Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
File:                     baafe843-1100-3177-9505-bd29ba099cbe.roa (raw, json)
Hash identifier:          U2DHLv3ZjbjjOw0nsCHuVm5vXWfVPoYbxFg3ILXAGmY=
Subject key identifier:   6C:86:2E:FF:AD:91:79:81:90:F1:17:95:F1:A6:CD:2A:90:B9:F6:35
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858450D858987C492DBA94199629E
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:2013::/48 maxlen: 48
                          2620:123:2010::/48 maxlen: 48
                          2620:123:2012::/48 maxlen: 48
                          2620:123:2011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:89:87:c4:92:db:a9:41:99:62:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=cd3ef9fc-905f-470f-a8bd-f536c13da288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:a8:45:ce:28:a5:3e:05:c5:37:e9:f3:1b:
                    85:51:5b:40:92:e7:6f:0b:d0:a5:f0:e1:49:59:fc:
                    53:c8:39:d3:f8:cf:34:a2:20:c4:92:cc:5b:c1:a1:
                    fc:91:17:aa:a1:c5:e9:b6:ef:d0:ef:ad:e2:4b:77:
                    94:00:a6:18:df:31:29:2f:a6:f0:cb:42:1e:9c:17:
                    f6:26:73:c7:71:fe:c7:f0:d0:2b:0a:e3:5e:c2:57:
                    61:05:01:52:1e:b5:5a:35:7c:d6:95:d3:d3:82:8d:
                    37:35:83:24:cf:b4:59:30:c9:50:a3:95:1d:5f:b4:
                    80:5d:c5:50:55:52:d3:75:0a:ee:82:fc:e0:70:25:
                    e1:8b:90:27:f0:16:4a:8a:c3:96:4c:55:88:2a:6a:
                    18:0b:df:3a:0e:f3:fb:82:40:e8:f9:fc:7d:81:70:
                    f8:0c:b1:40:a3:cb:36:87:4c:a5:4b:b5:33:fb:b2:
                    91:9c:e3:f5:20:e1:11:b9:f5:dd:b4:7b:51:71:af:
                    cf:06:65:57:10:69:17:c2:77:22:86:76:45:b2:77:
                    f2:9d:33:d9:7e:32:99:cf:b7:8a:ce:47:11:b9:3a:
                    c3:5c:59:0e:3d:53:64:35:2d:1d:7b:85:d3:47:cd:
                    db:b9:fe:8d:14:c1:fe:41:e0:d0:48:1c:ed:fb:f7:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:86:2E:FF:AD:91:79:81:90:F1:17:95:F1:A6:CD:2A:90:B9:F6:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2010::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:37:d1:ed:ca:21:cb:0a:31:f1:d9:99:dd:eb:33:cf:85:75:
         1e:73:e1:37:5b:8c:53:ba:32:da:59:30:5e:3b:39:3d:20:2a:
         c9:14:a1:d1:64:ce:93:67:70:c9:24:f8:f3:cf:1e:c0:79:d0:
         b3:1b:ff:11:98:44:ba:ab:22:98:ef:35:1f:b2:85:6f:4c:32:
         e2:92:e8:0e:b7:84:f0:28:a6:a2:71:f0:12:bc:b6:d5:27:d1:
         4c:ba:c3:ce:46:e7:a2:b0:ea:2c:42:5b:8d:84:d1:6f:06:1f:
         2c:7c:17:bf:50:dd:99:d4:fb:88:07:1f:c0:a0:52:f5:d9:93:
         47:5c:f4:1e:81:28:80:55:5b:40:03:bb:8e:73:9f:82:b1:ef:
         db:ca:88:be:5b:d4:1b:2f:ce:a7:81:73:f7:43:05:56:a4:15:
         19:df:7a:35:9c:dc:35:7f:f2:4c:47:14:72:e8:f8:0c:8c:fe:
         41:c9:22:6b:61:01:ff:ad:10:26:60:62:25:08:86:9f:cc:fa:
         01:83:39:b3:e6:3e:fc:4a:b7:75:ea:ef:c2:41:07:c7:f8:61:
         2c:f0:12:20:40:2c:b5:7b:0d:51:94:12:1c:0b:e1:4b:f6:0f:
         5b:ab:b0:19:3b:f3:fa:10:73:04:65:2b:90:22:ec:5c:40:da:
         03:22:74:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:56 2024 by rpki-client on console-ams.rpki-client.org