Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa
File:                     ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa (raw, json)
Hash identifier:          XanoFOuf0pKP5tb/KCMzqBWDJ/7ZA3hCjUDY2nCo7CA=
Subject key identifier:   F7:07:05:B2:2E:05:C0:E7:07:DC:C4:12:07:BE:70:84:59:D9:BA:55
Certificate issuer:       /CN=e7f210e3-2923-4916-a0dd-8d3cc9158403
Certificate serial:       010D0C9F432858451D4682F1D45A46E01AE95840
Authority key identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa
Signing time:             Wed 06 Mar 2024 05:26:35 +0000
ROA not before:           Wed 06 Mar 2024 05:26:35 +0000
ROA not after:            Tue 04 Jun 2024 04:26:35 +0000
asID:                     394837
IP address blocks:        2607:9d40:3000::/37 maxlen: 37
                          2607:9d40:1000::/37 maxlen: 37
                          2607:9d40::/32 maxlen: 32
                          2607:9d40::/37 maxlen: 37
                          2607:9d40:800::/37 maxlen: 37
                          2607:9d40:1800::/37 maxlen: 37
                          2607:9d40:2000::/37 maxlen: 37
                          2607:9d40:2800::/37 maxlen: 37
                          2607:9d40:3800::/37 maxlen: 37
                          2607:9d40:4000::/37 maxlen: 37
                          2607:9d40:4800::/37 maxlen: 37
                          2607:9d40:5000::/37 maxlen: 37
                          2607:9d40:5800::/37 maxlen: 37
                          2607:9d40:6000::/37 maxlen: 37
                          2607:9d40:6800::/37 maxlen: 37
                          2607:9d40:7000::/37 maxlen: 37
                          2607:9d40:7800::/37 maxlen: 37
                          2607:9d40:8000::/37 maxlen: 37
                          2607:9d40:8800::/37 maxlen: 37
                          2607:9d40:9000::/37 maxlen: 37
                          2607:9d40:9800::/37 maxlen: 37
                          2607:9d40:a000::/37 maxlen: 37
                          2607:9d40:a800::/37 maxlen: 37
                          2607:9d40:b000::/37 maxlen: 37
                          2607:9d40:b800::/37 maxlen: 37
                          2607:9d40:c000::/37 maxlen: 37
                          2607:9d40:c800::/37 maxlen: 37
                          2607:9d40:d000::/37 maxlen: 37
                          2607:9d40:d800::/37 maxlen: 37
                          2607:9d40:e000::/37 maxlen: 37
                          2607:9d40:e800::/37 maxlen: 37
                          2607:9d40:f000::/37 maxlen: 37
                          2607:9d40:f800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1d:46:82:f1:d4:5a:46:e0:1a:e9:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f210e3-2923-4916-a0dd-8d3cc9158403
        Validity
            Not Before: Mar  6 05:26:35 2024 GMT
            Not After : Jun  4 04:26:35 2024 GMT
        Subject: CN=ce581d84-0c1f-44a0-834f-f02c4175860a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:6f:2b:0a:7e:43:8c:eb:01:df:7c:e9:79:
                    fa:fc:c8:bf:44:ec:93:b5:cf:9b:09:8f:76:5e:a2:
                    04:75:15:55:d8:cd:4e:77:74:f4:e7:aa:ed:cb:95:
                    cc:25:1e:ac:45:17:0e:52:7f:1e:c0:d1:65:a2:92:
                    e4:c0:37:a7:97:c4:b3:03:ed:a5:1b:ab:66:92:ba:
                    81:15:56:e1:05:0d:97:10:ca:7d:14:a6:df:ae:7e:
                    d5:e8:9e:f4:93:7e:c3:62:4f:1c:d0:46:49:cc:fc:
                    13:45:89:1c:8f:71:dc:d5:ba:b5:12:ee:46:8e:36:
                    70:59:6e:cb:87:29:be:e9:00:fd:9a:c5:06:22:61:
                    21:5e:34:86:04:36:97:89:ae:4d:b9:81:c8:64:b0:
                    e2:46:36:fe:dd:4e:38:65:5c:c5:b5:0d:56:2f:93:
                    30:fe:c1:4a:ab:56:dc:60:ed:76:83:f5:e1:7c:48:
                    c1:07:b6:39:f9:f0:37:55:8f:0e:c8:c5:e2:ee:b4:
                    a4:56:3e:b9:3a:50:d0:f1:aa:de:d1:98:8f:d4:ed:
                    9b:f7:55:7e:51:f4:87:09:08:91:fb:40:65:78:ba:
                    a0:21:27:b0:df:eb:e9:16:19:4c:92:04:0f:87:2d:
                    96:51:43:02:da:76:29:ba:0a:f9:dc:88:49:48:e0:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:05:B2:2E:05:C0:E7:07:DC:C4:12:07:BE:70:84:59:D9:BA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.crl

            X509v3 Authority Key Identifier:
                keyid:BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:db:be:0e:3b:59:e1:98:76:da:16:26:f0:51:4c:a5:30:
         94:17:e1:72:16:32:6e:bb:f7:31:b1:02:48:75:17:bf:5f:55:
         eb:0c:fc:1b:77:35:a8:51:f4:91:d4:42:d0:0e:73:5e:46:cf:
         4f:0b:00:32:5c:a5:d9:ca:6e:ca:c7:94:91:73:95:8c:3e:2c:
         e5:56:ae:38:91:2b:16:ad:08:82:e8:89:1a:a5:2e:f1:ca:a3:
         af:c2:40:4a:b1:8a:9f:ca:f7:45:22:b5:4a:61:bb:1a:25:de:
         9a:9c:70:f2:39:8c:ad:4a:48:3f:86:0f:4a:12:3e:91:00:ac:
         c6:b0:44:3a:98:3d:a4:78:bb:2c:50:8e:8b:e1:df:be:8f:a3:
         0c:0a:b0:67:31:d4:a9:d4:74:5c:87:b5:9f:3f:29:fb:8d:f4:
         d9:72:ba:06:8c:2d:59:40:c9:69:3b:d9:26:47:44:f0:4d:e3:
         47:5c:e8:19:92:97:ea:5c:b0:f6:bf:2e:70:9c:3f:b8:ba:59:
         c4:24:92:dd:21:57:c2:18:e8:43:01:23:6a:c7:6c:b8:6f:99:
         f9:25:00:c1:d0:b0:b2:65:0c:71:d1:7f:7b:22:78:60:dc:2b:
         da:ec:d0:10:4e:45:65:06:1f:af:37:fc:7a:20:9d:14:03:0f:
         15:7d:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:45 2024 by rpki-client on console-fra.rpki-client.org