Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa
File:                     b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa (raw, json)
Hash identifier:          oXPKGt5R0bnnBj94BsvnHyFtetsJTr0GxTyWdu8xA/k=
Subject key identifier:   12:49:97:4D:5E:2E:D2:77:24:38:4A:D6:35:8E:D6:47:25:C6:B1:BF
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285845840DCD7AB016D32F5CA20154
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        2607:740:6d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:cd:7a:b0:16:d3:2f:5c:a2:01:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=37aae914-45fc-4e97-afc0-5277f0904564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:b6:32:28:7c:03:14:96:c9:74:f4:68:51:
                    dd:75:17:d7:2e:c9:a5:9b:b0:68:00:8d:62:11:ad:
                    ca:0b:ee:ee:6d:0a:74:3e:cb:8e:67:5f:f6:60:f6:
                    f4:79:c0:8f:38:26:72:bb:95:9f:f2:4c:97:c3:fb:
                    03:73:b7:22:a8:e0:99:7b:f7:7c:62:49:a2:1f:41:
                    9d:46:c3:6a:5a:c1:11:2f:69:e5:b1:47:42:70:89:
                    26:4a:a6:67:48:4d:b5:c8:74:33:75:5d:0b:64:2b:
                    0c:f5:34:52:e3:4a:6f:4a:d4:88:2b:c2:64:d6:fa:
                    44:fe:09:5e:ba:e5:33:a4:50:40:11:a7:2a:a5:eb:
                    b5:87:40:db:0f:54:08:3a:6e:6e:b6:d2:26:02:c4:
                    d4:80:a9:9b:97:21:86:f6:22:89:73:c9:2e:97:ce:
                    e9:d8:8c:54:39:4c:59:76:9e:08:aa:6a:a6:a3:74:
                    89:1b:9f:79:ce:23:21:78:a1:b8:63:95:81:98:2c:
                    44:24:ab:e4:8c:ff:84:41:9c:3f:e9:ad:8b:06:b2:
                    ba:59:3d:e5:95:02:39:58:98:c1:8c:9a:36:9c:7f:
                    82:7c:00:16:55:ba:59:6b:df:37:3f:ca:c5:41:24:
                    c7:56:ca:dd:61:60:1d:d5:8b:a1:30:a4:e6:1e:be:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:49:97:4D:5E:2E:D2:77:24:38:4A:D6:35:8E:D6:47:25:C6:B1:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:6d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:23:b6:32:8c:28:84:b6:81:b4:af:20:97:9f:a2:ff:10:b0:
         c9:39:f7:99:0d:03:f5:4e:ce:8c:35:99:fe:e9:49:20:e2:b5:
         b8:f9:95:c6:af:ea:00:a2:0a:8a:3a:99:9e:10:eb:cc:a3:e6:
         1d:5f:97:ad:ce:54:f0:4f:09:db:48:90:ed:eb:db:72:6b:47:
         15:75:28:3d:b0:39:cd:82:e6:57:3d:12:7b:9a:fe:66:26:0e:
         ff:24:01:bd:95:e7:32:dc:54:c2:92:89:6c:c0:61:03:be:b7:
         eb:13:19:3c:d3:53:73:a6:d9:33:80:f0:4f:a8:31:1b:03:6f:
         66:c3:a3:92:33:b9:c0:ee:d5:d1:06:49:53:ba:96:58:6a:52:
         f8:a8:f5:13:2b:58:68:37:64:c6:ca:78:92:96:e8:b6:d1:f7:
         e8:0e:4c:ad:b3:40:5c:b5:2d:43:9d:c4:5d:d6:14:41:eb:e6:
         59:60:f2:f0:78:51:28:49:62:e1:ed:05:25:70:ea:cf:53:a4:
         e1:62:12:35:81:2b:c2:42:54:7e:5c:ac:b8:18:4e:51:e8:5f:
         53:d4:20:61:65:16:ae:d1:bc:9e:71:61:ac:88:99:7e:09:f0:
         98:fe:2d:91:46:3d:70:b3:fb:24:eb:d9:a3:ec:0e:18:0f:28:
         0a:45:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:31:09 2024 by rpki-client on console-ams.rpki-client.org