Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa
File:                     8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa (raw, json)
Hash identifier:          /aCRbuKAnd2xo4nb9GeHItj2D0TlHK8O3g1mr9nupcM=
Subject key identifier:   CA:A4:E3:FB:EB:CC:61:09:56:E2:2F:E2:F5:58:42:0E:8A:E3:B0:29
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858455E5D9FFB01EB840F59949F00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     30103
IP address blocks:        2620:123:2026::/48 maxlen: 48
                          2620:123:2025::/48 maxlen: 48
                          2620:123:2027::/48 maxlen: 48
                          2620:123:2024::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:9f:fb:01:eb:84:0f:59:94:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=ccb77106-afcb-403a-b16f-1454148e56c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:36:ba:47:c2:11:0d:43:d9:b6:09:85:06:
                    70:4d:4a:41:ef:ec:ad:a0:a6:07:35:5f:57:39:b9:
                    08:8d:c1:25:3f:01:e3:d3:00:8e:43:19:dc:a2:1c:
                    5a:5b:e4:8b:d6:20:ac:9e:ec:8e:54:22:5b:79:fe:
                    bf:53:69:d7:d5:e9:8c:8c:27:1d:13:e7:a3:38:4b:
                    eb:e2:94:20:eb:9a:69:47:7e:33:00:82:6f:5b:4f:
                    dd:56:1b:18:8f:fb:67:b0:63:4e:a2:d4:25:35:5f:
                    25:da:bf:ac:2f:bb:55:b3:2d:c8:12:71:cf:05:f7:
                    55:7f:bc:db:bd:07:ed:65:c3:f0:0d:57:7f:fd:40:
                    23:01:48:4f:0d:dc:57:98:1f:a7:e4:33:f3:b3:aa:
                    93:d9:05:3f:72:27:10:8f:37:c5:e3:d0:6c:fe:1e:
                    d7:14:b8:c3:26:02:85:6c:cd:4b:d7:b4:63:10:c9:
                    67:2a:d7:33:11:5d:78:e6:82:d8:d9:c1:e6:ef:c6:
                    84:dd:97:79:7f:9c:57:71:df:17:f3:ed:59:85:5a:
                    04:e1:bf:e4:61:ef:59:86:be:94:1b:be:8e:5a:b8:
                    cc:ff:7b:0c:27:48:81:26:4f:38:7d:55:c6:0e:38:
                    95:95:68:6d:62:58:7b:b7:00:de:cd:63:34:e4:23:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:E3:FB:EB:CC:61:09:56:E2:2F:E2:F5:58:42:0E:8A:E3:B0:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2024::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:59:8c:f6:04:19:f0:09:57:1e:ae:9d:5b:60:f6:73:41:
         66:02:69:e9:fc:fa:bf:70:95:f8:df:e8:4d:e1:46:68:41:79:
         52:85:8e:cb:23:38:fb:2c:74:f0:21:c8:5b:33:56:34:b2:4f:
         6a:6b:f9:46:e1:a9:73:4f:84:d6:6d:77:df:23:d2:ef:e0:4b:
         99:fc:32:84:0b:98:36:79:49:96:df:2d:84:3f:66:3e:bf:a3:
         fa:bc:18:ef:d1:ce:bb:51:a5:4d:6e:35:3c:e4:3b:d6:ef:a1:
         2a:4f:de:4c:81:a5:9f:2e:00:f9:8a:cd:21:bb:14:09:42:63:
         b5:86:3e:ad:5a:34:43:ef:f5:c7:5b:ca:63:e3:cc:cf:fe:16:
         27:73:c9:4c:2a:a0:49:c3:91:2c:59:74:cd:08:52:05:f4:19:
         ab:d3:0a:79:dd:23:6b:e1:1c:16:cf:4d:a0:2c:e4:96:6c:8c:
         bb:42:e4:75:ee:b9:5d:2a:36:f1:4a:80:36:e0:2d:9d:d3:1f:
         39:db:e5:d7:5f:06:1a:fc:60:c2:a8:54:6c:d8:5e:df:27:b6:
         df:ab:97:ea:20:b2:2f:e9:46:45:2e:4d:ee:c4:47:89:c0:e9:
         6e:f1:4e:ad:ef:a8:e9:b6:e1:1c:62:85:10:e2:38:06:8f:76:
         7b:91:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 22:19:05 2024 by rpki-client on console-fra.rpki-client.org