Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/22eb0f31-08e4-3cac-9916-99505e16517c.roa
File:                     22eb0f31-08e4-3cac-9916-99505e16517c.roa (raw, json)
Hash identifier:          OjTM82hs+q8lTBRnLcOQ3PoBCY7OgbGhdzEuskkyV3o=
Subject key identifier:   AD:27:EB:3B:F9:77:AA:C1:A4:67:24:2F:9F:22:B9:4A:62:31:5A:D8
Certificate issuer:       /CN=9b1ca75e-4539-4223-b200-925398eb3409
Certificate serial:       010D0C9F4328584591E05E48211A2F565F725800
Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/22eb0f31-08e4-3cac-9916-99505e16517c.roa
Signing time:             Tue 16 Apr 2024 23:50:22 +0000
ROA not before:           Tue 16 Apr 2024 23:50:22 +0000
ROA not after:            Mon 15 Jul 2024 23:50:22 +0000
asID:                     396982
IP address blocks:        2607:a940:c000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:e0:5e:48:21:1a:2f:56:5f:72:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409
        Validity
            Not Before: Apr 16 23:50:22 2024 GMT
            Not After : Jul 15 23:50:22 2024 GMT
        Subject: CN=cad529fc-e5ef-49b5-bc11-5ca1dbd5de1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:74:59:60:f8:ac:82:dd:c8:d9:01:0f:29:
                    fc:2e:0e:3f:91:7b:a8:56:a3:74:89:6a:06:d4:8f:
                    0d:f6:60:c3:60:26:fc:e7:58:f8:8f:ac:33:41:73:
                    8a:51:d2:78:97:68:d9:e2:8a:1e:c9:11:2f:a7:90:
                    0d:26:4c:1b:77:3b:33:ce:57:18:c0:d3:83:9a:05:
                    cc:0d:b3:7a:e1:d6:b7:75:c4:b0:7f:3a:ba:62:53:
                    f0:3a:46:35:77:aa:33:3d:fd:fb:ea:64:05:56:3b:
                    8a:fe:5b:88:c2:ea:d2:0d:1b:42:9a:b3:d7:8b:7d:
                    bf:30:1a:98:99:71:01:b7:b7:69:de:1a:2a:bc:cd:
                    46:c7:65:30:97:44:60:b9:2e:dc:13:f0:9a:cd:9e:
                    18:4e:42:55:cf:b0:83:b5:8f:d4:aa:3a:d9:7a:b5:
                    83:8c:d8:aa:8e:1e:74:c3:6c:7e:61:eb:b1:ac:8b:
                    6d:4c:f0:08:32:b7:2e:35:41:79:e1:22:fb:ad:df:
                    3a:d1:01:af:2c:dd:9a:ce:b4:54:ea:51:0b:c9:28:
                    56:ed:3c:00:ef:2e:99:38:99:57:02:40:22:14:66:
                    e1:5b:56:53:09:bc:27:65:92:bf:b3:1a:3c:78:07:
                    81:d6:ab:f4:47:9f:79:18:54:1e:f6:f3:c5:6c:bb:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:EB:3B:F9:77:AA:C1:A4:67:24:2F:9F:22:B9:4A:62:31:5A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/22eb0f31-08e4-3cac-9916-99505e16517c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl

            X509v3 Authority Key Identifier:
                keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a940:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:09:3c:d4:93:55:94:da:7b:00:e4:b4:99:06:d8:f3:b0:ee:
         8c:fd:7f:d1:b8:31:30:74:bc:5d:31:ad:f1:22:d7:ad:79:b4:
         59:c4:fb:43:9e:a9:49:e6:58:9d:6c:b6:f2:27:51:85:7c:8b:
         c5:51:e4:1a:d2:73:7f:e7:48:f2:89:54:74:34:46:64:ad:db:
         06:f7:25:3c:01:20:71:a0:dc:dc:77:90:48:5f:39:4d:31:5d:
         58:ec:4c:47:7b:eb:f7:de:e6:b9:f6:d3:ab:20:56:22:35:49:
         88:4b:7b:cc:27:eb:8a:bf:c8:c7:34:08:38:69:19:2a:29:32:
         c7:53:07:40:a9:84:fd:90:75:d7:75:5b:e7:a9:d7:1a:bb:54:
         42:99:3f:87:4a:4a:d4:6c:8f:c4:71:e9:24:ca:8e:11:af:5d:
         b4:aa:71:17:49:cf:57:74:3a:b6:aa:1f:d0:5d:75:1d:e1:4d:
         c5:30:5e:96:a9:bd:c8:88:3d:65:c7:b6:74:d8:90:e1:ce:dc:
         1c:59:b1:e9:6d:2b:63:44:42:3b:10:f2:d3:11:b2:5c:ae:66:
         2e:ed:c2:44:88:cb:9a:8f:ba:d0:91:3c:15:37:fd:20:8f:a2:
         e5:07:b2:f6:fc:07:19:7c:83:ec:15:d4:09:bc:4a:69:4b:16:
         a5:7b:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:20:20 2024 by rpki-client on console-ams.rpki-client.org