Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/9dbb23d5-e76b-3612-aefd-efeb48f58031.roa
File:                     9dbb23d5-e76b-3612-aefd-efeb48f58031.roa (raw, json)
Hash identifier:          /xL2ZjtkgHL2snQCKcrdzXW6XRZks85rjv2u9lVkNOY=
Subject key identifier:   86:8E:C2:F8:B4:8D:5E:2F:39:8B:27:26:F3:53:0A:22:45:10:FB:2D
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F432858457FDDD1E4627CCD5E2CC17600
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/9dbb23d5-e76b-3612-aefd-efeb48f58031.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     10490
IP address blocks:        2620:88:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d1:e4:62:7c:cd:5e:2c:c1:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=dd98ac72-d977-4038-82db-2875ae4adc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:99:cf:80:51:ca:2e:2b:a9:21:de:c6:32:
                    3c:2e:d7:b8:b0:a3:10:80:4b:c0:5e:7f:85:fd:23:
                    66:5e:03:3a:4a:d2:f6:f6:04:21:55:b8:01:bd:74:
                    88:7e:10:cb:e7:73:4a:76:37:c6:a0:60:b0:09:80:
                    54:dc:3d:d4:06:55:b8:05:fb:8f:01:73:5d:5e:cc:
                    96:2c:16:4e:05:47:d5:e7:93:81:4d:ac:b2:79:c4:
                    b4:39:78:6f:5d:f2:f8:18:35:d2:fe:ea:b1:5e:87:
                    cf:7c:f6:8e:b4:12:47:7f:99:18:43:67:25:f5:99:
                    48:32:0d:89:3c:e6:7d:41:19:8f:10:11:01:d8:9d:
                    18:49:eb:34:07:c2:d9:db:a4:c8:08:67:62:2b:4c:
                    dd:cd:89:f3:b9:68:50:46:76:16:3e:9e:f0:1b:21:
                    dc:e7:77:5d:20:a7:8b:32:e9:50:1e:06:39:cf:cf:
                    b7:b2:f1:94:e8:42:0e:27:32:0f:b8:b6:24:fb:d7:
                    a8:dc:2d:67:6a:b6:10:bb:c8:cc:b0:d3:2c:e3:d5:
                    4f:94:f3:cf:bf:2a:0f:cb:bc:2d:33:f0:0a:44:eb:
                    d1:f5:c1:f0:09:8c:17:5c:5d:8a:4d:4e:df:d4:e1:
                    08:ce:39:ef:b5:d6:55:ed:e4:f7:4b:b7:a0:fa:a8:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:C2:F8:B4:8D:5E:2F:39:8B:27:26:F3:53:0A:22:45:10:FB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/9dbb23d5-e76b-3612-aefd-efeb48f58031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:88:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2d:47:8a:f8:14:03:89:9a:a8:05:92:25:7e:b0:9a:63:41:
         36:ed:3f:57:da:97:bf:4d:b6:c4:fd:dc:76:59:84:b4:0b:26:
         8b:ff:b8:49:c0:d3:6e:62:ed:68:e3:e4:cf:e6:45:19:2c:7a:
         24:dc:25:3d:16:22:78:d2:6f:9e:48:de:24:28:8b:66:e6:b3:
         f6:1d:3d:94:8f:7c:30:ef:a9:21:ea:d7:61:11:5a:f7:7e:bb:
         58:7e:23:29:0a:a6:a9:0d:b8:ae:8b:41:9e:09:3f:01:f1:8b:
         1a:14:68:a1:42:02:80:7a:68:4d:97:01:c7:93:24:bd:32:de:
         c3:6f:7c:92:15:50:92:cb:77:f9:e4:85:4b:64:bd:ad:ed:30:
         5d:bd:41:1f:1b:28:7d:47:79:c4:22:e7:93:4d:91:c4:a4:c2:
         6c:6d:9f:de:f3:2c:1c:7d:36:b4:4d:aa:5d:b5:05:09:7b:41:
         be:87:9b:0f:33:8e:89:2b:c8:7e:5b:d0:44:f3:3b:9d:2a:b7:
         e3:a2:a7:b2:17:e9:c5:81:ff:3a:a8:30:d2:bb:c5:ca:9b:a9:
         d2:42:c3:10:19:b8:36:3b:05:f2:4d:a0:be:94:cc:bb:36:18:
         8d:99:85:fe:e5:10:ea:47:fd:db:3c:a3:ae:35:24:3b:04:1e:
         5b:13:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:26:01 2024 by rpki-client on console-fra.rpki-client.org