Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
File:                     dba30138-3d5e-38b5-91a7-e87672ea0f44.roa (raw, json)
Hash identifier:          /rZ6IkfPOTigp00iy2i2nEdv5VLGPkLGu7WY7LnGfe8=
Subject key identifier:   3A:B7:F2:80:A3:5E:C4:43:A2:CB:A9:53:7F:E3:9D:18:BB:7E:0C:38
Certificate issuer:       /CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
Certificate serial:       010D0C9F4328584582A89BC1823909EC254637C0
Authority key identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     33194
IP address blocks:        2620:10:a000::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9b:c1:82:39:09:ec:25:46:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=25039af9-edf6-482e-8a9c-51133547c639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:75:e7:1e:ad:bf:21:37:72:ac:92:42:9a:
                    12:98:e5:e8:65:0a:c7:31:9b:71:9b:ef:80:4f:53:
                    d9:a4:59:72:dd:61:d6:2b:13:21:a2:cb:8b:25:c4:
                    0f:27:80:9a:29:79:d2:45:93:63:c8:db:3f:1b:62:
                    90:9a:43:66:4b:08:32:4a:c4:dc:90:c5:f1:9c:fc:
                    66:ea:38:d3:8a:bd:58:f8:dc:ad:8c:86:dc:61:3f:
                    fd:7b:61:57:0a:0b:2c:f7:24:3b:94:e0:4c:5d:0b:
                    d8:92:75:f0:09:f8:58:fe:1f:95:ea:dd:80:b5:39:
                    ec:b6:63:eb:dc:e3:44:f2:a7:b9:ab:26:b5:6b:47:
                    d7:b1:95:ba:01:9c:19:d9:d6:a6:b2:9b:03:50:2b:
                    89:f8:49:36:17:c0:c6:b0:85:56:a0:99:1b:29:62:
                    e1:a2:ff:43:e8:7e:56:cf:1d:3e:82:85:6a:b9:27:
                    f8:b7:5a:c8:d6:a6:6c:3f:59:4c:02:da:34:77:4d:
                    43:26:71:80:56:6f:0d:ca:43:e4:8a:d9:97:19:c7:
                    8f:96:bd:a6:c8:d5:1a:07:ca:13:bb:14:94:9f:9f:
                    b4:cd:e0:86:39:e9:f9:90:8a:05:88:d6:37:71:d4:
                    ad:7f:53:f6:54:e1:57:88:58:2c:d1:24:37:91:2d:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B7:F2:80:A3:5E:C4:43:A2:CB:A9:53:7F:E3:9D:18:BB:7E:0C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl

            X509v3 Authority Key Identifier:
                keyid:9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:26:95:96:e4:8c:bd:48:0a:29:49:bf:a4:7b:7b:88:0b:
         54:6f:c7:8c:dc:00:81:d8:5a:67:b2:a3:8d:fb:9d:8d:31:85:
         19:ff:c6:37:f2:ed:0f:2f:fe:91:c3:0b:c2:59:f3:2c:87:e1:
         58:f2:9d:64:22:82:24:0d:ad:89:22:1b:9a:27:0a:b5:1c:91:
         01:7d:86:e8:a6:de:49:f9:6a:82:4d:b7:e2:30:1d:d6:78:71:
         24:05:53:1a:5f:22:63:36:e1:37:2f:d4:62:99:6d:b2:4d:49:
         92:de:48:09:b5:a9:43:41:5b:ff:ff:6b:02:b8:d1:f1:37:8c:
         68:e1:ef:bf:60:d0:e4:86:bc:b7:f5:13:90:e1:55:f4:0c:14:
         e2:84:81:bf:79:c8:bb:44:5d:fb:ed:5a:a9:b4:55:b4:33:ba:
         a6:65:27:c6:e0:57:74:1d:2e:1a:f7:57:9e:1a:27:57:a0:bc:
         21:fc:bf:c6:d4:3d:ea:30:de:b3:3c:37:73:ae:58:70:94:d0:
         48:ac:ac:02:83:2d:c6:58:bb:cc:58:5e:c0:8e:0c:98:7d:2f:
         73:e1:a0:19:ee:10:df:6c:8f:69:a2:7b:c3:1c:06:6e:77:42:
         65:7b:64:3b:f7:44:98:68:73:28:04:b8:fc:af:44:c2:aa:a7:
         fc:0d:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:16 2024 by rpki-client on console-fra.rpki-client.org