Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
File:                     2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa (raw, json)
Hash identifier:          lKTfFM00ukv2NYKvaqux1I+AXO0ca3bXtA3ayX9Y7Xo=
Subject key identifier:   5B:01:65:9D:D4:D4:4F:8D:7D:66:ED:5D:CA:F0:70:61:D2:86:D1:B6
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F432858457A487CBDB8F4D2076517FDD0
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14773
IP address blocks:        2620:1d5:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7c:bd:b8:f4:d2:07:65:17:fd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=ffc2147d-8b62-4416-b1b2-2e01b163ad99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:6c:c0:92:16:41:7d:ce:f7:02:af:cb:1b:
                    17:6f:2b:e3:de:d9:5f:51:cc:22:1d:cd:42:01:10:
                    3b:23:e8:ce:95:4e:80:4b:d6:23:89:da:26:c4:15:
                    8b:1e:eb:0c:b0:c2:d6:44:37:34:f6:0c:c4:56:c2:
                    a0:df:16:74:a0:bb:2c:b3:a9:0c:2b:f0:b2:9a:89:
                    8f:3f:fb:d5:e6:80:82:21:6a:24:29:5d:f3:fd:67:
                    92:3a:59:44:4d:3e:eb:a8:7b:de:0f:3e:c0:48:10:
                    e7:88:08:2c:be:c3:8b:e4:75:2f:cf:bf:c8:2c:e2:
                    9a:08:01:d4:33:0f:56:11:94:12:b4:9d:38:54:04:
                    0e:ba:34:86:b6:a2:59:44:e2:bd:57:ce:94:78:ff:
                    11:cf:72:cb:f5:54:d0:b8:a0:8a:7d:f6:e4:04:f1:
                    50:08:95:99:ea:b7:c7:7e:9e:eb:1f:0c:39:2a:f5:
                    29:16:52:c8:29:a8:e2:66:65:b4:65:f2:6d:66:04:
                    57:1b:8a:eb:5e:cb:1c:a8:6f:06:91:09:b9:d8:3b:
                    11:99:8d:bb:b9:87:35:e2:22:88:7d:98:b8:ec:b2:
                    01:8a:b5:8f:f5:ac:ed:36:29:69:d4:38:ae:73:f8:
                    28:d1:63:8f:ac:5c:36:d7:19:c4:97:fe:31:0d:fe:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:65:9D:D4:D4:4F:8D:7D:66:ED:5D:CA:F0:70:61:D2:86:D1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:97:78:71:d0:96:0e:f1:c8:dc:d7:a4:1e:4b:ca:36:3e:
         85:af:f8:e9:58:50:ae:37:7a:3b:5f:b7:1b:57:8b:71:bf:ea:
         44:27:fa:18:d6:5d:bb:8c:d4:9d:98:af:2e:95:e8:8a:d6:13:
         e2:31:22:da:76:a8:aa:af:48:81:7d:71:ff:28:23:60:c1:64:
         89:78:bd:dd:44:b7:21:69:cf:b8:c6:d1:c4:40:53:91:67:c3:
         d8:5b:e3:04:b7:d8:cb:e1:c1:de:c5:27:e1:26:14:94:94:d0:
         e0:a5:9f:91:da:c3:d6:25:51:64:55:4b:d8:8d:cb:d3:e3:82:
         7b:f8:21:ab:de:73:ce:f2:53:68:13:a6:8a:1d:69:19:a1:ac:
         a3:96:aa:8e:2c:93:4b:86:de:e0:dd:03:94:ec:bf:e8:ec:7f:
         f0:c2:76:46:e8:14:24:63:1f:c3:89:5f:4e:bb:2f:7f:03:b4:
         61:7f:4c:66:40:ba:88:83:34:95:28:60:66:ad:7e:21:26:48:
         01:73:93:23:01:7e:0a:bf:8e:cb:f5:97:a5:10:e9:32:d4:59:
         b8:b5:11:12:fa:58:b0:9b:7e:17:e2:2e:52:67:8a:bf:e1:74:
         62:9a:b3:0a:34:dd:24:24:61:5a:6a:bd:57:ae:65:c5:1e:81:
         d2:40:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:24:07 2024 by rpki-client on console-ams.rpki-client.org