Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa
File:                     c805133a-6cf1-3d14-bae5-074c7cdbd175.roa (raw, json)
Hash identifier:          2XUEm0TMZ9FN42576HjC6paoEEx797eLGA+UD8lUo0A=
Subject key identifier:   3E:50:97:78:AA:78:8A:29:C9:30:8D:FB:B7:22:3E:04:F9:69:77:91
Certificate issuer:       /CN=928d2060-10a9-4ea3-becb-9d0ffe02a156
Certificate serial:       010D0C9F432858458F38829EFFF70127E7323F80
Authority key identifier: E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     22953
IP address blocks:        2620:60:8000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:82:9e:ff:f7:01:27:e7:32:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928d2060-10a9-4ea3-becb-9d0ffe02a156
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=944be624-8d8f-49b2-ac75-56e0146c7baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:64:fa:ff:83:b8:cc:18:11:25:2d:d5:fe:
                    2c:9a:d6:ba:eb:58:58:8d:89:d2:1d:39:ee:bc:ca:
                    07:b8:11:bc:55:e2:2f:f2:da:ec:83:05:6c:3d:ab:
                    b9:73:5b:bb:94:40:60:0c:05:c1:c9:5f:61:7a:81:
                    01:9e:23:59:7a:c1:57:32:39:de:67:fe:1c:c2:9e:
                    f2:52:64:94:b8:b7:5d:cd:55:6b:52:f3:63:4e:77:
                    b4:de:04:06:6f:a2:80:d2:48:29:37:7d:75:fa:df:
                    32:31:31:15:c1:c0:b7:d8:d8:6b:49:8b:a4:10:71:
                    5d:49:55:c0:04:c2:0d:32:5d:0b:ec:8a:7e:e2:9f:
                    4c:8c:c8:c9:74:3d:26:96:22:07:38:e6:38:f6:4a:
                    c1:4c:a2:1a:b6:61:b6:5d:d2:fe:1c:87:7f:75:41:
                    f4:90:f7:f7:aa:a3:06:d3:ac:4a:68:95:c2:55:f4:
                    3d:4a:7e:48:55:63:96:ff:8a:93:a1:b8:6a:3c:6c:
                    8a:d2:e1:1e:95:51:68:2c:96:f6:b3:e0:4a:2e:be:
                    91:3b:2a:59:84:83:91:77:74:62:b1:23:c5:90:b6:
                    8a:34:45:50:ef:63:a4:50:68:46:2f:35:6a:cb:42:
                    ca:37:df:44:d8:72:5b:80:f7:49:19:74:a8:da:01:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:97:78:AA:78:8A:29:C9:30:8D:FB:B7:22:3E:04:F9:69:77:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/c805133a-6cf1-3d14-bae5-074c7cdbd175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.crl

            X509v3 Authority Key Identifier:
                keyid:E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:60:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:85:fa:80:ec:17:0f:f4:42:73:ed:8b:19:47:42:47:90:17:
         57:a7:6d:c7:f0:b2:87:60:6e:11:e4:35:82:8c:e8:e4:7f:45:
         62:f6:3e:0d:6e:aa:5b:d6:9d:72:b6:57:17:33:59:df:7c:8c:
         9e:a2:54:53:ae:f4:47:9b:0c:3c:f1:e3:67:fe:3e:77:41:ab:
         50:6d:ca:05:05:86:41:5c:ea:60:33:af:76:02:3f:0e:f4:ef:
         07:8d:a1:ed:b1:81:05:cb:93:45:0d:cc:0e:3c:0d:70:5e:28:
         4b:2d:3d:ce:d3:0e:aa:7f:66:b6:2c:2e:ab:47:2a:6d:31:75:
         72:be:fb:a4:d0:98:27:c4:a0:b9:ca:b9:09:80:64:16:a6:4f:
         63:42:5d:ed:60:ab:de:b8:15:70:48:4a:89:38:ed:2f:b1:f5:
         80:3b:8d:80:14:0f:07:7c:50:13:3c:79:79:cf:e4:8b:33:11:
         f8:6d:0a:3a:16:6a:53:d4:47:40:8a:79:60:2f:d4:9d:40:f2:
         be:76:a6:3f:65:e9:9a:c0:f3:d8:94:a8:f9:4a:e1:e8:b8:f0:
         53:6e:c6:90:93:dc:e9:40:38:d3:c0:2d:ef:b0:75:44:2e:86:
         0e:91:5e:db:89:c0:b1:3b:a5:ac:ca:fe:73:ff:e8:90:4e:8e:
         27:5b:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:45 2024 by rpki-client on console-ams.rpki-client.org