Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa
File:                     40378f11-a3e5-3530-9d69-2b7f814a3645.roa (raw, json)
Hash identifier:          15SyQVUZWgtAcVSdCLkLsu6dT40Q/Uy3tQFFkdwH3qU=
Subject key identifier:   69:7B:C7:24:9B:2A:3A:74:FD:A6:02:46:42:D6:3E:00:A7:18:64:11
Certificate issuer:       /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
Certificate serial:       010D0C9F432858452D828F4488469D61F7A4CB80
Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     399240
IP address blocks:        2607:30c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:8f:44:88:46:9d:61:f7:a4:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=91b5ea28-f49b-4955-8678-25b9fedde708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:55:e2:d0:7b:14:56:df:bf:b3:7f:71:4a:
                    b7:48:68:da:6a:92:72:85:c4:e3:38:26:14:ed:2e:
                    d9:9c:cf:ec:a2:74:78:14:12:2b:b2:a2:e1:76:f3:
                    e0:59:ac:0e:66:42:c0:1f:0c:43:ed:6d:f9:1d:0f:
                    e6:db:b9:66:49:97:0c:d2:b6:e6:dd:ff:7d:bc:79:
                    8f:84:a4:90:1e:d6:6b:93:ca:6e:23:5a:cb:94:27:
                    60:2a:ae:04:19:f2:75:3b:09:11:19:1c:36:e0:5d:
                    43:1c:be:ab:97:74:c2:3d:68:89:11:90:a4:45:e5:
                    15:2f:30:23:c6:62:ed:7d:bb:fe:b2:24:b8:9b:fc:
                    13:39:1f:f5:6c:e0:da:36:a4:d0:5d:a3:77:8f:1f:
                    03:69:0f:04:a5:03:9a:9c:26:6d:68:10:d0:df:da:
                    d7:50:11:af:2f:7a:df:9d:c5:b1:18:e0:3a:5e:fd:
                    46:72:a1:a5:d9:f5:59:28:c7:49:63:64:b7:1c:cc:
                    79:5f:ff:87:c6:39:3b:40:cd:f5:dd:b9:d7:0e:0a:
                    66:d0:f2:83:62:3e:7f:77:e7:73:1e:68:5c:cf:b6:
                    0b:39:da:99:1f:66:3a:22:6d:5c:26:97:f1:14:83:
                    2e:dd:a1:51:95:63:b2:1c:3d:67:45:89:ed:8d:74:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:C7:24:9B:2A:3A:74:FD:A6:02:46:42:D6:3E:00:A7:18:64:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:30c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:e4:86:26:56:1f:3b:5e:c8:6a:15:66:e4:fa:61:ce:ea:
         a4:c5:13:f4:ea:44:a9:95:38:de:b2:c7:e2:53:33:f9:0e:89:
         e1:0c:50:e2:78:a1:84:86:1e:4f:75:bb:45:c7:d1:b0:cf:6b:
         88:b4:3f:28:00:89:8d:c9:ce:89:7a:87:2b:00:11:6b:78:62:
         13:1a:e8:fb:c0:d2:fd:53:50:cf:c1:74:5f:d0:21:e6:c7:af:
         e0:30:c9:ac:0c:9d:12:75:b2:e1:40:a2:41:fa:5a:a5:a2:cf:
         87:09:13:4f:b3:03:a6:a3:31:0b:fa:1e:b7:5d:61:26:45:ad:
         8d:d9:33:09:62:9f:4f:54:c0:c1:c2:c7:63:8a:59:a5:f5:b1:
         a9:d0:f8:95:c5:02:c8:4c:56:e5:f7:2a:fb:39:4b:f7:56:47:
         56:fc:9c:e7:22:0f:9e:84:3a:0d:05:e3:56:87:13:9e:7e:db:
         48:5f:e5:99:1e:fd:81:17:50:3c:0b:4d:8a:58:3a:eb:0f:32:
         8d:51:c1:83:da:eb:ad:c9:36:9c:11:b5:06:7b:46:16:d9:a7:
         16:86:55:cf:dc:c2:4f:4c:ef:5c:4a:0e:6f:00:bd:e0:2b:d3:
         15:6f:60:45:e6:8b:a2:ad:f9:59:32:af:d0:1c:36:fc:44:68:
         2f:e1:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:35 2024 by rpki-client on console-fra.rpki-client.org