Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/65d54277-c501-3a37-9868-a267b2b7453d.roa
File:                     65d54277-c501-3a37-9868-a267b2b7453d.roa (raw, json)
Hash identifier:          Y3saDvAHoJeHOg0w7mZGbuBw852euQxAaZue0FXSdg8=
Subject key identifier:   84:DC:1F:DE:80:45:FB:B7:6D:86:F6:78:E3:DF:FD:F5:1A:71:DD:65
Certificate issuer:       /CN=7334a22a-f222-4457-889f-5478966ecf96
Certificate serial:       010D0C9F43285845D933D591311B65B0D5E0E3F8
Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/65d54277-c501-3a37-9868-a267b2b7453d.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11805
IP address blocks:        2620:13c:1000::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:d5:91:31:1b:65:b0:d5:e0:e3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=0bf11669-c21a-4058-98d0-6c60b77970a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:52:df:6a:bf:c8:bb:aa:92:97:45:6a:54:
                    61:fb:96:7a:85:5d:d6:31:01:55:7a:26:52:1f:93:
                    d9:da:7a:4e:f7:32:11:0e:a9:1b:9b:b0:27:df:55:
                    5c:76:e1:04:61:45:98:c0:17:25:82:01:3f:6c:37:
                    e3:c0:db:6a:e8:aa:20:ad:cf:58:0f:0c:20:ad:d1:
                    2e:11:91:9d:61:63:d5:4c:22:49:62:e2:4f:f5:ad:
                    f0:03:fa:3f:11:f9:5f:09:c5:32:41:8b:c6:90:4a:
                    7e:8c:20:89:a7:1b:cf:a3:15:33:fc:ab:7c:6b:c8:
                    af:07:c9:52:8a:a7:48:cb:37:c9:aa:4c:fe:09:d7:
                    76:f5:46:1c:01:b1:26:a3:41:77:cb:1f:92:67:fd:
                    c6:fe:55:d9:dc:54:f8:a9:10:b9:76:0d:02:f1:77:
                    56:d2:4b:64:1a:0f:2e:00:c7:59:4e:30:dc:ae:9e:
                    38:37:7c:81:76:66:ee:05:02:44:2d:9b:5c:56:f0:
                    1d:75:78:2c:c4:c4:d2:a7:7c:6e:f0:36:7d:70:36:
                    3b:0c:bc:59:d4:10:39:5e:85:d0:79:43:1f:fd:86:
                    3c:cf:1c:5d:3d:bf:6c:76:2a:45:45:dc:16:e5:af:
                    06:e3:33:af:ff:62:9d:5f:60:4e:c7:5f:55:2a:79:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DC:1F:DE:80:45:FB:B7:6D:86:F6:78:E3:DF:FD:F5:1A:71:DD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/65d54277-c501-3a37-9868-a267b2b7453d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13c:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:d3:1b:57:55:28:42:7b:09:06:d6:a0:86:16:3d:f8:b7:
         d7:6b:62:31:2e:f7:f2:50:65:84:da:aa:1c:5f:4d:6d:3f:c8:
         3b:35:13:ab:66:52:08:7f:b5:51:93:95:33:d6:9a:5c:e1:ad:
         01:1b:a7:3b:34:5c:2a:89:dc:ec:47:f6:2b:a6:65:8b:17:78:
         9f:7d:d5:a1:26:93:21:09:5e:fe:f3:38:44:d8:02:88:e5:7e:
         bd:c4:ad:01:e8:81:6a:68:7a:87:eb:33:82:9c:d7:41:97:bf:
         52:cb:9d:95:4b:b9:b4:b8:9a:cb:4d:7f:bb:f9:5a:66:40:95:
         96:7e:96:60:01:cc:22:64:35:52:0d:a5:73:19:f0:d0:eb:8e:
         a4:73:1e:61:9a:35:18:c7:5f:ae:d1:5e:66:ab:ba:07:24:c7:
         a0:b1:c7:23:cf:e8:9b:fe:e9:e1:a8:1e:9e:38:f2:50:bf:32:
         b9:54:f9:f0:2d:22:32:98:38:9c:85:25:ce:a3:85:62:70:b2:
         8e:0c:94:a7:55:e8:6c:46:f2:d8:ec:4f:6c:c5:36:66:89:f1:
         63:c5:a4:64:24:28:f6:29:6e:0f:dc:38:8e:2b:e6:b4:4f:35:
         18:3b:e9:7d:15:44:16:0d:f3:93:e8:ba:71:84:17:4d:5f:f6:
         be:1b:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:10:27 2024 by rpki-client on console-ams.rpki-client.org