Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa
File:                     255c5618-6afd-3842-8da1-db637de34c26.roa (raw, json)
Hash identifier:          Kfo1saaoheLfFZICG52F6IgwjISlMfWFuNoCr/0s7MU=
Subject key identifier:   EF:5B:26:35:7D:2C:5F:AF:C4:D9:56:C5:C1:B4:BC:46:6E:8B:E3:24
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285845B3B9982CD17E3589329A5E00
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa
Signing time:             Mon 29 Apr 2024 02:49:43 +0000
ROA not before:           Mon 29 Apr 2024 02:49:43 +0000
ROA not after:            Sun 28 Jul 2024 02:49:43 +0000
asID:                     27317
IP address blocks:        2607:9f40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:b9:98:2c:d1:7e:35:89:32:9a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Apr 29 02:49:43 2024 GMT
            Not After : Jul 28 02:49:43 2024 GMT
        Subject: CN=b6a039d4-0066-4ea8-9382-27e1ae6e2407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:62:66:ae:44:b4:7d:d5:10:1b:1a:bc:7b:
                    35:dc:53:35:f0:75:10:3c:1d:6c:e8:93:25:8a:55:
                    05:6d:29:c3:c1:ce:5d:93:1d:71:e0:43:b0:82:36:
                    eb:15:62:28:bc:15:58:da:76:c0:38:44:86:3f:95:
                    01:d5:86:b7:5f:6c:ed:3c:6d:93:60:42:da:b0:72:
                    1c:02:78:0f:b0:50:a7:24:d1:12:a9:0e:66:ce:53:
                    0b:0b:56:07:07:a0:7e:b1:75:b5:35:e2:0a:10:d8:
                    ff:68:6a:4f:38:72:52:ff:fd:1b:12:9c:5c:5a:73:
                    81:38:fa:36:27:0a:bb:b3:33:d5:26:81:b3:81:7b:
                    60:21:56:7c:bd:5d:e1:0c:67:6a:d6:9a:99:54:23:
                    f0:a9:c8:1c:b0:19:b8:84:c4:c8:74:fa:ef:be:52:
                    56:ae:b2:e8:c2:4b:40:96:5e:a8:7a:fd:2f:b6:ae:
                    29:92:7f:f1:53:24:30:95:72:4b:91:91:92:21:ac:
                    05:7c:b3:c5:01:4d:4b:fb:d2:78:ae:0e:24:3b:5f:
                    30:00:dd:3e:b9:08:f8:46:27:83:95:cb:d4:32:4a:
                    ee:e8:e8:83:7e:1e:db:1e:b6:31:98:cb:cf:e6:34:
                    64:07:35:92:fc:a7:80:c4:ee:0d:6c:99:b0:f9:72:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:26:35:7D:2C:5F:AF:C4:D9:56:C5:C1:B4:BC:46:6E:8B:E3:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e4:c0:61:4a:58:58:ae:35:9b:58:f9:cc:e0:3a:b5:d5:6e:
         51:42:93:e9:e6:f6:16:66:45:78:0f:f7:2a:f4:6f:ac:f9:53:
         a4:40:a1:91:fd:95:cf:72:33:55:0c:80:dd:e0:75:7f:0c:32:
         fa:72:48:25:66:3a:0c:c3:ce:7d:e6:7b:a9:6e:df:67:e6:45:
         af:92:f4:13:98:16:69:0b:06:e1:5a:93:53:57:b4:8b:9a:9a:
         77:b3:46:d4:c0:ed:46:ad:bc:7a:ea:ed:17:e4:ef:1c:4d:5c:
         3a:e9:41:59:4b:5c:95:bc:a1:d9:56:d6:ff:e8:ae:7d:b2:e1:
         82:45:5b:f0:a4:34:97:41:87:d3:e9:b6:38:7d:7f:07:79:b0:
         87:06:b6:f3:a1:86:cc:9d:37:e4:f0:61:62:d0:ad:a9:4e:1e:
         45:c1:a8:35:76:a0:95:bf:f2:0f:2e:96:2c:07:f1:e7:38:73:
         5e:3a:06:80:7d:72:2d:be:9f:41:d6:d7:88:e5:ed:b1:66:14:
         1a:7c:96:ef:88:2d:56:5c:62:8f:ea:08:6d:06:fe:b1:db:a5:
         3f:f9:d6:c6:36:22:69:26:e0:a0:9e:f4:94:55:e4:a5:e6:b1:
         57:a6:8a:89:ad:23:76:0c:c2:c3:7d:08:a0:96:af:87:10:0a:
         d3:7f:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 19:52:41 2024 by rpki-client on console-fra.rpki-client.org