Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa
File:                     714b2ae0-acf5-387d-ae44-8dc694303606.roa (raw, json)
Hash identifier:          EWiFbKK5sawzOfDMRAn2IAV/p8gOWtwX5IUiB4oWG3M=
Subject key identifier:   F6:35:6F:B7:80:98:FF:08:54:5A:65:00:EB:88:23:95:7B:F3:4A:00
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858452AB7DC6C06762319D7AA64C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        2607:740:3d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:dc:6c:06:76:23:19:d7:aa:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=c3f3254f-0126-4afd-b4c4-94cfb73f70b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:16:38:26:ff:db:93:9e:33:ac:0d:b7:09:
                    b4:30:4d:29:53:42:6d:a3:e6:43:5e:34:c0:9c:2a:
                    fa:6b:1d:e9:06:5f:42:3b:d3:9d:11:94:c0:b5:7e:
                    82:98:81:c9:10:81:72:b1:47:7c:20:c0:71:d6:4c:
                    53:15:34:d1:3d:bd:e3:ec:fd:ef:79:6f:a1:28:7a:
                    d6:c7:1f:a6:61:cd:60:cf:71:f0:ac:cf:dd:19:0e:
                    5f:25:32:b7:c7:e3:89:70:7f:33:9e:7b:7e:58:36:
                    06:80:56:47:fe:ad:69:6f:89:6e:e1:f6:ef:82:12:
                    56:4d:45:6d:2f:ce:26:17:db:d1:8c:32:df:9e:c9:
                    52:d2:30:8e:7c:9d:8c:1a:b1:3c:81:6a:b7:05:e8:
                    c5:e5:a0:5a:ae:96:1b:f6:01:df:9d:d5:74:33:60:
                    df:13:76:cc:36:f9:db:0a:ee:80:f5:10:fb:f3:d1:
                    67:ce:d5:62:76:c9:fd:1b:bb:eb:a8:0d:ba:61:4b:
                    c0:f0:c1:b3:1e:b9:41:d9:1f:fe:c7:07:f7:11:86:
                    a7:ab:39:24:2c:96:67:50:91:e8:0e:78:3c:b7:89:
                    36:58:fb:b9:3c:3d:60:e9:65:63:86:de:7b:52:bd:
                    4a:14:1a:04:41:03:32:0d:b8:39:4e:49:dd:90:22:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:6F:B7:80:98:FF:08:54:5A:65:00:EB:88:23:95:7B:F3:4A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:99:d2:8c:96:2c:36:7e:87:e0:63:1e:3d:08:fd:f0:76:
         b2:e8:e8:d7:cd:9e:8c:cb:7d:13:29:3f:0d:bf:d5:89:e1:45:
         ad:3d:cc:56:fa:b0:e5:fd:09:77:7b:90:cf:f1:38:ae:38:b3:
         d9:01:be:39:85:b0:c0:c1:0a:32:bd:10:8e:d3:6c:98:80:8d:
         d6:60:7b:a0:d9:b8:a7:fa:b4:bb:22:fd:48:30:12:9d:dd:46:
         ec:3d:1e:b5:e7:06:3b:9f:82:ae:88:2b:ad:c6:c8:1b:0b:7d:
         a6:9b:40:88:38:fe:31:89:63:40:34:a0:fb:d1:e8:cc:d6:97:
         9b:70:c8:99:01:11:3d:96:38:f2:b6:6c:79:f6:0a:6f:b6:3e:
         db:3c:e6:ec:7e:7b:b4:4f:5d:3b:93:9a:3c:6b:5c:f1:c6:40:
         5c:33:5e:0e:a6:71:a1:f8:6c:fc:11:e9:ee:69:f7:4f:3a:58:
         47:87:29:3a:47:41:6d:e3:85:e0:ab:c2:2d:c9:2e:f6:6c:2c:
         31:c4:15:58:c6:63:94:37:28:d9:7c:f9:03:31:ed:6a:1c:38:
         bd:55:87:ff:d8:8f:9a:c8:1a:71:ed:b0:c6:dc:ed:ce:30:27:
         8b:2f:fc:0a:8a:66:5a:b5:e0:c1:76:e0:3e:3b:81:c7:84:e5:
         91:67:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:50:38 2024 by rpki-client on console-fra.rpki-client.org