Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eb0f0094-39ba-39f7-b5ac-f89857668310.roa
File:                     eb0f0094-39ba-39f7-b5ac-f89857668310.roa (raw, json)
Hash identifier:          3lIZl97HK/dWYcoRO/phkKXPdjBMSjGfZVcV8MfFyNU=
Subject key identifier:   3F:57:6B:2F:E7:43:A3:3D:FA:68:2E:09:83:B3:4D:63:21:25:97:CF
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844F9FABEE61BDFE679320A8860
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eb0f0094-39ba-39f7-b5ac-f89857668310.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     30103
IP address blocks:        2620:123:2016::/48 maxlen: 48
                          2620:123:2017::/48 maxlen: 48
                          2620:123:2014::/48 maxlen: 48
                          2620:123:2015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:be:e6:1b:df:e6:79:32:0a:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=2efdac1e-a15a-4674-b783-b856e38f6b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:b4:bc:a8:35:ca:fc:0c:6d:8c:78:90:f6:
                    9a:07:26:ac:56:f8:bc:c4:4a:8a:5c:09:bf:3e:9b:
                    a9:c5:b7:f0:f6:c2:10:58:86:a1:37:c7:c5:7e:58:
                    be:c5:26:10:d1:d9:dd:3e:29:ee:59:b3:08:e0:00:
                    0a:43:f5:08:de:84:ad:d5:16:ac:4c:9c:91:6a:41:
                    b5:3e:fe:96:b7:2f:05:b4:d2:e3:c7:1a:af:2c:e4:
                    1e:93:78:4e:0f:d0:fa:5b:80:48:79:d3:ce:56:fa:
                    8e:54:79:38:5d:02:79:f4:0b:33:cd:20:f9:c7:f4:
                    de:6c:b0:71:77:b6:17:41:15:fa:02:34:bb:8e:52:
                    92:f5:52:d2:f1:a3:52:90:ef:fe:37:47:f8:cb:00:
                    be:29:0c:fb:43:2f:d3:0f:42:cc:66:55:04:98:96:
                    c0:9c:67:ab:bc:f6:95:1e:20:88:ac:a6:8c:dc:85:
                    38:b8:f3:d4:73:d1:db:c7:4f:a6:fc:49:fe:c5:62:
                    87:55:f5:05:e1:00:f2:ef:4d:63:1c:80:85:55:cd:
                    15:be:b0:0b:77:7a:8a:6c:4e:62:88:db:3f:92:d3:
                    78:fb:0e:51:4c:d1:c1:de:66:a0:7a:81:eb:71:cf:
                    79:d9:89:a7:3d:df:77:89:51:ad:4b:e5:19:67:d1:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:57:6B:2F:E7:43:A3:3D:FA:68:2E:09:83:B3:4D:63:21:25:97:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eb0f0094-39ba-39f7-b5ac-f89857668310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2014::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:bb:67:3b:b5:f6:86:e2:8f:1e:3c:91:4b:56:52:98:9c:
         8e:fa:a9:1e:2f:0b:17:fc:d9:04:a8:91:ec:00:c8:be:09:f3:
         1b:c8:eb:9a:9d:b2:20:0e:37:79:a8:2f:1f:65:48:46:f6:8b:
         22:1d:48:b2:1b:7a:e7:99:f0:7c:1c:b9:3b:8a:27:c8:65:8f:
         6c:e2:57:51:6f:f2:a9:82:20:18:d2:21:6e:47:0f:55:12:2e:
         0f:fe:44:2f:f6:08:ce:d1:55:c5:73:49:94:29:b2:d3:c5:9e:
         ee:6a:6e:c9:35:2e:1c:6d:96:c1:4b:fc:26:4d:53:0a:45:08:
         02:1f:8c:2d:75:5b:74:19:30:5b:8e:7a:36:2c:e6:8e:af:0b:
         92:78:41:08:82:07:25:77:77:bf:da:6c:86:06:18:89:3e:a8:
         88:4b:0d:ef:cb:7a:2c:ce:38:01:36:1a:f3:03:ae:0c:e7:b1:
         54:62:61:86:ba:b6:15:82:cc:9a:c5:a6:eb:0a:68:ef:48:22:
         89:b0:af:a5:1a:6c:60:00:1b:3d:88:d5:b3:10:79:b4:36:fd:
         6e:12:a7:f0:41:fe:10:b2:8b:6a:2e:d3:12:1c:fc:6c:ce:1a:
         58:a8:3a:ea:09:58:94:d3:0b:0f:47:c9:c9:41:2e:12:5f:78:
         18:09:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 22:19:05 2024 by rpki-client on console-fra.rpki-client.org