Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa
File:                     1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa (raw, json)
Hash identifier:          h8qeA3c3jUcksA2y/aG7FT+TXzkM4N9eLbzVY3+dRe0=
Subject key identifier:   4E:5A:0A:34:7D:59:BB:F8:6A:95:DC:20:76:06:47:58:B1:CF:67:65
Certificate issuer:       /CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
Certificate serial:       010D0C9F43285845549828F3C67938C1E8C1A780
Authority key identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     11925
IP address blocks:        2607:7140::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:28:f3:c6:79:38:c1:e8:c1:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=cf9a7da8-d627-4d12-b617-69811dc801f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:7b:ed:78:cd:33:0b:86:6e:82:e9:6f:d3:
                    40:9a:ef:03:77:6c:8d:08:d4:5b:d2:30:1b:6a:f0:
                    5d:6f:f2:09:22:69:4e:c3:70:f1:6c:5c:90:a6:75:
                    8e:de:59:4a:87:eb:ce:1a:a7:47:33:ff:4f:55:b3:
                    9a:e8:cb:25:33:8f:eb:62:31:8e:03:df:58:a8:94:
                    26:5c:26:e0:0b:cf:fa:f8:e0:4b:43:d0:e9:08:e7:
                    32:5c:97:17:1d:7c:ed:d6:1e:47:1e:b5:fc:bb:54:
                    96:9c:5d:5b:0e:ab:82:71:03:d7:e5:f6:ad:00:f8:
                    d2:af:53:fa:55:ee:87:a1:54:6b:00:2b:ae:49:8c:
                    9d:1f:8a:9c:c2:4c:22:31:36:5a:fc:2b:34:37:ee:
                    fd:43:a4:61:90:5d:10:e7:e0:c7:85:c1:93:80:24:
                    83:ff:c3:24:66:ae:2f:20:6e:21:08:cb:1a:23:2f:
                    14:fd:09:d1:e3:05:de:a6:97:fe:3e:46:1a:0b:8a:
                    21:a5:61:a9:af:b4:ae:2f:85:41:ca:12:60:eb:ef:
                    e7:42:12:cd:79:29:6b:f2:7b:df:a1:d4:49:a7:c9:
                    30:d4:e7:33:51:3d:d4:46:54:91:9e:fd:f2:be:83:
                    61:72:bc:e8:2f:62:40:81:22:19:c5:8d:84:e0:bf:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:0A:34:7D:59:BB:F8:6A:95:DC:20:76:06:47:58:B1:CF:67:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl

            X509v3 Authority Key Identifier:
                keyid:22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:53:15:88:26:db:88:93:f3:15:b2:00:c5:f8:f0:37:e4:
         e0:1b:c1:c1:4c:b9:e3:83:96:8c:dc:6a:e7:64:f1:67:1f:8e:
         36:a7:ff:ba:45:36:d7:4d:ff:82:42:09:47:9c:2a:57:2e:40:
         6a:e7:0f:f1:03:27:be:1a:27:d7:8f:a3:39:63:ee:ca:82:e6:
         41:35:94:f5:62:97:e3:18:3d:fd:2b:bd:b7:fe:17:65:6b:14:
         53:ac:0f:33:9c:cf:e9:a2:29:32:16:4f:69:9e:44:d4:d4:72:
         be:75:f3:0e:cc:13:43:ac:3e:c8:2f:0c:1c:af:8d:46:ff:d5:
         58:24:8d:80:c2:b7:a0:ee:da:13:85:f8:42:94:1c:0c:29:ee:
         01:44:3c:d9:b5:5c:cb:19:f9:1b:2a:ed:6e:5b:f7:7e:c2:8c:
         e1:2b:53:b4:5d:87:c5:91:89:1c:1c:60:20:97:0e:ca:ba:4a:
         b6:fa:35:07:da:33:c2:24:0c:5a:d7:3e:12:1f:92:a0:6e:3b:
         7d:5f:29:fa:6e:60:0d:5b:5f:16:ff:33:05:1a:43:40:b4:06:
         e5:40:9d:7c:9b:b9:38:44:9a:7b:86:94:22:37:62:11:b5:fa:
         14:95:39:6b:02:f5:2c:17:60:54:da:f8:b7:f3:5e:0c:a8:f1:
         09:ef:6c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:47 2024 by rpki-client on console-fra.rpki-client.org