Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa
File:                     520c6060-826a-3f64-b994-794fc7c88795.roa (raw, json)
Hash identifier:          ootvADc/gpWyddP2rIzI6gHg4G3o+t6qPO3rFQurh90=
Subject key identifier:   1B:AE:97:F2:23:A0:E6:49:1B:E3:27:6F:AB:65:5A:38:8A:D5:46:3F
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285845909DE5D7CD2FC441FBAE4C80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     397378
IP address blocks:        2607:6004:a100::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e5:d7:cd:2f:c4:41:fb:ae:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=73dfc4a9-9f71-45e5-b613-626b006c2be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:49:cf:2a:d7:59:76:e4:06:76:bf:6d:2d:
                    0b:ae:6e:b3:c3:7a:a3:15:3f:41:a0:4a:2a:e3:9b:
                    c1:04:f2:fd:80:9c:d8:b3:c6:96:7b:8e:13:fa:57:
                    a4:71:db:da:b0:af:f8:ac:24:bd:70:9a:4b:c5:ff:
                    66:d3:bf:95:b3:de:90:90:62:7f:25:43:79:9d:3b:
                    b6:c6:a7:20:7f:a4:2a:a7:11:ee:6b:96:c2:0b:9f:
                    39:0d:73:5e:95:b5:c8:26:a7:64:b6:ec:b6:f1:bf:
                    4e:1e:0c:17:4f:18:c2:c3:1e:6e:3e:46:43:b8:d3:
                    9a:36:e7:df:96:9e:3e:d6:98:65:f8:2b:15:d8:10:
                    1e:73:aa:8f:e5:a1:4a:84:6a:ea:7d:ac:96:e0:9c:
                    ac:42:b7:a1:14:35:1b:54:37:82:3b:9b:9b:20:4c:
                    40:ec:33:9e:76:a5:52:e4:8b:20:eb:3a:02:c6:bb:
                    ba:bd:4d:99:3f:52:61:78:83:f1:ff:7a:42:ad:be:
                    7a:ef:11:91:47:cb:4c:bb:33:ca:64:03:c7:9e:89:
                    90:99:a7:62:70:d6:ee:8f:50:1a:c8:33:33:b1:b1:
                    3a:a8:35:70:69:70:5c:56:fb:d8:b9:f4:d7:7f:e7:
                    e9:c9:24:7e:77:b8:bf:84:4f:df:ec:ac:29:47:c1:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AE:97:F2:23:A0:E6:49:1B:E3:27:6F:AB:65:5A:38:8A:D5:46:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6004:a100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:8b:7c:d2:ae:5b:a7:d0:6c:bc:dd:0e:43:03:2d:34:21:e9:
         44:ce:f3:a3:f2:30:f1:dc:4e:37:67:b8:68:f7:da:21:4c:81:
         49:4d:c2:39:12:fa:6d:5e:6c:e6:cb:47:91:ee:aa:02:8d:df:
         03:50:28:01:86:39:a4:3a:1e:1d:ff:78:2d:1a:16:ae:a5:29:
         6c:ee:ba:59:69:ef:4a:fd:ca:76:0c:9d:e7:e8:60:a7:76:f0:
         25:15:b7:26:04:ba:d5:7d:7e:3d:eb:ae:fe:46:02:0f:c5:2f:
         2c:e9:71:5b:23:23:f1:f4:19:c9:00:27:b1:d6:6f:a0:45:7c:
         e2:ab:de:be:b1:66:65:47:9f:ba:3d:19:9b:18:17:70:48:35:
         24:91:7e:4f:ac:00:f7:f8:70:fd:db:80:42:24:6a:fd:36:11:
         e9:71:5b:16:9e:aa:21:8f:a5:98:97:74:4a:df:34:04:a5:27:
         f7:89:b4:58:fb:8b:57:7b:9a:ef:0f:81:1e:6c:dc:c2:e1:68:
         0f:e1:e4:fe:50:64:cc:30:3b:99:8b:ac:ab:27:f2:44:1b:4d:
         3a:85:21:ab:5d:7b:d3:74:bd:48:5d:ca:53:40:97:75:fc:05:
         15:6d:cb:79:90:e4:50:98:5d:43:bc:01:69:f1:52:98:47:01:
         73:f4:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:45 2024 by rpki-client on console-fra.rpki-client.org