Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/5fab962f-6aaf-3a6e-9c38-5a8b2dd8b78c.roa
File:                     5fab962f-6aaf-3a6e-9c38-5a8b2dd8b78c.roa (raw, json)
Hash identifier:          PrsiKwCYKPOJ7bjSTYU30HSnGItBepjsP5cUAA2JEaw=
Subject key identifier:   6F:7D:A2:2F:32:63:7E:D4:0C:FD:02:C2:76:AD:04:8B:E6:9A:B1:2C
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F43285845B21E31BA9268FF07A0D6CB38
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/5fab962f-6aaf-3a6e-9c38-5a8b2dd8b78c.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     398643
IP address blocks:        2607:2240:9000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:31:ba:92:68:ff:07:a0:d6:cb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=976c6933-f6ea-4680-83c3-0b1c5c7ad0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:f5:70:8d:19:ba:30:3a:b9:bb:96:98:da:
                    38:00:a2:42:21:2f:52:42:e7:96:bf:51:f2:e3:1c:
                    f8:cc:dc:1d:44:87:a5:d8:84:b8:f8:32:3d:38:15:
                    a4:0b:c7:39:57:64:63:1e:73:7d:04:de:87:37:fa:
                    b2:0f:5f:89:ab:48:2b:32:0b:9e:28:65:b6:11:e4:
                    1e:5e:16:85:60:88:25:8e:22:86:d5:18:e4:a9:43:
                    88:16:95:36:c5:04:42:c6:8b:76:ca:28:84:14:d8:
                    ad:dd:8b:01:6b:b7:e5:6d:d6:b9:b7:05:43:4c:e3:
                    0b:b9:e3:2e:59:3b:91:98:42:65:3c:a4:e8:d1:81:
                    c2:91:f8:3a:bb:dd:43:bf:ce:f6:f5:8c:13:7c:1e:
                    f5:93:a4:f7:d0:d1:4e:db:33:66:67:d4:fd:22:99:
                    e5:22:91:eb:f7:a7:47:22:e6:21:81:e1:5c:2c:d7:
                    bb:c7:54:7f:be:36:52:b3:15:6f:ed:28:13:88:60:
                    c2:3b:dc:13:39:41:7f:88:7e:39:bb:57:3f:5b:46:
                    98:48:28:c4:76:36:d2:6c:3a:53:2f:a8:e3:df:f1:
                    e6:7e:e2:1a:58:21:89:e1:aa:cf:ff:d8:a8:e0:f7:
                    3f:b4:05:1d:6e:98:ad:84:c7:77:3f:a7:d9:65:02:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7D:A2:2F:32:63:7E:D4:0C:FD:02:C2:76:AD:04:8B:E6:9A:B1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/5fab962f-6aaf-3a6e-9c38-5a8b2dd8b78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1f:5d:d5:d3:3b:9d:b7:ac:39:b5:ac:93:5f:5e:6b:e7:99:
         5b:80:28:ae:58:03:99:e7:64:cb:23:e3:40:05:27:2d:17:f7:
         71:88:ec:f0:14:89:f8:54:de:90:07:76:b1:15:f9:b9:1e:85:
         4e:c7:e0:b1:77:a5:dc:4d:6d:1b:78:8f:ec:86:73:b5:22:ff:
         59:d0:9e:03:72:93:ef:d5:32:60:30:0f:87:b8:65:6c:cc:42:
         d2:2b:7c:ff:2a:4e:0f:c0:8f:c6:81:e3:e6:02:c7:f7:d3:8a:
         5f:bd:fd:9d:3c:d4:5f:ec:37:8a:93:f4:83:6c:2a:29:66:c6:
         bb:92:6d:69:ba:56:92:81:9b:0e:77:07:ad:12:90:fe:15:01:
         e1:28:96:d7:e6:82:08:43:13:9a:7b:a4:19:2e:09:af:27:ce:
         e2:d7:49:e1:db:31:f1:d5:72:26:03:c4:a9:d5:5e:34:01:34:
         c3:7a:ef:63:60:ae:8f:3a:af:96:f7:ff:b3:0b:12:5d:ea:67:
         ca:71:b8:db:59:78:1b:d9:2e:7a:5a:fa:2c:cb:41:5c:71:54:
         15:3d:2d:95:a3:d9:c6:b4:e4:ff:52:5f:1b:e7:ec:cc:06:18:
         c3:c4:c0:f1:43:5c:4f:24:64:dd:e6:c1:0d:c2:74:ce:b1:08:
         c5:08:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:40 2024 by rpki-client on console-fra.rpki-client.org