Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/7b0dbb72-cc3c-385f-8785-fab9294749a1.roa
File:                     7b0dbb72-cc3c-385f-8785-fab9294749a1.roa (raw, json)
Hash identifier:          CBMDRGsceSEfEPEE0J+EQHdhJJrCBPiLcHDC2pTeABY=
Subject key identifier:   FA:88:9C:23:53:E4:F1:2B:D8:08:AC:15:18:5D:19:04:9F:F3:07:27
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F432858451CE0330C9179B5988942AA00
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/7b0dbb72-cc3c-385f-8785-fab9294749a1.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     400097
IP address blocks:        2606:3d40:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:33:0c:91:79:b5:98:89:42:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=b411105d-3646-4a9a-9eb3-f90193715d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bd:64:d3:57:ae:87:31:a6:dd:8e:e0:60:a2:
                    3c:1a:b4:71:4e:92:79:a4:d1:41:b2:be:d9:35:6d:
                    7d:b5:d1:59:e7:3d:02:25:b4:5b:44:24:6d:7f:e3:
                    4d:28:77:5b:59:34:10:c7:bc:1e:98:4d:fa:0f:92:
                    ec:8f:ed:9c:11:8b:ef:7a:3e:3a:2a:55:6c:f3:aa:
                    0e:3b:e1:95:21:99:41:7a:9b:e2:90:a6:78:b7:21:
                    c2:f7:1d:3d:3c:43:1e:34:bc:5c:c7:10:7c:67:43:
                    06:74:71:b7:32:b4:18:a7:ee:c5:f6:0e:3c:53:f5:
                    c6:51:cf:e9:2b:b9:ef:dc:20:ed:28:e3:43:72:08:
                    83:5f:b5:06:ad:8c:96:f5:62:6a:3e:3c:89:40:2b:
                    02:94:70:bd:4d:78:87:16:c8:07:b8:00:f9:c3:f4:
                    91:93:69:1b:16:4f:4f:61:86:9a:c4:f2:81:02:d2:
                    a6:75:91:36:33:1a:e5:b5:c6:47:e9:cd:83:da:67:
                    d8:64:9b:c7:22:48:d9:51:f6:20:86:10:76:67:10:
                    de:79:3e:b8:3b:62:fe:94:90:78:eb:89:1e:30:7d:
                    6f:6b:7c:37:da:d6:7c:18:54:83:f7:c7:ba:16:7c:
                    a2:10:a3:18:39:6d:2f:83:44:f3:01:ee:db:0d:52:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:9C:23:53:E4:F1:2B:D8:08:AC:15:18:5D:19:04:9F:F3:07:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/7b0dbb72-cc3c-385f-8785-fab9294749a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:0e:ab:d5:19:87:a1:df:f1:91:8d:ee:7f:7d:a6:7b:21:
         97:23:45:ec:c8:15:7c:66:f6:1a:56:ac:d2:e9:df:40:1a:90:
         be:a9:fb:8a:52:f2:f4:1d:58:41:6b:4c:3d:0c:4a:27:72:8f:
         e6:cd:70:f1:f2:d0:f2:bb:81:ba:e9:ea:8e:df:91:49:46:e0:
         99:72:7d:80:2c:34:bb:69:f0:36:12:4a:22:a7:f8:1b:7b:0f:
         8c:08:dd:9f:6c:4c:b9:1f:89:fe:99:5f:1e:79:d9:40:7f:33:
         d5:65:c3:43:1c:63:ad:d2:97:a0:e6:26:5a:6e:7e:47:bd:45:
         30:c5:dd:02:54:aa:e9:18:c3:56:b2:9e:14:f2:73:db:7c:ce:
         d6:45:36:10:a5:11:3e:7a:a9:a7:69:a7:93:44:ac:5e:f2:1c:
         4e:c0:2c:de:1c:eb:e9:5d:09:97:dd:4b:75:b6:52:24:4e:37:
         94:14:3f:8b:45:9f:99:a7:5f:2b:b4:26:5e:a8:e8:4a:df:94:
         c0:bb:44:16:db:f1:f5:4c:fe:4c:a6:89:bc:00:d7:43:76:d4:
         d5:b8:66:5d:36:72:bf:34:71:0e:3e:7d:75:37:ae:0b:ed:5e:
         86:b9:3a:95:21:36:81:e4:47:1d:fb:23:cc:22:d2:12:25:24:
         98:77:73:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:45 2024 by rpki-client on console-ams.rpki-client.org