Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/1149c614-462e-39d8-9aaf-385d0b89ee19.roa
File:                     1149c614-462e-39d8-9aaf-385d0b89ee19.roa (raw, json)
Hash identifier:          IzX0dtfGlD3vJTTUF+sFHECIsBAh+ci3TRpCYIy3VRc=
Subject key identifier:   09:8B:C3:84:43:82:46:7E:88:81:F3:E3:AD:17:CC:96:F3:25:79:EA
Certificate issuer:       /CN=9b1ca75e-4539-4223-b200-925398eb3409
Certificate serial:       010D0C9F4328584591D9C63820EB2B1875335C00
Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/1149c614-462e-39d8-9aaf-385d0b89ee19.roa
Signing time:             Tue 16 Apr 2024 23:37:04 +0000
ROA not before:           Tue 16 Apr 2024 23:37:04 +0000
ROA not after:            Mon 15 Jul 2024 23:37:04 +0000
asID:                     14618
IP address blocks:        2607:a940:b000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:d9:c6:38:20:eb:2b:18:75:33:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409
        Validity
            Not Before: Apr 16 23:37:04 2024 GMT
            Not After : Jul 15 23:37:04 2024 GMT
        Subject: CN=c128700c-420b-4da2-814a-41bdf4b9f083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:d4:fd:ea:03:b8:f7:34:14:79:c7:80:d6:
                    c5:1a:45:83:0b:0a:29:49:f0:f3:25:3b:a2:20:c2:
                    cd:66:99:1a:e8:73:95:d5:04:a1:f8:51:0d:fe:41:
                    01:2a:78:ab:bc:36:a2:57:65:4b:d7:8b:28:fc:05:
                    bc:af:79:5e:09:cc:2f:48:2b:5b:0b:54:47:ab:f3:
                    b1:71:34:a5:64:7c:93:de:75:42:89:a5:27:a6:55:
                    11:1d:e2:8a:04:ad:46:d7:8b:aa:52:ad:4b:82:3d:
                    22:dd:c5:4d:c8:c0:13:dc:f1:6c:59:bb:e3:e6:91:
                    93:0c:c7:d3:fb:5b:8b:f2:da:93:e7:53:e4:13:e1:
                    29:bc:0f:db:d0:eb:54:33:d4:b5:3e:b1:80:28:44:
                    7a:e1:0f:b1:97:69:99:be:29:43:5e:53:c6:05:9c:
                    47:98:73:10:58:8c:7e:c3:69:c5:e4:92:e9:b0:56:
                    bd:29:8f:c2:2e:20:4c:3d:c7:e8:fb:09:fb:58:1d:
                    28:4e:65:5b:c3:2c:95:f2:61:34:d4:de:93:23:59:
                    aa:6f:c9:b1:1f:62:2c:5a:a3:22:dd:89:fe:25:8e:
                    72:5c:a7:1d:08:53:60:6e:ca:f5:34:c3:4a:15:eb:
                    f2:2b:b7:41:83:8f:e8:9f:b5:4b:8d:24:6c:b5:6f:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8B:C3:84:43:82:46:7E:88:81:F3:E3:AD:17:CC:96:F3:25:79:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/1149c614-462e-39d8-9aaf-385d0b89ee19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl

            X509v3 Authority Key Identifier:
                keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a940:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0d:37:03:60:ba:67:d4:05:5a:9d:e8:e8:0e:d1:d8:2a:a4:
         cf:51:69:2c:83:e7:06:d6:c6:00:37:b4:b1:b0:1e:e1:6e:6e:
         6a:bf:9d:59:52:42:ce:f6:32:c9:70:20:fa:a4:1b:e2:84:80:
         5e:43:72:7c:f2:26:61:6a:0a:30:8f:dd:35:6a:c2:e7:b5:f3:
         4b:3d:42:42:56:46:85:a1:4e:1f:a0:df:ba:da:ee:7e:39:6d:
         26:ac:fd:89:79:b6:45:c8:72:8b:74:1a:d0:74:e2:fb:7d:c4:
         cd:ee:a9:40:67:68:0f:fe:e5:de:bb:a6:eb:96:dc:34:c6:93:
         98:13:41:03:37:b4:39:95:df:75:1d:b5:18:e7:36:18:0b:cf:
         26:60:d0:7b:b2:1b:8d:08:d1:e4:89:56:1d:a1:fe:fc:8f:42:
         b0:ce:2a:c3:b5:8c:58:8c:07:32:8c:ee:ac:2e:ed:d8:76:2c:
         0d:f2:73:d7:db:29:d5:fa:2d:b7:4b:51:e7:22:34:0c:76:31:
         28:06:6c:14:ff:1c:28:88:49:4a:ed:83:26:ea:d9:a2:83:35:
         77:b6:d6:ac:48:53:3e:39:2c:14:2e:bf:fc:1b:fb:cc:da:a5:
         16:98:e4:07:47:d2:3d:5b:76:26:81:03:27:5c:97:c6:24:86:
         0f:5e:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:25:25 2024 by rpki-client on console-fra.rpki-client.org