Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/193919ca-2ce4-39d9-a122-7206cce219df.roa
File:                     193919ca-2ce4-39d9-a122-7206cce219df.roa (raw, json)
Hash identifier:          PciCsBh7gd5hZysmR7Vdlp7carb/Z9UP78shWRI4lco=
Subject key identifier:   74:AE:AF:CA:EF:11:3A:81:4E:6A:A2:33:5D:0A:2E:8F:7D:DE:25:35
Certificate issuer:       /CN=ebba3357-d18c-4593-b6d3-ba177a37e8d8
Certificate serial:       010D0C9F432858458EED13809D6280CA1CF3C300
Authority key identifier: 87:0C:7F:E1:A3:2E:F0:64:BF:84:3A:66:18:82:4E:BA:69:9A:33:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/193919ca-2ce4-39d9-a122-7206cce219df.roa
Signing time:             Mon 15 Apr 2024 22:28:32 +0000
ROA not before:           Mon 15 Apr 2024 22:28:32 +0000
ROA not after:            Sun 14 Jul 2024 22:28:32 +0000
asID:                     395719
IP address blocks:        2604:2940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8e:ed:13:80:9d:62:80:ca:1c:f3:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebba3357-d18c-4593-b6d3-ba177a37e8d8
        Validity
            Not Before: Apr 15 22:28:32 2024 GMT
            Not After : Jul 14 22:28:32 2024 GMT
        Subject: CN=11affd3c-56a4-491a-b1c8-f7967e45a86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:58:fd:03:65:44:3e:43:25:d9:54:c4:f8:
                    86:bd:9c:5a:ad:8a:ae:e3:00:b3:d5:6a:d0:77:c5:
                    91:cf:fe:a7:23:06:44:94:2d:f9:e9:5d:ae:ed:ec:
                    d7:88:35:b6:e6:79:d8:9e:14:e3:93:f2:a7:46:dc:
                    1f:b1:01:6d:e4:e6:4c:f6:3e:81:48:ef:da:80:a5:
                    06:61:3b:aa:30:01:94:4b:ac:26:51:f2:c6:7f:4e:
                    28:ef:d3:5f:c5:44:76:8e:e3:a7:34:9a:cb:03:5b:
                    dc:0b:b6:43:17:f0:24:dc:f1:b1:22:af:37:6c:27:
                    d5:ab:4d:9f:59:8e:08:5d:7c:f9:83:7d:7f:27:14:
                    3f:d1:93:ef:6a:68:fe:b6:85:23:bc:d9:9f:13:40:
                    8d:1c:b4:22:15:82:0d:c4:9e:90:a1:9d:0c:44:5a:
                    72:c4:94:70:5a:cd:52:5b:94:ad:fd:87:c2:8e:5a:
                    cf:0d:de:39:3e:4c:2f:19:86:82:76:e5:7b:d2:5b:
                    5f:77:00:c6:fa:3e:4a:9c:10:fb:81:3d:bc:8f:94:
                    5a:af:99:6d:7c:2d:38:75:7c:5b:40:74:4e:8d:38:
                    fe:f8:08:78:40:ef:1e:e3:aa:e6:42:c6:50:83:8e:
                    fb:fd:b4:1d:f5:15:ab:81:35:e0:7d:5f:d4:ca:75:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AE:AF:CA:EF:11:3A:81:4E:6A:A2:33:5D:0A:2E:8F:7D:DE:25:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/193919ca-2ce4-39d9-a122-7206cce219df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.crl

            X509v3 Authority Key Identifier:
                keyid:87:0C:7F:E1:A3:2E:F0:64:BF:84:3A:66:18:82:4E:BA:69:9A:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a0:66:fe:05:07:db:63:36:39:00:b8:76:63:81:9e:3d:6e:
         8b:99:2e:4e:1b:df:df:d0:ff:5c:c8:da:cb:3d:3b:fa:f4:e3:
         0e:79:4e:83:56:4a:69:bb:19:0c:98:5b:b1:02:e1:1e:bc:f5:
         5d:fb:fa:71:7b:03:40:55:2a:d1:a3:6c:0b:76:4f:4e:88:70:
         36:2c:7e:c1:87:a5:30:c0:49:be:c9:ad:ae:36:da:9a:80:dc:
         4b:40:7a:a7:af:44:35:22:8d:55:3f:c2:36:78:30:a0:62:a7:
         20:29:28:08:2f:ec:db:26:86:3c:8d:38:c6:10:b9:6f:2d:e8:
         f5:85:a6:e3:26:fe:d3:d8:01:f8:e6:7d:eb:1c:f5:24:cd:14:
         56:54:e0:d4:a5:a5:9a:4c:b0:13:d8:62:3c:bf:4c:df:00:ed:
         c1:32:ca:55:86:84:37:0e:c6:95:ac:9c:63:d0:c3:b6:b5:91:
         0c:53:a9:8a:36:06:0e:47:58:e7:89:42:0c:5f:45:a1:6c:0a:
         6c:1b:d4:0b:74:1a:38:52:95:e4:c7:b3:a0:fe:da:34:1c:f6:
         0c:d1:5f:60:53:4a:c8:53:0c:ac:f1:b5:50:b4:85:26:e4:91:
         46:49:85:eb:7b:04:52:b5:b3:10:13:31:d1:7d:18:72:45:18:
         27:ad:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 22:40:23 2024 by rpki-client on console-fra.rpki-client.org