Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/c826e4a1-261b-300b-a45a-a68bc2f882db.roa
File:                     c826e4a1-261b-300b-a45a-a68bc2f882db.roa (raw, json)
Hash identifier:          16TGa0zVdR2CmBMj0W+f3LnGsCuSmjm7WeJIYlIbPNg=
Subject key identifier:   8B:F1:A6:FA:31:C0:26:41:8C:FA:B9:E7:CA:71:D8:86:10:6D:E9:2B
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F4328584593688F2968083E3199F5B180
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/c826e4a1-261b-300b-a45a-a68bc2f882db.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     23344
IP address blocks:        2620:138:3000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:8f:29:68:08:3e:31:99:f5:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=5b88bac2-3133-4e5c-aef8-0c9c19d877d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:0a:c3:fc:9a:6f:96:01:4e:dd:39:82:38:
                    1c:5e:60:3c:79:7c:71:cf:17:b3:b7:2c:5c:b2:dd:
                    15:d5:6a:40:92:e5:7c:18:ca:24:52:5c:75:ae:c2:
                    dc:1e:ea:d9:85:aa:91:11:34:93:cb:3f:6c:0b:d2:
                    03:79:b4:7d:68:41:1d:a8:4d:c0:ec:5a:b3:a9:71:
                    74:1b:bd:5a:62:97:4b:4c:c0:a0:37:98:13:c8:b5:
                    b7:f3:de:c2:cf:0f:de:de:50:9d:9e:ae:5c:de:91:
                    30:c2:15:74:5e:26:00:b0:de:a4:96:b7:b0:02:cc:
                    33:f2:79:1d:a8:c9:c1:64:41:72:6e:d4:1c:96:1a:
                    55:44:6c:62:80:af:32:3b:94:f1:a3:25:f2:26:b6:
                    98:fe:bf:bf:6a:3e:7f:47:2f:b2:cc:c6:c2:94:ec:
                    8a:4a:34:54:a4:3b:d9:45:16:90:53:80:41:d4:05:
                    ee:08:c4:5d:22:2c:0e:2b:7e:a1:1f:6e:cc:72:2e:
                    42:00:67:01:4b:84:18:e0:f8:e1:2c:73:7d:63:45:
                    7b:5c:84:16:ad:5e:2f:eb:6d:19:8c:68:6d:a6:48:
                    32:68:12:06:f3:79:05:c8:88:71:4f:94:7c:c5:85:
                    63:6c:f2:91:55:07:36:cb:64:12:05:c9:90:81:f5:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:A6:FA:31:C0:26:41:8C:FA:B9:E7:CA:71:D8:86:10:6D:E9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/c826e4a1-261b-300b-a45a-a68bc2f882db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:64:21:d9:10:3a:2a:35:07:0e:75:4e:39:c7:a3:94:01:
         9b:9f:17:7c:6a:fc:b0:14:2a:0b:e7:c1:76:1c:da:da:52:b4:
         1b:6f:e1:85:2b:37:27:c4:fe:69:12:f7:dd:05:47:7a:95:28:
         5b:33:90:78:48:9f:62:4b:9f:6b:07:59:87:81:90:82:c3:ad:
         bf:00:3a:42:40:81:bc:74:90:a2:ed:d7:93:43:7e:7a:f1:fc:
         fc:26:04:09:80:75:08:2e:97:35:a5:5d:7f:67:31:b3:e2:d5:
         42:18:20:c7:b5:eb:1d:2d:8e:03:8a:aa:9b:9d:73:a3:33:c5:
         d9:24:d9:6d:01:4f:1f:c2:35:40:84:09:2b:90:1c:43:ce:00:
         de:ca:20:a0:7f:70:18:91:14:5a:f9:de:fe:e3:f2:8f:7e:91:
         fb:f6:d2:65:67:17:08:54:d0:b8:a3:cc:96:d3:27:a0:c4:a0:
         2b:63:76:15:14:c1:01:1f:f5:d0:27:1c:25:00:bd:f0:22:9f:
         46:74:42:89:9e:46:fa:f6:43:e5:f7:ee:f6:45:7d:9b:e1:1d:
         e0:73:d5:7b:07:d9:28:c5:f5:fb:82:cd:65:84:7a:1b:d7:ee:
         ba:ca:8f:f6:f5:c2:ff:50:87:84:0c:67:f6:36:d7:e8:6a:4a:
         3d:21:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:31 2024 by rpki-client on console-ams.rpki-client.org