Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa
File:                     4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa (raw, json)
Hash identifier:          xsYhvLLyQZwr8kXQUZyFOfg6V2eoM1w7CTPbv9oqE94=
Subject key identifier:   DC:95:43:94:E6:9A:72:CF:2A:8A:99:7F:6A:D9:33:9B:83:1C:4C:7F
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F43285845B21E312FD20EA09387248480
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     398663
IP address blocks:        2607:2240:6000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:31:2f:d2:0e:a0:93:87:24:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=710c4171-7f58-46ea-b27c-a9e8c95ab7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:60:5a:8a:52:f8:0f:39:3d:39:72:ea:91:
                    fd:99:f7:25:a3:88:56:1e:7b:cb:4b:8e:04:62:7a:
                    b8:eb:6a:26:ec:1b:fa:36:92:c7:a2:8a:42:e0:ca:
                    78:72:f2:3a:db:ed:28:77:5a:4e:4b:29:76:f0:59:
                    af:34:7b:bf:e4:45:14:cc:5f:07:d6:64:b9:ea:9b:
                    9a:b0:0e:60:a2:b2:ef:5d:60:3e:e2:44:a0:33:4e:
                    99:ab:58:6f:d5:7d:7e:60:d7:10:23:00:7b:3f:36:
                    e0:67:aa:45:1d:bc:ad:ab:f6:fa:44:e0:d7:87:f7:
                    af:c3:a7:5d:58:e2:0a:ff:00:e1:44:20:ac:7d:f6:
                    fe:06:2d:a5:e1:10:64:33:db:a4:6f:11:53:a3:8d:
                    e2:8f:49:ed:a7:4f:b7:72:62:d3:f2:7a:e0:55:3f:
                    38:94:59:1a:1f:55:9b:ff:34:2f:55:92:bd:00:c5:
                    57:30:c5:e8:dc:4b:cb:6e:0d:81:d4:ee:e3:53:03:
                    e4:fa:ab:bc:d1:ef:02:e9:5c:ff:c7:f1:c0:a3:2c:
                    da:d5:67:5c:48:3a:76:a3:46:14:d4:aa:d2:27:3b:
                    b8:07:93:fb:44:0c:9d:6d:cd:27:9c:f5:10:3d:1a:
                    88:d8:79:b4:bb:81:35:22:eb:82:12:44:7c:e1:0e:
                    27:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:95:43:94:E6:9A:72:CF:2A:8A:99:7F:6A:D9:33:9B:83:1C:4C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/4f943d15-fec8-3e98-bfcb-4d4e7112a790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:d4:8d:1e:ea:6d:26:28:c9:a6:cd:c4:a8:77:90:e3:5c:
         8c:51:ec:79:03:3f:dd:22:9d:de:ff:ee:50:61:96:92:38:52:
         af:5a:2f:00:94:27:6c:97:9b:8a:d9:49:ae:ad:44:93:9a:f0:
         e6:2b:53:d0:47:b9:5c:ca:a4:e2:00:0f:ee:27:1f:7d:ae:5f:
         f0:44:85:1b:b2:3d:b1:3b:49:28:b5:0e:b9:a8:fd:7e:98:e3:
         02:11:3f:3a:a2:69:75:69:ea:78:2b:72:a1:48:1d:56:bc:42:
         13:69:af:13:4a:a8:34:af:22:24:05:9a:20:b3:29:ce:c0:e5:
         97:29:1a:27:48:40:65:b9:ee:ee:cd:80:e8:b0:21:5e:59:59:
         1e:29:e1:39:8f:2d:fb:a2:51:14:b8:37:01:19:bb:cb:d0:0f:
         4b:6f:76:1d:2d:a2:86:2d:fb:34:05:03:3d:e7:82:e1:cb:0b:
         16:12:25:b9:79:a4:77:33:d9:ad:ab:21:10:30:82:7a:7f:c1:
         71:db:ca:fe:b1:e1:8c:fb:2e:22:70:5c:0a:d7:93:a9:7f:d5:
         4c:73:15:fd:90:18:0d:6d:a3:d7:82:2d:b7:95:fb:40:a2:de:
         9e:32:48:f7:0b:7c:b7:6e:94:c2:57:a2:bc:b3:c4:fd:8e:aa:
         63:78:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:16:52 2024 by rpki-client on console-ams.rpki-client.org