Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
File:                     fd3aebe3-a766-37fe-998a-845bb98c23a7.roa (raw, json)
Hash identifier:          VfA+hvBgOuHDxqtsycVygKy75PeSSBMzNwqFfK16cD0=
Subject key identifier:   5A:1F:0C:F9:B2:5B:AA:36:2F:B3:DC:37:33:91:B7:4E:B5:69:B7:DD
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F4328584571E87158076FFB457D63E980
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     40555
IP address blocks:        2607:b100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:71:58:07:6f:fb:45:7d:63:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=ed63d792-5204-4a87-9e8f-edec4f70ede5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:6f:db:27:57:44:b7:5c:d6:67:96:99:b5:
                    fa:c4:ed:8b:30:e8:3e:43:06:49:18:55:8f:06:58:
                    25:02:66:0f:54:10:1b:e7:9c:24:1f:a6:8e:c6:ac:
                    97:3f:99:b8:94:f9:46:59:ab:3c:a4:2d:a8:3b:c0:
                    41:dc:9c:10:08:34:1a:3c:6e:b6:fb:60:d8:f2:da:
                    90:d2:a8:09:f0:11:81:c9:69:2a:e4:38:2e:4a:4b:
                    e5:ba:84:9b:c1:74:0f:37:e0:dd:c3:3c:1a:6b:14:
                    49:9d:d4:3e:00:be:f9:5f:b3:d0:72:d8:b2:df:a4:
                    3c:fe:82:6b:a8:30:07:f6:97:d3:f2:3e:c8:50:ac:
                    ec:8f:66:54:90:5e:1c:f4:6c:c8:0f:0a:b0:b9:30:
                    55:80:49:45:45:1e:4d:2f:81:2e:f5:6d:39:40:1b:
                    1c:66:1e:ef:64:f6:5c:aa:8c:32:db:dd:59:c0:6a:
                    ec:68:ae:04:25:2a:32:18:07:99:3f:46:d3:a6:b7:
                    bb:5c:65:90:02:e1:7a:a8:66:d8:43:b2:db:5e:83:
                    ef:d8:8b:64:7e:aa:20:44:64:fc:82:98:e5:7f:6d:
                    e4:5e:ed:0d:a6:c2:51:06:1f:03:35:97:dc:3c:38:
                    5d:e5:19:87:6d:66:28:58:61:9f:4b:a1:f2:1a:33:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1F:0C:F9:B2:5B:AA:36:2F:B3:DC:37:33:91:B7:4E:B5:69:B7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:34:ff:ca:a8:b9:b3:4c:ab:69:85:25:08:1b:d0:79:7d:cb:
         dd:29:6b:1e:5b:c8:4a:0e:5d:7f:26:54:c0:e8:9a:e3:9d:b6:
         de:52:ab:12:a2:70:bf:6c:39:42:bc:01:68:ca:5a:d8:b9:62:
         8b:2f:2f:c8:b2:37:37:2f:d4:3d:a7:fe:67:da:47:77:3f:2f:
         6b:e0:1a:60:f2:0a:a7:2b:3e:54:d7:30:7b:6c:d2:2b:f0:4e:
         02:54:64:ed:a6:7f:fb:0f:9f:8f:5e:bf:67:f5:0b:c4:e4:30:
         39:d0:3e:56:6a:f6:df:3b:9a:e5:62:61:c2:f1:00:f9:f8:e9:
         99:51:a1:f1:4a:8c:df:4e:fc:3e:af:ae:72:13:5d:16:f4:0a:
         bb:d4:b2:b0:f6:5e:f7:cd:aa:be:77:19:a6:ab:0b:1e:20:2e:
         ee:49:b2:85:fc:78:fa:70:af:37:eb:ec:4c:a6:f7:0c:18:e7:
         2e:20:e0:57:d9:7b:bf:49:20:27:4f:0b:7f:f0:50:59:f8:dc:
         25:ab:99:96:f5:79:31:d7:0b:fd:59:af:62:4b:82:ac:9b:e5:
         46:c7:f9:c3:82:22:68:40:0e:36:3d:c1:b0:9c:c2:b8:1e:e9:
         ca:e7:90:4e:8a:ee:3c:63:13:a1:cf:fe:2d:b6:49:11:27:98:
         69:5c:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:58:51 2024 by rpki-client on console-ams.rpki-client.org