Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c1808995-a989-3460-84e1-9e3e553ab848.roa
File:                     c1808995-a989-3460-84e1-9e3e553ab848.roa (raw, json)
Hash identifier:          /FQH0wqN45+BId34NHA7qioi6AT/XAl5fO+BcbH6wEo=
Subject key identifier:   D6:CD:6A:FE:B1:54:2C:C2:C7:93:F6:53:C9:5E:91:FC:24:EE:54:D6
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858454AD2CFEE9F778EACE0968DC0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c1808995-a989-3460-84e1-9e3e553ab848.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     30037
IP address blocks:        2620:10f:400f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cf:ee:9f:77:8e:ac:e0:96:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=beab0c04-f29e-446b-adaa-b6bf149a53de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:d0:c7:5a:7a:0c:9b:c4:54:5a:85:a7:d6:
                    d8:5f:79:1b:84:03:bf:42:52:a0:0c:8f:1c:e3:1a:
                    0b:b3:c5:99:0c:ea:2a:db:2b:f4:a1:51:18:66:a0:
                    63:72:3d:22:97:27:90:f8:69:43:fa:84:f8:73:24:
                    e5:e5:ea:a2:4a:fa:45:94:3d:62:fd:61:24:72:a0:
                    a7:aa:ee:1f:2c:2c:3f:72:46:cf:54:70:ed:91:65:
                    64:81:fc:f7:f8:33:d5:45:e1:f4:6e:e2:0e:1f:4f:
                    ba:25:3f:47:1f:7a:40:91:07:0e:36:9e:6e:cd:0d:
                    dd:bc:f4:a7:55:61:65:8a:aa:36:5a:d0:9c:c5:90:
                    af:0b:90:0e:87:0c:45:e0:04:02:8d:af:a8:9c:88:
                    ab:5d:9e:8d:9f:3c:be:a1:ee:ea:2f:c0:70:db:ce:
                    91:ed:21:c4:a4:b1:37:42:93:1e:42:a1:b3:29:1e:
                    06:88:93:bd:12:bc:f0:66:9d:d2:09:fb:5f:ad:6c:
                    ae:dd:5b:10:4b:e0:d8:11:36:69:70:fb:b2:97:3d:
                    54:a8:45:3f:e6:ce:ea:f3:8a:8e:cf:fd:98:7a:03:
                    d3:d5:ec:aa:b4:15:96:05:e4:c3:c1:2c:16:12:96:
                    31:9a:03:08:dc:91:bf:8a:65:92:c3:84:9b:89:4c:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CD:6A:FE:B1:54:2C:C2:C7:93:F6:53:C9:5E:91:FC:24:EE:54:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c1808995-a989-3460-84e1-9e3e553ab848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:400f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:92:23:05:00:c3:0e:07:a7:c2:98:2b:58:8c:98:b9:3b:
         fe:b7:e5:a2:e1:5a:89:a5:f7:55:a5:6b:96:a4:1e:c1:85:5e:
         31:43:10:4a:83:b7:64:7c:aa:e4:7b:bd:47:b0:35:a1:06:7a:
         d7:4e:9c:11:9d:1b:3e:ac:de:e7:2d:c7:8a:ee:f3:bc:c0:6d:
         2b:55:0b:e2:51:8d:c3:16:90:a9:ee:52:7c:16:69:32:45:27:
         11:8e:86:90:f6:0f:a8:f8:0f:55:2f:95:ee:b1:ee:a5:2f:23:
         c8:f0:76:2d:fe:86:52:ad:6d:10:75:aa:47:5b:74:f5:81:29:
         68:8a:54:ab:3e:05:e2:20:a7:2a:c9:b2:05:12:15:7b:90:e1:
         23:3c:1c:2b:d2:5b:bf:9d:4e:7f:ab:0e:d4:1d:a6:3f:0d:81:
         0a:73:3c:73:2b:96:30:c2:04:28:83:7f:61:22:67:22:1d:bb:
         37:66:5e:b2:d3:4a:1f:36:6a:23:40:92:f9:8c:b6:74:70:e6:
         20:29:3d:31:b2:b3:40:d6:66:57:60:d7:9f:0b:22:0e:cd:47:
         bf:3a:c5:12:03:b2:c5:d5:b4:aa:00:3f:54:e2:41:d9:2c:5f:
         cb:af:90:39:9c:21:db:46:01:07:72:70:69:35:79:e1:bc:b9:
         a7:f8:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:21:40 2024 by rpki-client on console-ams.rpki-client.org