Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8289aa7-8956-3518-b590-1cb80e37b28d.roa
File:                     c8289aa7-8956-3518-b590-1cb80e37b28d.roa (raw, json)
Hash identifier:          MdAiJPn0uSYl72lInJd3b6jLIpL//YrvZYZ6OVXlFxo=
Subject key identifier:   AA:1A:12:5D:22:0C:4F:38:61:9B:D5:68:A9:8A:C3:A0:48:7D:38:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845A428CD7E70AF142D4E533D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8289aa7-8956-3518-b590-1cb80e37b28d.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     36733
IP address blocks:        2601:a40:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:cd:7e:70:af:14:2d:4e:53:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=ad9827be-9c38-4416-84cd-902455c7d076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:90:fc:50:ca:4e:e4:41:f5:22:f1:d1:b0:
                    68:43:33:3d:01:7f:a9:74:f9:27:17:20:cf:fb:06:
                    af:f4:68:e8:d9:69:0b:5f:21:38:d1:8c:a7:ed:f7:
                    7c:6b:97:31:20:98:f3:f5:2f:69:a3:94:dd:05:71:
                    d7:97:72:45:b1:56:2e:f4:79:9c:08:ce:09:fa:6c:
                    d8:8c:b8:fe:e3:ff:70:e3:6e:57:a9:f7:c5:4f:d4:
                    f3:c6:f0:61:60:0b:92:c5:a6:67:a7:f0:b7:38:fc:
                    ef:a8:59:13:a4:dd:60:9a:b8:25:6e:bc:a2:6a:34:
                    df:71:ba:e4:08:94:e4:2a:83:c9:d7:97:c0:ef:cf:
                    49:84:fc:b5:d1:98:c5:cf:01:7f:e2:30:1c:85:79:
                    25:fa:1a:77:03:10:22:2b:22:26:6b:42:99:b6:3a:
                    68:35:d1:21:fd:14:39:74:89:28:60:22:88:fe:29:
                    27:6e:f7:3d:8a:3f:80:30:91:c0:78:f2:ca:5c:47:
                    7e:5c:24:5b:45:ca:8e:16:5f:67:2b:89:65:51:15:
                    d6:97:12:84:8a:06:e0:50:80:10:37:d4:ef:2a:da:
                    d3:4a:18:3b:3d:d3:e1:dd:e6:42:c9:c7:4d:fc:bb:
                    13:e0:64:e4:3b:25:f1:7c:d9:c0:ce:33:d2:4d:2d:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1A:12:5D:22:0C:4F:38:61:9B:D5:68:A9:8A:C3:A0:48:7D:38:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8289aa7-8956-3518-b590-1cb80e37b28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a40:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:30:89:5d:83:8a:bc:ac:cf:9b:42:00:d9:2d:c2:93:4b:
         40:75:91:eb:56:a2:fd:54:bd:7e:a1:19:de:10:e9:31:65:cb:
         65:67:e5:67:0e:df:80:62:5e:ac:c8:97:dc:02:36:2e:65:e8:
         c0:96:4d:08:fe:24:2a:b9:24:92:3c:84:c6:e8:86:18:8a:d7:
         28:fe:fe:7f:7b:f4:b7:95:19:e0:cf:02:17:18:31:0b:6a:46:
         0c:a8:12:73:19:08:64:6a:b6:ed:39:0b:8b:40:59:18:60:b5:
         60:19:54:46:f5:b9:b5:1d:c5:dc:25:9f:1e:bc:68:46:2e:d1:
         17:b2:fb:b1:e9:52:09:67:40:e7:fc:2c:77:75:6e:36:e1:eb:
         0f:8b:38:06:aa:2e:c4:09:a9:ff:84:66:46:96:6d:60:9d:ad:
         64:a4:8a:4c:c4:9e:47:72:ba:70:61:a6:f8:2e:5b:45:75:ab:
         92:a1:4d:a7:16:9e:65:eb:99:1d:29:9f:60:43:0c:63:82:ef:
         ee:2d:80:27:b9:93:7a:68:a3:e1:ab:da:5f:9a:49:f4:70:d2:
         aa:56:f9:8f:ad:77:3e:cb:32:45:6a:cd:86:cb:ed:2a:3c:5e:
         8b:9d:f9:64:67:32:7b:88:d8:89:dd:05:d4:bb:38:46:e8:90:
         6f:b2:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:46:27 2024 by rpki-client on console-fra.rpki-client.org