Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa
File:                     7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa (raw, json)
Hash identifier:          BCw76V6LK3XIZAr1hOQtDm0p/vP+M3ZpPQwDOvvhjvM=
Subject key identifier:   7B:24:78:0D:50:DB:2A:A4:23:E2:81:5B:5F:FD:95:D5:BB:17:EB:3C
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858452952936B83102FBC6BDCFC80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:93:6b:83:10:2f:bc:6b:dc:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=ad30a7c9-b831-45cd-b325-445fe2e1df12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:9d:90:00:98:a0:fb:58:16:33:0e:ef:c1:
                    ec:60:b2:11:c8:7a:59:78:fe:98:01:6c:a9:ea:6d:
                    20:34:90:0a:eb:67:a8:7a:c4:c0:7f:76:32:3a:cf:
                    55:e0:08:1e:ba:a3:c1:71:a1:68:88:a5:7d:67:eb:
                    65:72:3d:a1:14:2c:f4:ac:f7:7b:ce:10:6d:0b:00:
                    f8:ff:94:d0:cc:7d:f5:a2:b1:7d:c7:dd:df:c8:6b:
                    fa:9e:16:8f:2a:dd:4b:70:39:d2:54:4b:5e:75:8f:
                    96:1f:d1:02:4e:6e:a1:8f:58:2b:90:28:b8:fb:d5:
                    60:c8:ba:e4:58:98:c6:d4:02:a8:41:1e:37:16:df:
                    4d:27:1c:67:29:0c:1a:59:a8:51:f7:26:06:3a:3e:
                    83:2c:f2:14:0a:2e:16:0c:1e:48:65:b9:bc:a7:4f:
                    0b:35:28:57:16:e1:e8:fa:28:24:bf:a1:11:b9:d5:
                    c5:d3:b1:09:d2:5a:27:29:0c:16:ef:9b:a1:d4:b8:
                    8e:80:6d:4b:29:14:d0:03:e5:86:94:b7:f7:54:72:
                    6e:3e:5c:51:ac:35:d9:04:31:27:05:d2:a1:9b:ea:
                    d1:d6:23:d2:57:00:f4:d6:33:14:c0:33:2d:af:e8:
                    4a:13:c1:7e:a7:65:1c:90:6b:e8:36:e5:f6:6d:26:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:78:0D:50:DB:2A:A4:23:E2:81:5B:5F:FD:95:D5:BB:17:EB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:c1:f4:31:8c:8f:1b:58:99:68:e8:5d:9a:80:65:d2:6f:
         b5:df:df:1e:07:04:3a:9f:1d:a3:b7:ae:5f:0e:e4:6f:52:28:
         dc:76:e3:ef:61:78:02:cf:b3:c9:50:64:f8:d0:c9:ca:29:87:
         57:ce:82:41:c9:60:ee:87:75:48:d8:6e:2a:78:b9:39:84:b8:
         ff:a0:21:13:e5:82:e7:05:23:1d:94:fd:db:88:60:e9:e8:98:
         10:87:95:eb:de:d3:cb:1d:de:4a:ed:34:51:f9:9e:21:48:ea:
         ae:d6:be:4f:b9:d2:1b:d0:46:03:ae:34:86:ce:7f:44:38:2c:
         79:1b:ee:5b:04:fd:89:90:2e:59:04:a6:8c:1a:23:74:ee:ad:
         d6:a0:4c:0d:59:a0:f9:a9:ce:31:f8:bd:76:bc:c0:1b:57:14:
         f2:0e:65:33:fe:24:06:0b:a1:ba:f3:4e:83:bf:21:6f:37:57:
         bf:1f:b6:f3:72:02:ba:91:9b:2d:b7:1e:1d:7b:5a:ec:f5:8e:
         37:1c:cb:d8:7a:4d:c9:78:05:4e:c8:78:58:19:cb:34:32:a2:
         a6:8d:a7:b4:81:ed:16:7f:30:2e:b3:b0:90:c0:51:e1:6d:56:
         97:aa:09:a5:8f:b8:ac:26:e1:4c:4d:4f:c6:7f:79:bd:32:c4:
         be:d4:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:57:31 2024 by rpki-client on console-fra.rpki-client.org