Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/26a3945c-536c-33b5-a3e4-158628fc3739.roa
File:                     26a3945c-536c-33b5-a3e4-158628fc3739.roa (raw, json)
Hash identifier:          0TFQoi8bfzwDE+4DTOSfjOLevw3fhdF+YKXOva0SH4U=
Subject key identifier:   D6:56:19:5E:B8:ED:DC:8A:FE:B9:09:A5:FC:F0:CB:4A:F5:F3:51:ED
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858459368BB11497587143F74630C
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/26a3945c-536c-33b5-a3e4-158628fc3739.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     397378
IP address blocks:        2607:ff00:b00::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:bb:11:49:75:87:14:3f:74:63:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=22f09402-984d-4950-93a5-e940da99de36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:6f:b0:2d:5e:84:1f:c8:a4:d2:1c:35:21:
                    11:f0:c3:5a:11:76:b8:3f:7e:29:56:3c:96:b4:04:
                    7c:7e:1b:0c:df:25:a0:95:cf:e0:ff:d4:95:1d:5e:
                    11:17:ff:f3:ad:f1:51:b6:03:e0:80:79:68:6c:39:
                    75:60:fc:9b:f5:1a:10:23:b5:fa:01:d0:91:17:74:
                    39:95:8a:b5:0f:21:f0:4f:29:43:2e:9a:ab:27:a8:
                    ac:d6:e0:bb:c3:9c:32:ab:85:e2:72:aa:b2:da:28:
                    f0:ec:56:4f:58:c4:b7:4b:58:a1:c8:5d:c7:fd:40:
                    c9:34:53:87:a2:2e:f1:e7:c4:84:ba:74:dc:e5:04:
                    08:4b:80:00:fc:a3:b3:41:bc:7e:11:36:c7:0b:7c:
                    18:4f:0d:6b:7e:af:f4:0e:21:92:e0:7a:94:81:89:
                    ca:f2:17:9f:e4:4f:dc:5d:ff:11:0a:be:a3:18:41:
                    ed:8e:1b:6b:b3:f0:9c:d7:75:fb:a7:e5:8b:27:91:
                    3f:f9:9b:02:3a:b9:6c:45:31:e7:38:a6:2b:de:4e:
                    5c:b9:f1:0c:c9:dd:5e:08:a9:08:ec:23:c9:f2:d3:
                    7e:cc:25:b3:44:97:6b:93:65:e3:a2:e1:f0:8f:8f:
                    f8:a9:1d:22:53:22:eb:95:ea:d9:c4:11:73:ae:34:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:19:5E:B8:ED:DC:8A:FE:B9:09:A5:FC:F0:CB:4A:F5:F3:51:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/26a3945c-536c-33b5-a3e4-158628fc3739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:85:ea:c3:a6:00:34:a2:e0:a9:3a:72:5c:26:36:4d:69:41:
         d5:a9:9a:2f:26:c4:8c:18:0a:97:f8:67:ce:b9:43:6c:67:8e:
         9f:3e:c7:d4:38:7a:dd:92:9d:1e:35:58:3c:bc:11:8a:03:12:
         5b:ac:66:ba:15:67:ea:7c:f0:ac:06:fe:09:15:84:ec:f6:e1:
         60:23:ff:6e:4d:f6:a8:2e:e2:1b:8b:7c:78:cb:79:7d:00:05:
         4d:31:25:8a:27:66:48:6d:25:15:5d:57:59:73:35:6f:34:16:
         4e:12:23:97:2e:b4:22:46:a1:9b:12:e0:f7:cb:01:89:c6:b6:
         d7:50:cd:02:43:2b:1a:e3:01:e6:2c:bc:c9:cc:14:94:6b:69:
         a3:8c:aa:ea:64:4d:5e:75:b5:30:74:bb:29:fc:58:36:0a:08:
         07:9f:9d:b8:79:7d:06:84:51:4d:9d:22:b5:72:f8:2b:c9:b2:
         4a:d8:b9:41:26:ee:75:5c:6e:44:77:b5:38:a0:15:f1:77:ab:
         9d:22:40:ed:31:dc:4d:0c:8b:e2:bf:93:b4:b1:f2:fe:95:c2:
         49:49:3c:69:82:0c:ce:30:7b:74:a2:dd:0a:07:6f:4a:54:78:
         08:15:87:1d:13:8b:c8:39:d9:b6:3c:2b:da:4d:a2:0b:3f:8c:
         13:47:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:24 2024 by rpki-client on console-fra.rpki-client.org