Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/00636f58-903b-3774-81bd-04ef4b0755f6.roa
File:                     00636f58-903b-3774-81bd-04ef4b0755f6.roa (raw, json)
Hash identifier:          7Z0q3kSxHiKKKR8X72tgbvBqAnQH5aJiELSNEqYrATw=
Subject key identifier:   1B:82:3F:E6:4A:2C:71:ED:9E:5C:A0:8F:03:FC:2B:C8:D2:6B:BF:C7
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F4328584542385C7F5546F0FA4752C980
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/00636f58-903b-3774-81bd-04ef4b0755f6.roa
Signing time:             Tue 19 Mar 2024 11:02:59 +0000
ROA not before:           Tue 19 Mar 2024 11:02:59 +0000
ROA not after:            Mon 17 Jun 2024 11:02:59 +0000
asID:                     39937
IP address blocks:        2607:5240:1234::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:38:5c:7f:55:46:f0:fa:47:52:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Mar 19 11:02:59 2024 GMT
            Not After : Jun 17 11:02:59 2024 GMT
        Subject: CN=b48f70bd-e541-40e0-98c6-2d711d3c494f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e7:d8:09:3c:11:99:da:ef:fb:8a:42:9e:35:
                    3f:fb:e5:3f:58:32:6e:c0:a8:fc:fd:2a:08:de:b6:
                    24:ae:a8:a3:d2:e4:4b:f4:5b:8d:51:48:bc:64:79:
                    9f:5a:f6:9f:e9:cb:f8:8c:ef:21:ad:87:18:50:51:
                    06:8f:4a:95:b0:97:1a:71:f2:fd:b6:1f:23:85:e4:
                    f8:28:89:7f:09:ff:44:f1:16:1d:12:8e:61:47:5b:
                    9f:bc:9e:58:78:03:7f:51:bf:a9:bc:ae:b5:82:9c:
                    e5:3c:9f:b1:49:51:a5:0f:75:71:04:51:11:04:fe:
                    a0:8d:7c:4a:43:be:bf:85:1c:8b:66:26:10:84:df:
                    25:70:5b:c9:b0:b8:ac:47:cb:b8:41:bb:c6:c3:17:
                    3a:74:bf:54:66:1d:1a:2e:d2:ad:a1:78:58:cf:25:
                    d7:94:d4:08:0a:55:6d:b0:f6:29:48:67:bf:26:64:
                    be:1c:81:f5:a6:8e:07:1c:16:c8:7a:e2:cc:3b:f6:
                    68:fe:dc:7f:4f:f4:75:0b:2f:28:1b:97:55:08:1d:
                    0c:d5:e3:75:7c:18:a8:94:ff:ac:07:e3:a0:70:df:
                    11:a8:d0:bd:73:d2:a3:5a:d1:64:9e:ec:44:23:c9:
                    a9:58:df:64:ba:a1:7e:0f:d1:12:ef:89:6d:10:d4:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:3F:E6:4A:2C:71:ED:9E:5C:A0:8F:03:FC:2B:C8:D2:6B:BF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/00636f58-903b-3774-81bd-04ef4b0755f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5240:1234::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:0f:0c:b1:12:05:ea:27:21:8a:de:01:c1:2b:ac:3a:4e:
         fc:67:a0:fe:54:76:13:f0:78:7a:b2:85:30:a5:aa:75:ab:2e:
         be:27:2d:3f:34:ba:47:bb:eb:dc:bf:bf:96:d6:e2:54:bd:35:
         51:4a:8a:f5:db:74:f4:b9:a2:f0:a7:e1:ec:8c:3c:9d:94:3a:
         5a:83:e1:5d:ef:16:e5:12:60:84:c5:28:a0:46:c7:b3:5b:83:
         38:d4:49:8a:a9:e6:5b:50:8c:66:ac:b5:52:47:f7:2e:ae:e6:
         19:e4:3e:65:34:22:ac:24:fb:8c:bc:b0:62:ef:7f:9b:28:41:
         d0:db:41:7a:6a:5d:fd:16:81:d5:86:e9:71:c3:b6:6b:09:7d:
         91:47:0c:15:1e:48:d8:d8:af:d2:21:c0:e1:fa:24:6a:89:ea:
         29:90:6e:10:d2:99:5d:dd:62:bc:62:77:c0:08:00:4b:e8:a3:
         25:0f:f1:a6:f7:d8:aa:b9:b1:bd:52:d4:ea:34:13:3d:99:25:
         cd:45:bc:7b:e2:38:a8:d9:41:01:df:5f:7d:ff:07:f4:af:ac:
         45:17:6e:6f:f7:40:fd:c1:f0:7a:91:24:1b:65:10:02:f0:94:
         07:47:a0:e4:2b:ca:31:8d:d0:15:05:bc:a3:33:51:b3:67:4e:
         a3:db:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:14 2024 by rpki-client on console-ams.rpki-client.org