Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa
File:                     909e0677-e107-3f90-b3d6-d289381c03ee.roa (raw, json)
Hash identifier:          qYyM3+1ydVDVn8lvuQRGDjQifKqZp6ANqNNS/ejfnWs=
Subject key identifier:   E0:59:5D:BA:FF:22:A6:CB:FC:7B:A0:E5:22:EF:57:3B:7F:AA:9F:37
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858452AB7E023FA64217B09933E80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        2607:740:39::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e0:23:fa:64:21:7b:09:93:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=d8550537-7ca6-4644-ac89-c1c3d6809227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:50:2f:08:d6:b6:1e:1f:dc:b6:a4:d4:3a:
                    47:7a:1c:84:cd:e8:e2:7e:00:40:58:a4:7c:6e:36:
                    93:66:61:0b:31:00:fa:59:94:cb:16:49:c7:97:d4:
                    45:fa:7a:e5:60:76:2d:50:e6:ab:42:ee:e1:c8:0e:
                    df:03:af:0f:ca:1d:a7:5f:95:16:4c:e3:f4:ce:1d:
                    f5:94:41:a4:3a:fb:54:5b:a2:bb:68:a6:10:f5:2b:
                    49:27:62:6f:50:fa:9f:c4:f8:48:d6:95:53:34:33:
                    7e:e5:04:10:8e:c8:c3:07:ab:34:10:52:5e:e2:8d:
                    0c:eb:ec:c8:b8:b7:3c:20:12:83:92:c2:1a:62:99:
                    96:4a:92:77:eb:e3:26:2f:e2:90:22:86:5e:83:c3:
                    83:73:b1:e1:f1:21:04:15:bd:f1:99:84:8e:97:96:
                    eb:ae:86:91:46:24:7d:40:b4:3b:e9:30:5a:83:43:
                    08:75:ea:66:f4:d6:eb:8f:41:5b:7f:55:3c:75:17:
                    1c:17:e7:f7:41:64:41:20:43:8f:17:4e:17:68:77:
                    e8:89:97:92:f7:35:bb:8d:4f:8a:9c:24:8e:af:87:
                    18:72:2d:f6:16:54:e5:3f:92:aa:9a:e6:0f:24:5b:
                    4f:75:e1:54:be:9d:89:46:db:2a:19:da:0b:8f:3e:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:5D:BA:FF:22:A6:CB:FC:7B:A0:E5:22:EF:57:3B:7F:AA:9F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:89:e8:73:c9:b4:c9:04:7f:c9:73:2b:1a:4b:bc:df:26:be:
         78:ee:02:e0:f5:b5:39:98:71:25:f2:3c:84:90:94:46:21:ca:
         f6:66:05:78:20:87:7f:85:9e:34:c7:b9:6d:7c:39:c4:f6:a8:
         04:46:ab:38:39:d3:56:7c:07:37:9f:c7:85:95:45:e2:b0:67:
         4d:59:2f:cb:6d:bd:21:c2:8d:08:92:07:e6:bf:2f:ea:d7:a9:
         43:0c:a8:ab:5e:a3:35:ed:c2:a1:e0:62:1f:54:05:9f:c4:60:
         59:ed:32:94:10:f6:18:68:be:bd:47:39:8f:a0:50:2e:3b:1d:
         46:a9:59:43:71:b6:24:14:7e:0e:88:08:28:fe:7a:34:6a:8f:
         43:51:3a:83:8f:7a:18:34:06:92:06:1c:08:72:d5:05:67:33:
         8b:a2:cb:ed:11:28:24:95:99:b4:29:4c:80:f9:f0:be:dd:13:
         4a:b5:b4:15:db:6e:23:61:4c:15:1e:17:7a:72:8a:1b:47:83:
         3f:bf:e6:ac:e6:d7:93:59:12:73:dc:f0:37:6e:98:6b:c2:ba:
         89:d7:41:1d:30:4f:69:07:31:77:f2:66:42:9b:b0:3e:a0:25:
         f7:3b:74:e8:0b:20:29:25:72:e8:2a:c7:3d:ef:03:11:c4:90:
         b4:01:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:14 2024 by rpki-client on console-fra.rpki-client.org