Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/405b323e-ed7c-38a5-8774-bb097e86b465.roa
File:                     405b323e-ed7c-38a5-8774-bb097e86b465.roa (raw, json)
Hash identifier:          BYKbClxei4D2CZ7w3zx1RS0A03sbTd8lQGyTUSEgIpI=
Subject key identifier:   3A:8A:12:C0:EF:18:13:2F:FE:EA:E4:22:FB:2F:83:82:78:1C:F0:B7
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858450D85899E0AE8C283C6D78180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/405b323e-ed7c-38a5-8774-bb097e86b465.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:2004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:89:9e:0a:e8:c2:83:c6:d7:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=a6768b1f-ea7a-4181-9ec8-febd110711ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:21:59:ef:10:ff:93:87:06:33:07:f2:df:
                    7e:7d:55:bf:bf:af:8b:bb:e7:d3:b2:86:60:19:e6:
                    62:73:84:a6:0d:e2:d8:75:b7:0c:b7:0b:21:c2:7a:
                    ed:03:89:05:07:6d:81:66:ae:53:36:70:e9:81:ab:
                    4a:17:54:6f:57:ed:fc:da:4a:c9:45:d4:9b:e2:cb:
                    79:a5:f4:e1:36:7e:d8:ee:82:06:6c:0a:b2:05:98:
                    7b:65:c4:fc:7e:69:a6:97:83:c1:02:fe:88:fc:4c:
                    6a:c3:56:94:4b:c6:5b:2e:75:b4:73:91:f1:b3:0a:
                    51:bb:8f:00:cb:b6:fa:3b:7a:87:64:5a:a0:3e:fb:
                    f8:2f:9c:b0:4d:2d:11:6a:13:85:51:20:01:bf:b8:
                    ec:68:66:6b:1f:eb:bb:1b:b6:cb:7c:e8:e6:7d:ed:
                    45:c1:e8:4c:e8:cd:5d:67:ab:f4:50:27:74:f1:f7:
                    89:bb:88:ce:29:40:a9:14:7c:cb:9b:50:22:5b:ed:
                    00:a5:2c:59:5b:51:96:6d:16:a1:3d:13:7f:1b:57:
                    fc:63:b3:a4:0e:69:19:82:bf:69:87:0f:6b:d1:77:
                    e9:c2:a0:c8:18:f9:65:04:4d:0d:f2:53:d5:23:f6:
                    57:6e:89:c8:71:e5:d2:c6:28:ba:f5:62:d9:f9:30:
                    c2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8A:12:C0:EF:18:13:2F:FE:EA:E4:22:FB:2F:83:82:78:1C:F0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/405b323e-ed7c-38a5-8774-bb097e86b465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:c5:ee:61:3b:97:63:74:35:26:2b:0e:be:78:b7:60:91:
         87:10:42:89:73:1d:12:58:32:95:33:0a:eb:88:fb:49:b2:2c:
         46:d4:2c:e7:55:14:16:31:e9:32:73:c2:8b:36:9b:9c:68:34:
         a1:a5:a7:8d:27:c8:12:c3:cc:7d:c3:b8:27:ad:42:8d:4c:d8:
         dd:b1:fd:e9:2a:01:9d:d7:3e:a1:f0:18:85:d1:10:c7:a6:38:
         0f:f9:14:f0:70:df:82:6e:d2:2c:62:13:c6:d1:38:55:a8:cc:
         95:bf:6b:1f:56:b1:58:d3:fd:84:84:f0:f8:13:c0:5a:7c:ab:
         cb:6c:4d:76:96:41:26:72:5d:b0:58:18:8d:4f:d3:33:4d:0b:
         14:de:52:9f:c0:b4:e0:d5:9c:bb:7b:d4:7d:8f:ad:c9:35:3c:
         97:f0:cc:32:d1:86:36:bb:18:48:27:cc:cf:a7:1c:cd:e3:0a:
         86:c8:30:3c:e7:be:64:f2:b6:7c:89:56:c1:fb:f3:5e:7f:f3:
         6c:4f:b9:7f:80:79:4b:8b:cb:f3:02:72:45:06:8d:6a:2f:66:
         49:3a:23:38:85:a0:43:20:d5:76:47:a0:4b:77:c3:19:85:8b:
         5e:5b:e4:f1:14:02:f2:22:05:ac:12:dc:c2:90:40:bd:ae:a8:
         f2:9c:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:56 2024 by rpki-client on console-ams.rpki-client.org