Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c7ae35d7-f04a-325c-a7a4-73eb93410906.roa
File:                     c7ae35d7-f04a-325c-a7a4-73eb93410906.roa (raw, json)
Hash identifier:          VPFmaUK1LqpA29Sx3miJAnVrjTvufcYlCu8YsZqc5BA=
Subject key identifier:   52:D1:EB:4B:31:EC:ED:13:AE:F2:23:86:34:57:A2:70:D7:07:F7:53
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285842B065A66B961236D0762D7E80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c7ae35d7-f04a-325c-a7a4-73eb93410906.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        2620:11a:a000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:a6:6b:96:12:36:d0:76:2d:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=dd68487f-363a-4f88-97e1-dfc667c86e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:4f:d5:00:bc:93:94:3d:8c:86:61:7e:4f:
                    3a:48:04:7f:f8:ae:04:24:92:bf:be:42:e2:88:7b:
                    b4:5f:0a:b6:07:56:63:25:bc:f9:19:5b:37:69:e2:
                    71:b8:bc:0f:73:70:08:99:5e:ab:ba:46:79:c1:16:
                    33:bb:90:bc:0a:4c:dd:e2:1e:b6:90:c4:73:70:e8:
                    3f:28:8b:fb:85:7b:87:08:cb:7d:0c:c6:6a:60:e6:
                    d3:d5:15:c5:6d:80:ca:44:d7:2c:71:ed:26:36:57:
                    30:26:53:b0:e9:04:e4:5b:38:34:ac:9c:7b:67:63:
                    cb:fd:32:6e:08:3b:ae:8d:86:69:9d:aa:4a:f1:5f:
                    70:33:3e:e6:8f:9a:a9:bc:b8:7c:89:cb:22:b5:f8:
                    fb:b7:89:7f:b5:2f:06:00:78:53:3b:76:11:e1:4d:
                    9c:5a:36:ec:ec:38:e7:1c:13:28:e6:7c:75:d0:74:
                    db:90:a8:ea:58:78:61:19:cd:d0:d4:cc:27:92:82:
                    b8:d7:81:d2:3b:8d:86:8c:e5:9d:3f:bd:c6:9c:45:
                    ae:ef:ec:57:9e:e2:4f:71:90:45:c0:17:fd:5e:f6:
                    42:2c:fb:25:85:cf:f4:cd:ef:2c:07:84:f3:c8:7f:
                    e9:00:ac:49:b0:6a:0b:82:2f:e7:f4:3a:98:d8:cc:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D1:EB:4B:31:EC:ED:13:AE:F2:23:86:34:57:A2:70:D7:07:F7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c7ae35d7-f04a-325c-a7a4-73eb93410906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:3f:f6:e5:18:12:d2:a3:3b:8a:2f:7e:a5:f3:40:24:fe:
         7b:98:15:52:85:94:67:25:0b:5f:d7:a5:78:f1:fd:f7:f7:24:
         fc:ea:0c:9a:e3:86:37:b2:f6:77:51:18:78:e7:83:78:d1:05:
         4f:d5:33:b1:07:52:7a:4e:82:9b:e3:c8:4c:a5:a9:30:b3:48:
         5b:ff:c7:07:fc:45:d6:c9:3c:03:d2:dc:66:a4:2f:28:ce:37:
         40:e8:5f:e0:e9:4b:92:e3:4a:15:07:eb:38:ea:be:05:e2:b2:
         46:af:c0:8a:fc:e4:bd:fa:d7:26:12:74:aa:38:01:e3:0f:51:
         25:2f:f1:64:c8:84:92:17:af:ca:8c:e5:7f:bc:7e:5d:c0:30:
         88:7b:8a:1e:6e:e4:c7:e7:f0:be:3f:18:29:77:54:f1:4c:67:
         cc:5e:9e:74:c2:b8:00:a1:19:7d:ac:0b:22:43:59:84:a3:3e:
         b1:05:1e:ba:61:45:c3:28:2a:77:ca:fe:d4:51:40:fb:33:06:
         09:b1:23:b2:0f:d3:51:05:83:54:29:c4:e6:5b:b4:ef:1c:cd:
         db:a9:80:c5:bc:7f:43:33:00:f7:3d:29:9e:2b:6b:0e:91:19:
         b1:6b:e4:21:1b:ca:da:54:b1:04:43:1f:21:90:bc:b9:73:9e:
         6d:e5:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:50:39 2024 by rpki-client on console-fra.rpki-client.org