Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa
File:                     005f5344-a550-335e-b752-433dc39d5f9a.roa (raw, json)
Hash identifier:          nZrgJtDdia3OSvCJUnBnDjpK4oabeURLUeB7MoVfZLw=
Subject key identifier:   40:D2:1F:12:13:38:73:D4:C7:A0:EC:26:D3:67:D9:10:C9:CE:83:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC9186D28FEDDB50CA37600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        2600:4040:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:18:6d:28:fe:dd:b5:0c:a3:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=639a68c5-ccd7-4424-9ed6-2217fd684a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:cf:55:99:31:12:c3:81:1e:98:40:dd:76:
                    c5:f9:f4:8c:72:ff:99:6d:07:56:ae:5e:d0:8e:00:
                    23:2b:85:b4:df:99:24:b8:a6:6e:76:42:18:c4:8d:
                    68:05:6d:82:60:ec:53:39:aa:aa:5a:34:50:33:5f:
                    b9:8b:87:0c:a1:f5:9b:b1:45:87:dd:5a:c2:d5:01:
                    06:93:86:91:8d:a6:ba:26:ab:dd:ea:32:40:ff:2b:
                    c2:b0:5e:f8:d6:b8:8b:20:e6:e5:d9:08:09:12:12:
                    ac:49:6a:f3:1f:76:ca:d7:03:93:3b:4b:21:5d:20:
                    74:31:89:71:d8:41:a3:37:e3:cf:00:34:35:c5:cb:
                    6a:d0:29:a6:c1:72:06:81:16:fa:8e:1e:da:25:12:
                    02:fa:72:d4:31:d1:c0:b6:3f:7c:e8:f9:67:4d:ef:
                    8c:72:9a:fc:f1:e5:57:11:53:e0:a6:b0:df:73:eb:
                    a7:69:bd:c8:d6:a4:c8:7f:84:be:40:ee:b1:a1:36:
                    2d:cb:a2:9f:4c:d9:70:56:28:f4:40:ea:79:84:24:
                    91:45:ff:99:46:3a:07:a6:09:11:6c:08:9c:ca:74:
                    df:69:14:de:e0:ef:17:8e:f5:08:34:4b:ac:04:20:
                    db:47:06:22:f9:4d:3f:21:a0:55:a7:35:ec:e9:6b:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:1F:12:13:38:73:D4:C7:A0:EC:26:D3:67:D9:10:C9:CE:83:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d5:7e:c5:ee:01:04:e4:b3:9a:05:3a:e5:92:ab:e1:d2:d5:
         f9:3e:68:0a:08:2c:0c:5a:45:5a:2c:3f:e6:f7:9b:c1:b2:3e:
         f7:37:70:ab:0a:48:d0:a0:31:fd:13:15:e1:71:1e:f5:22:ad:
         3e:b8:62:b7:ac:c9:ce:cb:a1:41:c1:db:81:d4:99:35:bd:c3:
         05:48:1c:3b:33:3e:a6:fb:4b:56:fc:c5:d3:98:d6:81:cc:fb:
         1b:0f:2d:73:ca:62:11:a6:11:d8:5d:31:7c:a7:bc:cd:a3:5d:
         b9:0d:be:63:b8:73:bb:14:b8:7a:b1:25:4b:1f:3e:96:89:58:
         74:fa:b6:98:68:87:2b:e1:7e:51:12:8a:b8:59:bb:f0:16:9c:
         ff:20:bb:bc:c1:64:30:e0:9e:8c:17:da:de:ca:29:eb:44:a6:
         8e:ee:04:79:44:f7:d6:1b:8c:97:48:7f:68:11:eb:4b:44:ff:
         df:10:cb:a8:66:c6:52:1a:e4:d4:57:cc:77:3b:d0:47:50:19:
         5d:08:1f:da:30:69:18:b3:42:de:65:58:83:28:17:55:57:a8:
         52:87:fa:ff:62:9e:1c:e3:2e:b7:11:60:79:c9:98:16:41:4d:
         e8:7f:37:08:af:2c:49:e3:70:06:8b:d4:31:27:d9:0c:8e:d3:
         45:b4:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:19:29 2024 by rpki-client on console-ams.rpki-client.org