Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
File:                     40ce2477-9538-3ba0-b98b-1f859a82666f.roa (raw, json)
Hash identifier:          bbO6ftGojim+/40i3G6A6Y0L2mxOXH2bUimkxj3tdmA=
Subject key identifier:   84:D5:5B:53:F5:E0:A8:71:30:62:03:1E:8A:84:AF:AE:27:78:DB:0A
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F43285845DBCADEFC8CD34BB8A6D14E80
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa
Signing time:             Mon 13 May 2024 11:16:52 +0000
ROA not before:           Mon 13 May 2024 11:16:52 +0000
ROA not after:            Sun 11 Aug 2024 11:16:52 +0000
asID:                     7195
IP address blocks:        2607:b3c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:ca:de:fc:8c:d3:4b:b8:a6:d1:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: May 13 11:16:52 2024 GMT
            Not After : Aug 11 11:16:52 2024 GMT
        Subject: CN=65d37f2a-e0ce-4f6b-852b-94ebd47231d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:14:45:29:fe:7d:b5:e5:84:16:4f:b7:91:
                    bd:7e:aa:98:25:2d:b8:45:6b:2b:6e:63:aa:cc:c7:
                    c5:23:03:9a:15:67:52:2c:6a:8d:b0:d2:51:bb:a4:
                    21:8f:30:79:89:41:75:78:c4:ff:ca:cb:0d:c1:6f:
                    60:07:29:7f:72:96:69:97:8f:04:95:2b:c7:db:4f:
                    df:61:63:e4:0a:31:47:2a:01:5b:0e:8e:20:6f:0b:
                    a8:0f:e3:ea:91:10:1a:83:d3:de:85:f0:29:4a:ab:
                    74:c8:c7:4b:85:ad:94:a0:bc:77:05:f0:53:4b:74:
                    0e:9c:43:5c:59:c9:43:af:fe:07:43:a5:fd:ba:e8:
                    a1:b7:90:67:3d:20:a0:30:b9:b1:05:20:b4:5a:86:
                    89:cd:08:57:07:90:ed:be:90:1e:a4:cc:99:5f:fe:
                    0a:10:7d:46:67:67:73:51:95:30:f3:b9:e1:87:cd:
                    d7:51:25:89:f9:dc:f6:b0:92:aa:57:06:f5:93:23:
                    99:58:b7:ea:ec:27:95:a7:4a:d4:75:70:ac:12:32:
                    8d:d5:c3:2f:44:37:38:91:84:e1:3e:01:7b:77:b4:
                    56:2d:47:77:69:4c:fd:c3:47:a8:2a:d3:b9:98:5f:
                    ac:b8:9f:85:84:a7:42:d3:4c:7b:86:56:9e:13:b0:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D5:5B:53:F5:E0:A8:71:30:62:03:1E:8A:84:AF:AE:27:78:DB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/40ce2477-9538-3ba0-b98b-1f859a82666f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:aa:77:ae:63:04:ab:d9:a0:fc:20:c2:e0:0e:41:77:8a:
         72:7d:17:0f:72:4d:2d:db:f6:e1:00:bf:57:7a:60:c9:a3:db:
         1b:95:00:c0:3a:a9:27:90:da:1b:74:a3:20:56:f3:75:e7:dc:
         db:6e:2b:18:98:d3:cd:03:2b:b0:59:ea:de:fc:08:a9:87:8b:
         7d:ae:f3:fc:b8:c8:ab:26:8f:d0:fa:a3:91:d8:15:64:bf:65:
         95:b5:2e:9a:4c:07:c4:fd:ad:ba:dc:88:a0:04:ca:68:d4:fe:
         72:94:1c:2d:c1:98:07:79:7b:31:0b:18:d3:ef:92:c2:c9:d1:
         94:87:e7:0e:f1:11:d6:3b:5c:da:82:59:fe:86:0f:b2:55:6b:
         1d:3d:9d:4b:08:96:09:47:92:31:ee:e4:c5:08:13:d8:6a:5c:
         66:02:a1:8b:f1:83:b9:79:4b:f8:d7:cb:a0:c2:14:e3:ff:6c:
         ff:b3:15:cc:a1:56:37:62:ab:3d:85:5c:de:bf:3c:21:8f:e1:
         85:39:90:79:9c:ea:ef:54:43:e2:28:e1:0d:cf:7f:b5:3c:93:
         d1:5c:a4:e0:a3:65:46:3d:31:8d:a4:70:cf:79:b8:a6:07:41:
         a1:82:38:dc:8e:04:7a:18:99:8c:b0:41:dc:38:c9:1f:ff:4e:
         95:3e:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:48:11 2024 by rpki-client on console-fra.rpki-client.org