Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa
File:                     7880a518-272e-3d8a-a2fc-5e1873b388c3.roa (raw, json)
Hash identifier:          SVW69c3p1Pcvzx8KwEaJOudayMCYjD0VDpCeQbsqkiE=
Subject key identifier:   35:2D:AA:F4:7C:D0:9C:DE:C7:0C:9D:6A:52:72:67:96:C3:B4:5F:72
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285845D0D3A18CE79D8B103BB05380
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     400672
IP address blocks:        2607:ff00:b00::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a1:8c:e7:9d:8b:10:3b:b0:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=ac81e9ea-f290-45ae-ac29-c5db2a7811e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:47:7a:04:dd:a5:0d:a4:4c:e5:8a:0e:71:
                    b7:88:87:ec:53:a8:69:99:07:32:68:90:82:de:be:
                    87:d4:d4:08:c6:66:bb:11:c6:1d:3c:ab:50:54:8f:
                    fa:d3:08:ed:ba:88:0c:96:17:40:4a:66:9f:6f:73:
                    a7:3a:93:7f:ef:8c:1f:98:ff:c3:d6:97:dd:bb:e7:
                    25:19:e8:47:54:d7:cb:32:7a:83:d4:18:9e:99:15:
                    42:3d:8b:a4:41:a9:d0:b4:a6:af:b3:fe:0a:1d:34:
                    37:0e:8c:e8:3c:46:17:f9:77:ef:41:34:db:f1:1b:
                    32:59:19:d2:aa:79:e8:30:0b:6e:f7:b5:43:11:0e:
                    1d:d8:61:01:d4:46:bc:18:ee:02:c4:b7:71:67:bc:
                    1b:56:44:03:74:31:2b:6a:22:3f:15:b2:a6:a4:20:
                    f5:83:52:58:f8:8d:55:6c:2e:86:78:65:c5:bd:68:
                    55:67:05:20:91:93:4b:9b:2e:38:70:d9:59:d2:19:
                    7f:46:1b:b6:b0:f5:e8:55:df:f3:30:d6:3d:ad:ef:
                    f1:9b:06:b0:55:6d:1b:be:09:c1:df:c2:d4:1a:1c:
                    02:44:ba:ca:50:00:e5:c4:af:83:e9:ce:a0:08:7f:
                    8e:34:bd:ac:fd:0e:bc:3d:1b:0c:7d:6e:45:17:f7:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2D:AA:F4:7C:D0:9C:DE:C7:0C:9D:6A:52:72:67:96:C3:B4:5F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7880a518-272e-3d8a-a2fc-5e1873b388c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:70:fb:52:f0:52:57:02:d0:7a:50:9e:56:b4:0c:a9:80:2c:
         6d:3f:6a:64:9b:0e:bf:91:57:1a:9c:2c:7f:bc:04:91:66:cc:
         ac:64:3e:4f:be:1b:32:58:d1:5b:85:7f:8a:71:68:4b:83:b2:
         18:1d:ba:26:39:2b:8b:4f:3d:cc:80:18:e2:c3:0a:a9:4c:8e:
         20:1d:1d:83:89:f5:55:0e:b4:1d:b1:87:5e:15:e4:73:65:0a:
         3b:47:00:b2:2e:8e:0c:cd:fc:a1:65:5d:cb:e2:2e:7e:61:d7:
         14:d0:04:c3:3e:ad:c9:51:af:be:34:e8:fa:52:63:24:c6:b7:
         12:c4:32:11:d8:5c:be:86:51:9d:93:c3:7d:53:30:e6:c1:44:
         a0:5d:d0:aa:31:fb:23:fe:31:61:85:e1:5f:ca:bd:36:fc:e4:
         98:86:72:8c:73:f1:13:b5:84:7a:f2:31:2d:58:66:90:46:54:
         bd:6b:d1:b0:fa:19:b6:36:a5:03:a9:96:3f:00:6a:34:ea:67:
         63:52:3b:7c:e5:67:5f:00:8a:54:a6:ef:5b:75:83:a8:b6:4f:
         9d:13:bb:23:b2:ff:3e:4e:9a:e1:f4:43:bc:79:c8:44:01:cb:
         ee:c1:d8:6d:ad:13:e4:59:c5:e4:0a:61:3b:27:de:77:01:35:
         a2:76:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:24 2024 by rpki-client on console-fra.rpki-client.org