Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa
File:                     9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa (raw, json)
Hash identifier:          FaF3VLmR1ZDoYYyoZ4q6TvE5addncGll8v+DJLTwT7U=
Subject key identifier:   1E:C9:0C:FB:BC:33:8D:6E:02:90:46:91:CC:49:3A:A6:6E:CB:F8:AB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333316F49509FE26AE40700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        2604:cb00:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:31:6f:49:50:9f:e2:6a:e4:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=55049552-4fd6-4d01-a06a-d7363f256a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:91:a6:7e:a3:23:b3:20:7c:47:cc:aa:81:
                    8d:19:e1:96:9c:a1:ac:d7:ae:d7:d2:a7:18:02:07:
                    fd:e5:ec:8b:ec:e7:19:61:78:75:6d:2d:77:5e:50:
                    6a:be:61:a5:85:13:2d:9e:11:b1:82:2a:b7:34:88:
                    14:47:37:e3:c6:44:3f:64:53:22:68:a7:61:f9:f9:
                    6c:ff:a4:05:83:8d:85:6c:4b:ee:6a:ae:2c:19:93:
                    d8:72:28:22:de:25:9a:81:d2:49:30:60:b2:64:34:
                    5e:54:14:5d:d2:ca:f0:06:36:d1:8c:97:f9:c1:ad:
                    81:0e:63:15:c5:f8:22:44:4b:c3:f1:b4:d1:f7:b0:
                    5d:6a:4f:07:7f:e4:1e:21:38:2e:3c:98:ec:2d:2c:
                    b6:ea:88:06:10:5e:d7:33:64:df:54:be:ee:7a:9b:
                    f1:ec:4e:6a:1a:29:8b:37:6c:43:98:55:00:03:bd:
                    ca:37:0b:b5:b9:06:57:6c:db:fb:a6:c5:67:f4:43:
                    e0:62:93:98:42:4b:f7:6e:a8:41:dc:a9:ce:ab:d1:
                    c5:e1:52:a7:3b:4a:34:a9:4a:11:cb:7f:6c:3c:18:
                    3f:af:58:76:70:df:c7:24:8f:ad:15:29:23:53:c6:
                    41:d0:2f:ba:3f:36:7e:dc:7c:cc:33:b3:eb:e1:6a:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:0C:FB:BC:33:8D:6E:02:90:46:91:CC:49:3A:A6:6E:CB:F8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:15:a4:6d:f4:59:3e:d5:d2:f3:45:83:89:ae:4c:15:00:89:
         b2:af:a3:79:f6:45:90:69:dd:33:0f:f9:2e:9f:cb:da:f9:a5:
         9b:23:d3:6f:5e:e4:50:5e:f8:48:91:73:3a:48:6f:e2:9c:dc:
         59:46:54:d2:0e:4e:db:69:40:c2:dc:d2:8b:a7:ab:4c:a5:30:
         f3:8f:5d:e3:bc:05:69:43:71:47:b8:58:c9:16:d2:7d:cf:dd:
         58:56:25:04:5e:40:55:e6:74:25:2a:11:21:8d:fc:54:20:68:
         0e:71:f8:87:cc:8d:76:cb:71:41:ec:5c:75:9a:d2:57:ac:65:
         23:fd:ee:23:62:9a:d7:11:f9:ae:2c:27:00:de:40:79:a1:29:
         1a:d8:24:e4:db:f8:60:9b:7e:43:f7:c2:bd:aa:8f:01:70:85:
         8b:d6:65:9d:9f:a5:6f:db:2c:e4:8a:40:ae:47:96:12:10:e8:
         fd:53:04:fc:19:ed:a7:3f:af:d0:e3:96:11:49:0a:fc:bc:96:
         a7:55:b3:b0:1d:cb:50:56:79:e1:bc:d7:f5:1f:e2:5b:c7:bb:
         11:db:86:7d:1d:60:99:5f:2a:0a:37:c4:8b:5d:80:a7:9d:b8:
         01:73:6c:65:78:fe:ab:3e:1a:ee:44:4f:8b:16:13:cc:f3:66:
         d2:6b:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:37 2024 by rpki-client on console-ams.rpki-client.org