Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c3c5cb-87be-3e1d-b359-bd323f3f2637.roa
File:                     f2c3c5cb-87be-3e1d-b359-bd323f3f2637.roa (raw, json)
Hash identifier:          Rtfo1h2D2Up6advCnRMUBzTMjtHy3OIf0T/hyMwgto0=
Subject key identifier:   9E:88:DE:58:C2:BF:94:39:CA:D7:B2:35:D2:7B:C9:FE:7E:9E:F4:AD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584511B58AE24C47325C6CF8D880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c3c5cb-87be-3e1d-b359-bd323f3f2637.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        2600:1900:4700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:8a:e2:4c:47:32:5c:6c:f8:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=73de4b30-c6e8-4f69-bf1d-ce89ed401881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:07:55:15:6c:1e:b2:9e:55:60:43:e5:e7:
                    70:3d:14:8d:ef:34:c5:92:7f:74:fe:0c:fd:ca:9f:
                    dc:7c:38:f5:fb:b3:0e:f8:3d:c1:8b:91:a9:52:a0:
                    03:a1:a0:02:92:51:e9:98:5f:45:3a:af:da:4e:2b:
                    10:b2:15:0a:dc:08:27:8c:7e:e6:8c:12:e5:52:3b:
                    14:41:eb:91:39:7f:9f:b9:5d:51:15:85:bc:5d:ad:
                    5a:c2:29:4b:bd:1c:71:eb:22:78:3e:5d:15:22:7e:
                    90:aa:74:8d:21:83:33:5d:7d:bc:06:3d:2b:4c:2c:
                    0f:a9:fb:0a:10:e3:4d:63:10:74:81:68:29:4f:6f:
                    b1:78:c6:f4:d0:13:cc:8e:9f:1e:16:1d:f6:9f:c0:
                    d5:98:a8:db:25:77:3b:05:f8:fd:0f:06:7d:dd:10:
                    49:f5:7e:9a:e9:c2:3d:73:c3:c4:dd:58:48:d7:49:
                    2b:2f:57:b7:3b:72:c1:90:47:bb:a7:27:54:06:cf:
                    67:ee:d4:7e:05:97:eb:26:6f:40:5b:55:87:e7:21:
                    ba:cc:98:74:11:08:48:bf:c4:3f:49:8b:94:90:dd:
                    31:85:56:9c:d4:5b:42:32:2b:59:48:32:42:97:2b:
                    b2:6f:7f:e4:4a:f1:45:96:b1:3d:49:f4:f5:5b:de:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:88:DE:58:C2:BF:94:39:CA:D7:B2:35:D2:7B:C9:FE:7E:9E:F4:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c3c5cb-87be-3e1d-b359-bd323f3f2637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:80:36:a6:71:dc:b8:35:e7:84:fd:7b:38:3a:54:81:c7:
         1f:d3:57:4c:4a:49:96:7e:5b:fb:8e:33:d9:27:06:95:14:95:
         89:fe:e0:9a:3f:bf:0c:ce:4c:d1:b8:ab:9b:5d:3b:18:12:50:
         38:2b:af:2f:2d:ef:6f:8e:04:21:16:4b:d7:15:67:c5:0e:a5:
         00:c7:f9:76:90:87:2b:14:2a:1d:85:8e:3e:6a:2f:3a:c9:b5:
         2f:5b:b1:4a:7c:e1:4e:26:01:c5:58:ca:1a:35:48:8a:bb:32:
         ec:d9:2b:86:bd:9d:29:bf:ab:a0:5d:5b:34:99:42:f3:63:85:
         1e:e3:e4:d0:a1:20:1d:38:08:40:4a:1c:d4:53:73:12:c1:7e:
         ee:a5:98:55:68:90:ba:6b:03:f3:c0:eb:ea:11:09:45:64:a4:
         0b:c0:ac:6e:13:60:0b:91:ae:92:84:a6:78:93:7f:6f:e3:5c:
         4d:8a:29:6e:4d:ae:f3:07:d0:e8:b4:61:5d:f4:52:54:57:cf:
         d5:1d:b0:ce:cf:5f:a4:f6:0f:7d:4f:32:06:39:4c:f4:a4:cc:
         f6:cf:cb:89:cb:cf:52:11:fe:6e:b3:c3:27:b8:52:de:61:e3:
         c0:db:65:f4:c4:23:1c:8a:18:99:da:3f:3a:cd:11:e0:31:da:
         b0:45:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:30 2024 by rpki-client on console-fra.rpki-client.org