c:2d:87:9a:cd:80:
         f2:4c:dc:a7:25:b1:31:6e:21:f0:c5:a4:cc:4e:fd:75:16:80:
         89:aa:85:48:10:02:4b:cd:2f:5a:35:fd:ff:6a:42:b2:32:d5:
         e0:4a:0e:8a:10:d1:8d:d4:dc:a5:11:2b:b6:26:58:a8:8e:b9:
         8f:5f:55:a0:4c:28:61:6d:e8:50:f8:dd:c1:7e:07:9d:e2:fc:
         1e:33:48:f8:2a:65:cf:7b:0b:06:a2:d7:c9:b8:20:c6:f7:a0:
         26:ce:50:ab:07:bf:e6:15:30:31:a5:8e:20:35:2a:ba:fd:74:
         36:e8:bd:55:43:96:8c:f7:cc:b5:08:c2:17:44:e2:61:b0:40:
         1a:a2:4b:98:16:7c:0c:53:cc:cb:cf:1b:73:a7:f3:03:b8:be:
         1b:4f:1e:4a:ca:ed:e2:7e:8d:71:6c:43:58:c3:e9:c7:db:1a:
         ae:5b:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:41:08 2024 by rpki-client on console-fra.rpki-client.org