Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/70e5704d-b953-3df5-9eec-0994246ca8e4.roa
File:                     70e5704d-b953-3df5-9eec-0994246ca8e4.roa (raw, json)
Hash identifier:          Y26OFaKgy3TusvRYdGEt4DcqfSltRaTvMob4bAlRufc=
Subject key identifier:   67:7B:B0:3E:4E:8C:DD:03:9D:DC:AF:7E:64:83:36:64:B4:BE:A3:12
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D66905D673E34EB5144C5E60
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/70e5704d-b953-3df5-9eec-0994246ca8e4.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        2606:6300::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:05:d6:73:e3:4e:b5:14:4c:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=f2d1a2be-691d-4079-b7c0-9f2b75dce286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:b5:92:3d:bb:e7:5c:e5:36:5f:35:69:7e:
                    df:d9:70:16:d9:09:bd:1e:d6:cf:bf:92:f1:94:09:
                    61:7c:f2:2f:bf:a3:a5:8e:de:ad:dd:90:72:97:7a:
                    ea:1c:51:16:1b:48:6b:0e:3e:fb:69:66:60:58:75:
                    f1:ce:62:29:da:2f:9c:79:d8:25:fe:24:7c:41:0d:
                    97:42:24:82:5e:0d:bf:24:6c:11:9a:b3:c4:06:7e:
                    2a:ff:22:20:2e:36:c7:15:4b:13:14:f8:76:26:f1:
                    14:15:1e:cb:c6:18:04:88:9e:a6:2a:db:04:16:dd:
                    8c:38:80:36:9d:44:21:8c:c2:e2:6f:69:9a:72:53:
                    27:f5:45:f8:a6:03:2d:3f:0e:7d:72:e5:5c:e8:cb:
                    09:0d:55:95:19:ce:21:9d:03:ed:c4:cc:a5:2c:fb:
                    75:a7:c0:41:e7:15:14:87:d8:71:58:90:74:7e:3e:
                    76:8c:ca:2b:47:0c:14:ed:c2:a0:69:8b:fe:01:2f:
                    31:6c:46:14:e8:9f:d3:8c:77:db:e9:10:c4:25:fa:
                    94:03:6e:df:2f:b6:62:ca:75:29:a1:0b:08:e6:3a:
                    08:ca:22:06:c8:d8:f4:29:33:20:e9:62:fb:a1:fa:
                    e1:04:ea:20:4d:0f:c2:7f:29:0c:ed:94:3f:b8:c6:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7B:B0:3E:4E:8C:DD:03:9D:DC:AF:7E:64:83:36:64:B4:BE:A3:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/70e5704d-b953-3df5-9eec-0994246ca8e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:17:ef:21:31:70:c7:5b:8c:06:0f:a4:f5:65:3e:b7:04:
         c3:bb:54:4f:c4:5e:b3:85:48:7f:3c:28:f7:80:83:9d:71:1f:
         00:ea:20:9f:f7:4c:dd:fb:fd:0e:e7:12:e3:93:bc:e5:ef:4d:
         2b:70:16:f5:36:e8:83:85:ee:13:e7:ae:12:03:0e:25:de:6b:
         9b:af:52:33:87:05:34:ae:69:8d:f9:0b:d7:25:3c:97:b3:c7:
         8b:0c:b3:8a:fe:d1:6c:62:87:dc:8d:4d:a7:a5:b8:66:5f:cb:
         1b:9c:6d:f1:58:6d:1e:e0:0d:ed:11:93:c9:d9:78:52:ac:af:
         8e:b7:0b:f7:79:c8:63:49:90:0f:54:82:91:6b:11:9f:e6:f7:
         51:37:21:2f:c8:9a:9b:8f:1e:5c:ca:5f:05:39:9f:e1:74:bc:
         e2:96:64:14:46:1f:92:c7:bc:b8:69:51:be:ed:e5:2e:85:be:
         36:6b:93:04:9a:ca:72:07:27:14:63:ce:17:44:1d:93:b1:d2:
         5a:1f:61:4a:49:83:ce:41:75:a2:bc:99:be:c5:14:49:cd:94:
         b6:d9:42:a6:86:c3:8f:6e:19:04:f1:e2:6f:38:69:f8:d4:7f:
         c2:b2:f8:8d:b4:f6:48:49:5e:ed:55:8c:bc:43:13:08:f9:4a:
         84:83:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:09:46 2024 by rpki-client on console-fra.rpki-client.org