Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa
File:                     2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa (raw, json)
Hash identifier:          R2ShWSq3tKpzKpXYyteYWd1KYYuQlnVgFFeGWLUdYNw=
Subject key identifier:   F5:30:3F:72:17:E5:84:96:53:53:39:26:2D:11:73:A4:B0:64:FF:DA
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F432858467B1F72BDA4AC2DA97EEA9980
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa
Signing time:             Tue 09 Jul 2024 13:00:33 +0000
ROA not before:           Tue 09 Jul 2024 13:00:33 +0000
ROA not after:            Mon 07 Oct 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        2607:9f40:35::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:1f:72:bd:a4:ac:2d:a9:7e:ea:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Jul  9 13:00:33 2024 GMT
            Not After : Oct  7 13:00:33 2024 GMT
        Subject: CN=f08a5c2b-8126-436d-88f1-380ddd05772e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:7c:25:dd:4a:b3:15:a5:ee:f7:ea:52:ee:
                    0e:46:b5:26:ea:cf:3e:07:7f:10:df:6b:26:ef:f5:
                    15:02:cb:ba:48:ea:94:c6:8a:27:3c:56:10:c2:4b:
                    e0:63:de:95:25:8a:a6:9f:97:07:db:76:d8:32:a3:
                    ef:82:5d:05:c9:1a:4c:d0:f6:15:9e:90:4b:2e:32:
                    c6:94:4c:79:f8:0d:e5:a3:dd:58:c4:3a:21:76:90:
                    a9:b5:ec:e6:60:b2:d4:86:cb:cb:5b:a4:45:7f:ba:
                    64:02:1e:8f:17:b3:84:38:3a:14:e5:59:1c:52:84:
                    f9:29:05:f6:1f:5d:32:61:69:c3:20:60:13:26:df:
                    77:11:c3:2c:0b:52:57:a8:9e:e7:7d:2e:b6:66:3b:
                    32:44:a2:0f:e2:68:2d:47:18:ac:29:b8:31:ed:bb:
                    e5:a4:a6:e5:20:cc:42:66:5a:1d:6f:35:54:17:6e:
                    1c:67:ea:c9:97:07:99:c5:64:84:b0:27:3d:c8:28:
                    e8:fa:f8:72:69:29:99:7a:0e:15:ec:3e:df:fc:48:
                    d0:60:bd:b0:2f:7f:0b:eb:90:13:00:c1:f2:9d:e3:
                    90:06:24:e7:e8:e8:62:7c:f4:67:ad:d5:79:a3:ac:
                    82:bf:24:91:35:d5:2b:dd:24:dc:f0:77:6e:0d:3d:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:3F:72:17:E5:84:96:53:53:39:26:2D:11:73:A4:B0:64:FF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/2b9b90f2-ecbe-3cd9-8c7a-c655ef841328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:50:a9:d7:62:40:9e:09:de:73:a8:b9:d6:80:53:25:c6:6b:
         94:fd:1d:fb:f3:a9:9d:a1:43:b7:26:9c:4b:ae:1b:1b:04:3c:
         2f:49:2d:cc:07:a9:bb:5a:38:cd:b8:fe:26:dd:c5:07:b8:24:
         3d:d4:da:cf:ea:08:a0:96:22:25:d5:8c:43:a2:0f:b1:7b:77:
         14:dd:09:95:bf:33:7b:36:41:7f:02:7d:db:83:f4:ac:6f:5a:
         63:05:c8:f6:30:e9:eb:52:d3:5f:a0:cd:64:47:12:3b:00:4d:
         2f:47:33:48:1f:48:90:79:53:bf:37:ea:c4:b8:86:b0:4b:7d:
         e7:d6:5b:a5:f2:ce:b1:47:dc:95:97:22:88:54:52:4e:1b:5a:
         2e:c4:f1:e4:94:91:2f:d6:74:3b:32:00:92:80:6b:f8:d3:15:
         a1:a9:97:c6:02:1a:6c:a3:d8:88:a6:e4:c1:2d:91:92:ea:4d:
         f4:33:59:92:ad:1c:3c:b5:e7:ae:eb:78:ae:03:8e:3b:b8:0f:
         a2:6a:13:52:a3:fd:ee:da:7c:a2:d8:44:72:f2:79:60:e3:12:
         a5:b2:7a:c0:be:29:c6:13:ef:ed:2c:41:28:fa:04:d6:cc:0f:
         50:e8:d8:e0:41:9b:d3:49:fc:87:b2:b2:6c:37:85:54:26:88:
         5d:3a:c5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:52:55 2024 by rpki-client on console-ams.rpki-client.org