Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/63873ce6-2d19-3bab-8811-f923fcbb5176.roa
File:                     63873ce6-2d19-3bab-8811-f923fcbb5176.roa (raw, json)
Hash identifier:          IS3TBHShv2fe+gfrfQ8t+p2BlRwgk0H3ujpWfy4WD64=
Subject key identifier:   BB:40:2E:22:72:3B:B3:6A:75:B6:19:11:1D:E3:AA:C5:3F:89:19:52
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F43285844E0DA86F95BA18DF0CB867900
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/63873ce6-2d19-3bab-8811-f923fcbb5176.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     20150
IP address blocks:        2604:5040:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:86:f9:5b:a1:8d:f0:cb:86:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=e77e211e-6a4a-43e8-8604-86d4fa51310f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:73:09:53:65:32:19:3c:03:57:0b:c6:b3:
                    c4:20:32:08:f3:99:b3:64:28:6e:88:bd:5c:7b:06:
                    39:4f:38:06:de:e6:33:71:9f:f1:ae:34:56:17:c0:
                    8c:b0:ca:f9:c2:74:5d:0b:f3:d8:e2:a6:f4:30:91:
                    81:81:8d:94:18:85:37:a0:e4:46:ec:ad:ea:e6:de:
                    88:0e:39:1f:7c:8c:6a:c2:77:c4:3d:6f:ba:3c:c1:
                    0a:82:cd:f2:f6:d2:aa:52:ea:ba:fa:ac:d1:77:9a:
                    6c:e2:dd:2d:dc:a0:60:f6:18:7c:a4:72:c5:4c:f8:
                    cd:b4:9f:c6:0e:69:88:b3:43:bc:b1:bf:12:5f:41:
                    bc:72:ca:82:6d:51:58:a0:58:65:e2:55:6a:0f:93:
                    c0:6b:7a:a9:76:01:c9:c5:63:26:82:d5:30:e1:52:
                    3c:9b:f5:de:f0:d2:24:e0:f4:03:1c:73:f9:e2:49:
                    33:ef:03:ee:df:88:2d:4e:6b:cc:3e:06:9a:31:a5:
                    e7:b5:73:d9:4c:54:51:cb:ba:f0:3b:d0:49:d6:7c:
                    b3:82:fa:b8:20:76:c8:40:73:09:9b:04:54:75:27:
                    06:17:48:f9:d5:86:c2:f1:2b:c6:4e:ea:f7:21:5d:
                    ae:9c:00:cc:aa:ce:9b:1d:c5:96:b1:60:16:4a:3c:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:40:2E:22:72:3B:B3:6A:75:B6:19:11:1D:E3:AA:C5:3F:89:19:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/63873ce6-2d19-3bab-8811-f923fcbb5176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5040:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:0f:56:ce:d5:d2:ee:bd:96:84:5d:da:2c:91:62:cb:fc:
         f1:cb:31:bd:d6:a9:d8:c8:df:66:c4:df:fd:a5:dc:e2:1e:a1:
         dc:7c:8a:49:17:86:20:6a:93:64:c4:bb:ea:4a:86:8f:b3:f4:
         4c:b1:ee:29:fa:b3:a9:dd:d3:1f:ce:15:a5:80:90:f1:cf:e7:
         b0:f6:bb:c0:a2:60:55:0c:6c:0c:1f:96:42:b4:76:63:94:df:
         04:1f:46:f0:e5:64:b3:8b:f4:22:ee:d9:0f:57:b2:37:d4:f8:
         f5:21:0a:07:c6:69:d7:07:bc:22:8e:1e:e6:e3:a2:40:fc:5b:
         1a:ad:6c:93:12:b1:35:ba:60:d8:ee:17:41:b5:26:fb:98:94:
         05:a3:1a:01:67:e1:61:91:2d:f5:49:f2:f0:be:26:a1:ae:4d:
         bc:0b:5c:cd:59:eb:ad:59:11:cc:8d:82:de:de:36:3e:7d:eb:
         be:da:85:a5:01:ba:20:a0:05:32:29:08:51:ce:6c:36:e9:5e:
         41:df:95:e2:3e:51:d1:39:f8:cf:0c:20:0a:59:d4:7e:85:74:
         bb:e5:de:46:ba:9f:99:5b:6b:ea:b4:18:d6:7c:d4:29:35:b2:
         35:c2:5b:f2:41:84:8a:70:f3:60:e1:29:8a:a7:4d:2c:43:f6:
         d3:4b:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:34:09 2024 by rpki-client on console-ams.rpki-client.org