Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/26edce78-5ca2-33ec-9ba6-6635ba116a58.roa
File:                     26edce78-5ca2-33ec-9ba6-6635ba116a58.roa (raw, json)
Hash identifier:          3iU6TYRgyY3f1XWXJgtaMyz2PGBPo76CwQBQEeGFjek=
Subject key identifier:   99:1B:B9:97:AF:0B:55:F7:E7:4A:FC:8A:48:06:7C:6D:10:6C:8D:E1
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858459368C8F00D53D5E1C3EC7650
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/26edce78-5ca2-33ec-9ba6-6635ba116a58.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        2607:740:5b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c8:f0:0d:53:d5:e1:c3:ec:76:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=786a2ea6-b49f-458f-9dda-d78ccb56471c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:a7:b7:73:cd:90:f3:e9:5d:f6:92:56:c3:
                    09:33:cd:86:f9:ce:75:bf:48:6d:f1:e5:1d:05:0d:
                    8d:56:5d:20:1b:e4:3c:6a:00:13:1c:ca:e0:4f:49:
                    40:03:ee:03:59:b5:89:23:09:4c:80:95:23:42:39:
                    6d:6c:48:b2:ee:bc:c3:41:4b:3a:e9:03:19:33:74:
                    ac:e3:f5:c5:67:6a:81:c4:ec:47:04:82:ff:51:26:
                    a3:76:2d:f0:c4:64:1b:5c:d9:54:c6:83:c7:4c:28:
                    f6:c1:c9:ed:e6:60:fd:73:0f:7a:c4:3d:f4:9b:50:
                    96:8e:86:48:50:61:58:cf:43:70:e5:b5:b7:22:eb:
                    42:95:6b:5f:72:2e:ae:a0:b1:25:c7:cd:43:fd:bb:
                    f8:b5:12:04:35:fa:d6:b1:67:7b:d8:ad:ab:e9:e8:
                    43:0a:99:be:2c:31:fd:ac:52:51:96:46:20:2f:ae:
                    c3:90:d2:e6:2a:ee:83:49:c4:26:e0:bb:11:20:c8:
                    94:0e:73:1f:3c:bf:50:63:b8:dd:b3:38:21:dd:ea:
                    f6:03:16:34:bc:ec:ce:dc:09:7d:16:6c:12:c6:f5:
                    ff:76:86:de:2b:ae:d3:ab:83:11:3d:16:9a:b0:0b:
                    53:29:29:cc:45:b4:40:eb:3d:ad:1c:c5:90:60:e2:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1B:B9:97:AF:0B:55:F7:E7:4A:FC:8A:48:06:7C:6D:10:6C:8D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/26edce78-5ca2-33ec-9ba6-6635ba116a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:5b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9d:09:e9:fd:4d:f3:ff:99:93:74:56:dd:89:71:4e:3a:c4:
         0b:b9:86:08:80:ab:03:2e:73:1f:5d:eb:84:35:34:26:30:41:
         31:74:7b:f9:fb:3e:6a:d3:34:30:89:d9:b0:a1:58:2c:b6:4a:
         65:0a:47:2b:6e:e7:01:92:cb:b1:cb:ee:77:78:d4:1f:79:09:
         c3:4d:43:11:9b:fc:27:e3:b0:a2:f4:ca:05:db:4d:b6:5e:82:
         bd:ee:55:ab:e6:bf:c5:8e:b0:cf:7e:96:da:4b:b6:34:8c:41:
         e6:ca:a0:38:34:27:b1:3b:3b:0e:98:5b:3f:8f:87:a8:7e:04:
         40:c1:10:52:0b:59:82:02:df:49:e6:45:de:22:94:11:12:cb:
         58:02:1a:00:20:6a:7d:3d:4b:f3:bc:7f:5a:ef:c0:9c:af:a2:
         82:5c:cc:f6:a9:32:b9:c5:4e:42:ee:c2:6b:be:cf:88:4c:cd:
         33:c7:44:fa:1d:e9:d9:7e:b4:a8:7c:60:4a:e3:91:9e:8f:9e:
         06:76:da:00:84:9e:51:4c:6f:9e:59:83:f5:52:ef:8e:9d:e8:
         ad:b7:43:5a:0b:11:8d:20:65:22:dd:eb:b6:2d:69:fd:5c:5b:
         37:ee:c0:f0:87:39:fb:b3:62:7f:a1:e6:42:e1:43:3d:d1:24:
         46:2f:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:28:28 2024 by rpki-client on console-fra.rpki-client.org