Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
File:                     f34e70eb-f511-378d-a8f9-037aebbc577a.roa (raw, json)
Hash identifier:          f2+RMY+3NilnEDFal/Y7SNDZa4SauT78yB+vRFfwnMU=
Subject key identifier:   61:6A:2B:DC:23:16:A7:4A:8B:77:1E:46:F9:E3:45:0A:CE:55:52:48
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F432858453E42A1C759340B9EE7025100
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     0
IP address blocks:        2620:10f:b000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a1:c7:59:34:0b:9e:e7:02:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=5702daf9-0d2d-4014-a135-d4cdafc6db72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:80:9d:f0:08:62:19:d9:7b:4a:99:04:a0:
                    81:52:46:d7:53:79:41:55:4f:3c:ab:48:58:ed:5a:
                    a3:26:35:f8:b3:34:3b:1f:f0:b3:5c:b7:19:ec:4d:
                    a7:75:f2:8f:b0:88:38:3a:a7:ff:72:66:e2:f6:47:
                    5c:8b:0b:9a:98:5d:2a:56:0c:32:b1:58:94:2f:15:
                    73:8c:b5:28:02:68:c9:95:d6:ea:1f:42:a8:19:5d:
                    46:fe:95:ba:6b:b4:11:d1:ec:de:8f:df:e4:a7:f1:
                    b9:c2:64:6e:b7:4b:0d:3c:fb:15:b5:f2:46:ba:27:
                    3c:07:d1:8c:02:8a:43:bc:ea:51:c4:40:ef:da:84:
                    71:db:0b:91:48:fa:61:74:7a:14:f8:97:00:3f:3e:
                    e1:63:9e:f0:97:a2:20:80:2e:bc:4a:cd:96:fb:17:
                    80:8b:a8:56:59:cc:e8:05:a9:5d:27:e6:e7:2b:04:
                    1f:91:5c:32:df:6a:42:5f:76:f4:e4:22:0c:fa:d1:
                    1e:a9:03:d6:c3:e6:74:9f:0d:cf:cf:b2:9f:6e:c2:
                    76:06:ac:33:6f:b0:72:32:31:85:8e:83:a4:ef:a5:
                    24:8f:9a:63:79:35:16:c5:29:c6:c1:e0:a7:4a:b8:
                    6a:8e:72:41:f3:9a:9b:70:a7:30:9e:5c:20:ad:a8:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6A:2B:DC:23:16:A7:4A:8B:77:1E:46:F9:E3:45:0A:CE:55:52:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ea:66:be:a9:74:bd:d6:f6:05:ed:ed:a4:6c:a6:89:2e:d3:
         87:47:f3:c0:78:d3:75:eb:f5:a5:86:e3:27:68:bd:20:fc:73:
         b4:9f:ee:5e:99:4c:7c:c8:71:f5:b1:0f:2e:e7:4d:33:2b:9c:
         bb:3c:a5:15:34:53:09:42:f1:32:31:52:b6:c5:b2:09:90:04:
         cc:a2:1e:bf:b5:8a:15:bd:e4:24:a9:6b:a1:77:3c:02:c7:64:
         3d:89:6f:e8:ec:4c:d8:14:b6:a7:43:82:5b:0f:49:46:4f:d9:
         b9:58:8e:cb:ec:a3:75:c9:36:cc:9a:de:33:3c:d6:7c:18:11:
         a2:32:7a:69:e8:b2:e2:12:86:f4:80:fa:8b:2b:bb:52:93:24:
         d6:36:bc:4b:2d:76:14:dc:64:a3:03:48:00:d1:b2:56:a2:f4:
         63:8e:40:83:17:c7:06:c0:d2:a2:b8:2c:6d:0b:4d:1c:d6:14:
         31:0e:59:3d:82:c8:d7:dd:0d:7b:84:1f:04:f9:67:ee:19:54:
         b1:cb:56:c3:18:25:37:73:da:2a:3f:31:1e:0a:53:9e:51:dd:
         ae:e1:c4:1c:c7:96:96:44:78:44:e3:a8:e2:99:4f:e6:67:b3:
         69:22:43:cd:1e:00:c1:70:90:3a:c7:7e:c0:cf:fb:2e:94:74:
         15:3f:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:25 2024 by rpki-client on console-fra.rpki-client.org