Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
File:                     f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa (raw, json)
Hash identifier:          I14zg6HHAV3XgqQPMjwh9Ua4Qt4aejjPnhVmY8Wr1+o=
Subject key identifier:   B4:42:C2:31:29:D8:01:70:04:93:F9:97:87:CF:01:BE:B3:71:9B:7A
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F43285845B383701F2AD2B5057AD5F8AA
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     397994
IP address blocks:        2620:a0:2000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:70:1f:2a:d2:b5:05:7a:d5:f8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=b7658ed1-a4df-4adb-9133-c5e002f3fb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:25:ff:f7:25:27:8d:5a:73:cf:fc:f4:50:
                    c7:95:5b:7e:f9:ac:dc:ca:e0:7b:4c:a6:86:eb:63:
                    e2:56:f2:2c:91:53:09:7d:28:4b:ba:9a:50:bf:39:
                    aa:fc:58:4d:b2:e0:d6:a1:21:d2:10:23:5f:d6:bf:
                    20:2e:6c:ab:b9:dd:fa:82:43:d0:ce:d5:57:b5:f4:
                    1a:a0:68:41:e7:81:c1:c1:f2:e4:31:dc:ab:55:f6:
                    5f:8a:9d:09:74:c3:0a:bd:63:ca:b3:fc:4b:03:c8:
                    8a:33:6d:55:63:6c:c6:19:76:e8:63:6b:4a:bc:24:
                    5a:b8:a0:78:1a:54:c1:55:77:03:38:47:a1:01:1e:
                    88:a0:e1:74:49:18:74:2c:ce:01:79:f2:b5:e9:7a:
                    b8:94:d7:a8:ef:05:7a:6c:9d:e8:63:f4:93:5e:c5:
                    de:d3:0b:dd:1f:b6:d3:b4:fc:1f:52:93:1b:b7:b1:
                    4a:50:23:b2:6c:29:68:9f:bd:fc:d2:b8:40:b6:5b:
                    12:e8:63:40:ba:a1:e8:86:57:b3:2a:9b:1c:84:92:
                    d3:9b:c2:12:31:b4:7b:82:dc:0b:42:50:c1:2d:30:
                    78:d9:60:1c:03:da:f0:a9:c9:39:75:dc:88:41:ad:
                    3f:fc:39:cd:7f:f4:5d:6c:bf:d6:0f:71:2d:61:af:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:C2:31:29:D8:01:70:04:93:F9:97:87:CF:01:BE:B3:71:9B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:41:34:15:52:4c:c7:9c:92:13:52:0f:c4:d0:5b:82:f9:
         6a:42:18:62:9a:bc:ba:45:e8:3c:c3:85:f0:80:2d:f9:9e:d4:
         cf:da:a6:15:6a:e0:63:22:6b:f8:e6:eb:7a:15:dc:ea:f4:61:
         0a:79:a1:5a:33:b3:ab:91:f4:32:8d:f9:a3:6c:6d:73:57:7b:
         a8:15:4e:3c:b0:90:2d:f8:ff:d9:5d:82:b7:89:3f:f6:4c:e8:
         bc:43:bc:1c:64:8e:17:c7:79:1e:93:69:fe:e9:8e:71:7e:7f:
         8c:94:34:69:14:72:bb:74:4c:43:42:f4:9c:aa:7e:2a:b3:08:
         97:3f:6f:ce:c8:1a:c7:8c:58:bc:6b:35:37:fd:47:59:de:88:
         3d:81:c3:71:db:bb:7a:89:c6:a0:de:54:56:f6:54:a9:47:e8:
         45:f7:ef:17:63:0d:b1:fc:e6:84:28:c6:dc:f7:ba:22:1b:cc:
         9d:f8:36:5d:18:03:d0:69:ae:c9:cb:db:b0:a6:64:2f:11:f5:
         7c:86:dd:bf:c1:a7:2b:5a:37:84:b9:ab:3d:bf:6c:7a:8e:04:
         56:7d:db:d2:14:51:60:82:fc:21:e8:42:ff:ed:50:c0:c1:b6:
         c3:40:14:b4:c0:6f:aa:a8:ec:1a:f5:db:df:c7:44:74:02:a2:
         47:7f:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:12:42 2024 by rpki-client on console-fra.rpki-client.org