Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
File:                     a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa (raw, json)
Hash identifier:          +RrO9inpwKfNkBO+uTpPjL9RgaGUoQT8b8O07f0b5us=
Subject key identifier:   EC:79:DD:D9:8B:7A:BC:25:BF:5D:16:F7:08:53:6C:6A:98:C7:3D:D9
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F43285845068AC5120690E3E28BDC9C80
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     54098
IP address blocks:        2607:2740::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c5:12:06:90:e3:e2:8b:dc:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=8411277a-fea3-4709-8f71-5fbac799d122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:aa:17:b2:cf:8f:2c:68:a4:dc:d6:cb:08:
                    1e:c6:09:18:50:3d:36:29:f8:85:93:11:42:17:71:
                    9f:cb:9b:fd:01:a3:3e:75:95:ed:af:9f:f7:3e:fb:
                    fa:4a:44:71:54:50:64:11:ff:fe:0c:6e:41:ba:b9:
                    95:ac:5d:57:67:c8:ea:f4:90:d4:1a:4e:1f:b7:b6:
                    c5:68:2f:f6:8e:bc:81:33:a4:a6:2b:d1:bc:42:a9:
                    ec:13:95:03:df:60:7c:ce:ea:57:a2:48:77:4f:76:
                    f9:6b:c1:0b:13:e3:56:79:25:d6:4a:c2:91:68:4e:
                    45:3c:e8:86:9b:75:54:ba:46:9b:56:01:b9:60:f3:
                    a3:a9:62:69:cc:07:26:bf:11:e4:2e:e1:bd:be:4f:
                    7e:83:6d:a4:78:19:07:e1:31:f1:cb:57:52:82:39:
                    7a:bd:da:1b:b8:ab:0c:55:28:76:71:ac:0b:21:81:
                    50:5f:69:0a:23:0c:df:45:52:19:7d:4d:bc:68:10:
                    2b:75:32:72:07:d3:2e:a4:03:3b:3c:f0:0b:b2:e9:
                    ac:80:74:82:4f:cb:01:5b:24:ef:c0:88:8e:b4:29:
                    e8:0c:91:04:bd:4f:ab:04:c9:da:76:05:ce:af:c3:
                    f2:e9:4a:8f:3b:f3:a8:96:21:78:c4:cc:bc:4d:45:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:DD:D9:8B:7A:BC:25:BF:5D:16:F7:08:53:6C:6A:98:C7:3D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:76:7b:a0:2d:80:4c:55:d3:66:74:1f:e1:c4:7e:bb:0a:
         0a:d1:17:fc:59:ff:43:e7:8f:c7:dc:6f:11:92:8c:5c:20:f2:
         c0:71:d5:68:18:9d:e4:27:d4:e5:ca:63:16:c7:f3:22:a1:06:
         32:a6:98:3c:30:f8:a5:e7:c6:07:b2:89:c7:2d:29:0a:c1:34:
         cd:2c:39:6f:84:f3:33:ad:9d:e9:47:fc:95:9a:1b:5e:42:52:
         18:a7:76:d2:3b:1f:2d:ce:c1:ef:54:7e:e0:4e:02:73:d6:8a:
         74:41:40:c3:a3:5e:e5:c4:f1:55:d7:7a:a3:94:0f:72:7c:e4:
         ab:fd:04:fc:c6:26:e9:bb:c7:6f:36:76:17:fd:05:4a:74:2b:
         6d:5e:80:0a:1e:f3:f7:57:3f:ad:64:5b:ae:34:49:78:11:18:
         0d:8f:29:ce:31:e0:ab:b0:b4:64:fb:99:5a:c2:9c:35:9d:b4:
         d0:6d:24:a5:e8:d2:02:78:59:ae:a9:c6:47:67:f6:a3:42:36:
         45:5a:3f:29:ff:fa:70:62:00:43:82:58:60:7a:9a:f9:98:e3:
         bb:97:b0:bf:47:26:5e:3c:4a:30:3f:bd:f2:28:0a:d5:c9:2b:
         0c:11:7d:da:3b:9e:3f:33:fb:99:7a:2a:ad:a8:c1:38:8d:45:
         8b:4d:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 21:36:42 2024 by rpki-client on console-ams.rpki-client.org