Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa
File:                     611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa (raw, json)
Hash identifier:          LlTwtO53k7AATi89BQNXGnZmIo4uPG7Kf/8PFlLUpNI=
Subject key identifier:   BB:97:F0:CA:BF:6E:2F:30:F4:20:6B:CB:A5:72:D7:43:50:56:C9:E7
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F432858457A4873834196ACBADEC6F620
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        2620:104:6003::/48 maxlen: 48
                          2620:104:6004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:73:83:41:96:ac:ba:de:c6:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=23e6f072-f699-470d-bd60-932f237623e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:a2:f5:07:0e:ee:b8:a4:7d:dc:d0:98:fb:
                    97:bc:82:dd:6e:92:d6:70:38:bc:ae:52:e3:11:00:
                    df:da:2c:30:68:1b:1e:5f:54:eb:5f:5f:22:4c:37:
                    b0:bb:38:c2:09:e6:c4:00:1f:dd:35:d3:1a:c4:56:
                    34:5c:30:dc:e5:64:6c:0a:a6:9b:db:11:d2:33:a7:
                    16:10:11:b4:c4:0b:f0:9d:3c:71:a5:f6:04:bc:9e:
                    1e:9b:7d:7b:83:19:9f:59:00:22:32:7f:45:2d:32:
                    19:01:d9:57:eb:44:64:92:34:69:85:ce:64:6a:91:
                    84:60:10:96:6f:f6:8a:76:e2:b4:4b:33:7f:63:59:
                    c1:c9:96:84:28:fc:22:1a:3c:d8:ff:54:2a:bb:9c:
                    b6:44:81:93:4b:2c:6c:fe:91:ec:17:b9:a4:42:0a:
                    e4:67:8b:1c:d8:e4:24:e6:98:3f:b6:4b:dc:2d:59:
                    9f:ac:1e:9f:b9:7b:87:4f:38:1d:c1:e9:2a:90:9b:
                    21:2c:14:21:7c:77:29:72:33:12:a4:cc:c4:7f:f6:
                    5d:4a:8f:d9:66:d2:2e:f5:5c:0d:77:32:d4:98:51:
                    09:4d:37:83:0e:cc:a3:c4:44:99:a5:0f:1c:ce:22:
                    b9:e2:41:51:2a:38:64:5a:4d:7b:44:aa:c5:65:db:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:F0:CA:BF:6E:2F:30:F4:20:6B:CB:A5:72:D7:43:50:56:C9:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:6003::-2620:104:6004:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:0c:63:ea:70:e6:ca:da:ff:4a:1e:bf:9b:2b:d0:8e:9f:
         e6:66:dd:4e:40:51:a1:9f:bd:a7:d3:c4:82:0e:29:75:95:12:
         d9:35:93:b7:92:67:26:70:31:e0:67:0e:fc:26:40:2c:14:75:
         45:36:37:c0:d5:13:cb:21:91:94:4f:8c:09:66:53:89:37:36:
         86:eb:25:ce:0c:da:af:b0:23:5b:0f:50:52:49:ff:1c:b3:35:
         50:82:da:96:47:c3:54:78:c2:56:25:b9:83:77:ec:52:26:54:
         be:ae:22:bd:42:66:2a:36:52:93:6e:02:e7:07:49:7c:df:cf:
         9b:f6:f3:7e:ba:e4:fd:f9:96:60:a2:5b:8a:ef:35:da:15:1c:
         65:5f:06:82:d8:5f:5a:cf:20:75:2f:74:c0:a0:4f:58:95:8c:
         fd:6d:24:86:bc:4d:1d:95:82:b1:77:06:b9:5b:10:62:e5:d3:
         75:33:55:9c:12:43:12:31:37:02:31:e4:3b:12:7f:12:20:ff:
         d7:c4:31:f8:d8:b5:15:b4:34:23:ce:bb:bb:40:06:9f:4d:ce:
         c9:d4:55:30:cd:41:26:5d:90:23:d6:4a:64:2c:cc:1b:65:a0:
         92:ec:e2:79:82:8c:39:37:b7:32:e1:d0:c3:1f:0e:63:95:4b:
         82:57:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:44:44 2024 by rpki-client on console-fra.rpki-client.org