Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa
File:                     2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa (raw, json)
Hash identifier:          qi8EHGLEd4SvCSO87hCNPxRi/rsAOSvVlOgnVWjQLcQ=
Subject key identifier:   4B:7A:8C:9F:D6:92:6D:AF:04:92:F3:04:C2:4C:3B:F0:D2:38:E0:6F
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F432858454F02C5A7EBA56B8B8334A200
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     397702
IP address blocks:        2607:46c0:dead::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c5:a7:eb:a5:6b:8b:83:34:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=20ede3d5-76fa-4124-9fb4-fa930be5f47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:5b:a7:78:7f:6e:c4:52:d2:4c:eb:18:cb:
                    a9:38:57:3c:a3:01:e3:fa:30:c4:84:c7:d4:23:ab:
                    cc:78:4c:ee:81:5a:6f:d4:46:8a:00:5c:26:0b:07:
                    79:30:2f:fd:1e:4e:f7:04:f3:22:bb:65:d6:7d:e6:
                    93:66:0c:f0:10:ce:17:7b:e6:76:a1:9c:a2:e7:bc:
                    9c:d2:17:4e:93:5c:ad:28:34:3b:45:6f:35:34:8f:
                    11:a0:a4:0c:ef:2c:21:5c:d3:e3:99:a4:cd:84:dc:
                    b4:d2:b0:0f:d3:3e:4b:50:cb:f4:3e:1c:4c:09:ca:
                    d4:b7:eb:1e:2a:2d:26:23:30:35:fd:5d:c2:77:9a:
                    c5:05:a4:93:1b:73:05:29:0b:7a:10:63:24:28:3f:
                    cc:f6:46:85:8e:fc:06:6d:e0:96:21:fe:a9:5b:3f:
                    47:1b:dd:f1:75:aa:bf:5e:de:24:c7:fb:e1:e6:ff:
                    4f:3f:ff:48:35:92:bc:56:a7:ca:0d:76:3a:1f:c4:
                    28:41:09:df:c8:19:b6:10:00:21:85:a4:1a:0c:ad:
                    0d:f8:af:55:34:77:f1:ec:32:dc:ed:a0:29:64:a8:
                    60:aa:5d:84:2d:3f:24:a5:98:6b:45:d6:f8:d9:89:
                    03:32:b2:f1:df:62:67:4d:13:eb:b5:22:95:22:43:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7A:8C:9F:D6:92:6D:AF:04:92:F3:04:C2:4C:3B:F0:D2:38:E0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0:dead::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:01:f6:52:6a:7a:ff:42:e1:03:a5:7e:94:7c:05:4c:dc:e1:
         1b:f3:ce:2b:23:a3:d5:39:60:d0:2d:c5:66:11:02:64:80:84:
         41:f0:84:99:0e:67:72:71:1e:64:ac:19:74:5d:39:d9:d3:20:
         79:dd:0a:e5:7c:51:2a:a2:04:21:0f:55:82:44:da:af:3f:60:
         0b:df:e0:b3:b0:c5:72:bd:3a:11:db:6f:29:34:60:96:b6:81:
         49:93:99:e5:ad:ea:52:44:35:0a:08:e2:21:c5:05:53:0c:c8:
         53:28:97:d9:c4:f5:26:a6:ef:dd:7a:ed:4a:d0:91:67:41:e6:
         1b:15:d8:cc:84:0d:46:46:cc:fc:ef:0f:c0:2c:50:9d:3d:b0:
         36:ba:a2:20:d1:29:eb:66:0c:f7:30:b3:6b:50:26:eb:90:28:
         92:38:e0:ed:81:70:c6:d9:9a:33:a7:c2:58:85:a0:ef:ee:0b:
         6d:f0:69:da:bf:0d:13:32:fb:6e:83:bc:f5:1a:8d:ec:87:bc:
         0f:a6:cc:65:9f:99:fc:f8:c5:6b:3c:c2:fd:71:fa:7e:6a:8d:
         81:81:c1:8a:1c:08:1d:86:b3:36:bf:27:a3:ac:d8:32:a3:e7:
         25:aa:b9:ca:2c:73:a3:a8:92:a2:0d:dc:35:b9:e8:38:ba:a8:
         cd:12:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:56 2024 by rpki-client on console-fra.rpki-client.org