Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa
File:                     7dae324e-ec74-30c2-b235-13f1ed8695f9.roa (raw, json)
Hash identifier:          VZTJMZTfDT3y/OtqOtr9yQv8EpoSwS7SGqRxtTeo/SM=
Subject key identifier:   F6:CE:15:D4:52:E1:16:50:8B:A4:39:E0:38:91:E0:01:50:03:14:94
Certificate issuer:       /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4
Certificate serial:       010D0C9F43285845C5A8EB494875ADE6CEF3F710
Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     394770
IP address blocks:        2607:68c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:eb:49:48:75:ad:e6:ce:f3:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=d17d4caa-9072-4ea2-b3d7-3cb061972779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:ab:ec:d4:f5:3d:c7:6b:a0:9e:bb:57:f4:
                    cf:39:ff:9b:a8:01:cd:05:4f:4f:2b:d9:73:1d:13:
                    ec:fe:3b:25:cf:fa:ae:a7:29:ce:af:21:66:8c:88:
                    91:30:34:24:f6:4c:d3:97:51:24:82:7f:79:bc:de:
                    d0:5a:76:b9:c4:33:11:2a:15:e3:1e:f8:f9:fe:ba:
                    28:a3:39:42:68:69:fe:0b:0b:01:16:0e:bf:90:9a:
                    de:51:50:98:6d:6a:3a:52:a3:d1:fa:b6:48:b3:9c:
                    29:da:e8:6c:77:e7:c0:e0:fc:ac:71:b2:cc:2b:7e:
                    95:61:43:83:86:81:97:32:6f:17:a1:8a:db:de:1c:
                    bc:d7:f8:12:2a:43:e2:e3:92:62:70:e0:60:a3:43:
                    0a:83:d5:06:31:4e:f1:01:81:30:27:85:da:6f:e5:
                    ab:e9:13:02:7e:fe:a0:6a:2b:5c:6c:56:17:17:ab:
                    ae:02:6c:dd:83:62:cd:85:06:e1:f4:56:91:ec:68:
                    35:60:55:73:6e:80:3b:bb:c1:1e:43:ae:0d:30:62:
                    78:bf:1f:3c:3e:e4:56:85:4b:72:ed:41:1a:ae:ac:
                    72:5d:2b:ce:c9:f5:64:43:58:6f:05:70:22:0e:39:
                    be:06:a8:39:e4:89:8d:f6:a6:41:da:23:ff:f1:07:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:15:D4:52:E1:16:50:8B:A4:39:E0:38:91:E0:01:50:03:14:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl

            X509v3 Authority Key Identifier:
                keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:68c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:c4:5b:7e:de:54:db:84:8c:06:c3:77:52:80:6e:dc:5b:
         9a:09:91:01:63:9f:95:2e:a8:40:85:a2:20:ae:4b:c4:12:48:
         51:e0:f9:ea:65:69:97:24:05:bb:65:52:a7:3f:5c:6f:6c:db:
         d7:c7:ba:80:c8:66:71:6b:f2:50:63:f1:3a:8f:eb:5c:ab:ca:
         d8:31:d3:7a:e0:95:70:64:48:a8:f3:fb:5f:5b:2a:c2:fd:10:
         b0:ad:ac:78:7a:1c:0f:5f:84:06:ad:99:a5:4b:11:c3:20:8d:
         c3:a9:8f:a0:ad:4b:33:66:13:a2:f4:ff:ea:c4:e3:f3:38:40:
         ed:f2:5f:b0:c8:94:19:55:39:fa:69:25:6c:c7:07:64:68:cb:
         55:08:26:df:e9:b8:7f:08:a4:e7:15:58:74:f0:07:d3:01:00:
         88:15:28:c7:6e:af:99:fc:ce:31:bf:f1:45:7b:f2:ac:58:28:
         27:c3:b7:d4:fc:6c:0e:dd:60:2e:45:c7:00:19:ec:c6:ea:18:
         e4:c0:b0:ec:be:54:ff:a9:b5:4a:bd:30:06:a4:57:25:d2:4d:
         f8:36:0a:b2:5a:52:a2:94:49:80:49:3b:c1:99:f0:d5:90:72:
         8e:7e:31:00:47:0f:8d:11:80:d5:74:9f:f0:62:ec:26:ef:3a:
         82:99:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:43:45 2024 by rpki-client on console-fra.rpki-client.org