Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/985770ed-3401-3f37-ae84-55f1f803077f.roa
File:                     985770ed-3401-3f37-ae84-55f1f803077f.roa (raw, json)
Hash identifier:          hYw6CB/I8SMHKLATWXWcTkFY1z6+sz6b/zIys99aWA8=
Subject key identifier:   A8:DE:B7:A4:C1:8D:A6:F3:05:65:10:B1:E0:03:9A:FF:9D:74:B7:89
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844FB600CEFBF7DC665EC717540
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/985770ed-3401-3f37-ae84-55f1f803077f.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     30103
IP address blocks:        2620:123:2083::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:0c:ef:bf:7d:c6:65:ec:71:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=4e3aaefe-07cb-4a91-914e-c2b19d160617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:28:38:61:3d:10:bf:22:44:9e:aa:77:1d:
                    e9:43:a1:f6:52:ff:6a:03:91:67:53:c2:34:d7:91:
                    e7:65:ea:9c:f0:5d:cc:ea:54:7c:ed:35:1b:05:ff:
                    37:d2:1a:3f:66:19:d6:a8:72:ab:f1:f8:96:80:ea:
                    06:81:8a:43:b8:01:8e:56:6d:60:d7:d9:87:c2:70:
                    fc:12:90:5f:67:6f:79:48:60:19:14:e1:76:61:c8:
                    8d:27:b2:6f:e5:90:78:7f:99:5a:9f:98:4f:38:a6:
                    84:12:fb:e5:1d:ee:9d:60:5d:38:0a:29:7e:14:ec:
                    9f:c0:02:62:d2:a6:11:77:b9:4c:95:bd:40:4d:56:
                    19:fa:e8:52:f9:a3:f0:02:30:a5:a0:70:65:b4:8f:
                    27:8a:b4:95:d5:e2:84:45:8b:76:a0:59:26:05:11:
                    9c:58:8e:7c:be:35:65:9a:79:a9:34:5c:9a:4a:07:
                    0b:01:27:26:6a:70:db:60:0a:d2:89:5f:a4:8a:6d:
                    33:71:82:4a:e3:1a:f9:0c:57:27:b2:f3:ca:a9:be:
                    45:53:44:e7:8c:8a:ff:6c:b7:4a:38:d4:38:ac:37:
                    c2:cc:0a:71:f0:12:0f:d0:16:07:82:32:a2:49:2d:
                    fe:7b:af:93:a4:49:9e:66:da:fe:59:9e:c3:4b:a5:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:B7:A4:C1:8D:A6:F3:05:65:10:B1:E0:03:9A:FF:9D:74:B7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/985770ed-3401-3f37-ae84-55f1f803077f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2083::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:04:e3:34:1d:81:f4:90:35:74:27:72:57:01:89:59:2b:
         91:e4:d6:06:df:f4:de:39:60:f8:f8:84:ad:50:e0:4a:94:57:
         68:b5:f1:0e:84:3a:d5:c5:c0:24:e2:9c:c1:7e:7d:99:c6:f1:
         3d:a6:26:f1:1f:1d:49:94:1b:87:a2:64:58:47:0e:4d:f1:4f:
         dc:ef:c0:e1:1e:e1:7d:57:31:e3:ad:de:47:a3:64:83:84:cc:
         7d:2e:d5:7a:b4:41:d8:45:6f:18:d3:2b:55:0d:b8:33:21:8c:
         89:91:ce:7e:df:8e:cc:3a:17:58:29:9c:88:13:c5:6e:b2:d5:
         57:a4:b8:b2:8b:c4:9f:48:24:19:c1:72:62:6a:04:f0:af:ab:
         37:47:fd:ee:a3:97:40:9d:33:81:68:d9:2a:f5:52:d5:c3:c6:
         7f:a6:0f:9d:88:10:1f:27:8b:36:fe:fb:2d:72:a2:41:1e:09:
         fd:aa:24:bf:d7:bc:d4:93:ef:a0:99:50:b9:76:2f:b9:46:0c:
         9e:bd:85:6b:07:8b:41:5d:8d:03:7f:c3:b6:ad:41:0a:2c:fe:
         36:4e:b7:a7:6c:40:3d:b7:ea:e6:07:01:cd:7d:e1:69:b9:2b:
         50:55:12:71:4c:09:c5:56:97:b1:50:51:86:dd:4f:c9:eb:e5:
         e7:ab:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:59:32 2024 by rpki-client on console-ams.rpki-client.org