Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
File:                     caaf40e4-468e-3ac7-9c5c-80d776e26587.roa (raw, json)
Hash identifier:          W8tsjr+1H0sl2cApUCuOZpiIdEJS5Zmu4h0LVSyrm3U=
Subject key identifier:   87:29:A1:FB:C5:6A:9E:7C:10:B3:92:FC:5F:2C:92:68:22:FD:FF:88
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E9FD009AA337E81288D0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2607:f098:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e9:fd:00:9a:a3:37:e8:12:88:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=9fd6667b-42da-4420-ae14-f9f5737bc96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:f5:8f:9a:1d:17:61:d5:ad:bf:5a:c0:e3:
                    47:ba:94:e1:aa:dc:e0:e9:7d:c1:fb:d5:17:c0:21:
                    e6:f5:12:c8:74:36:ed:d9:3c:0b:b7:01:3d:6e:82:
                    11:65:fb:ef:e6:70:cd:3e:97:bf:fb:76:ee:01:a8:
                    2d:d4:1f:3d:2a:12:b2:0b:0d:e8:c6:99:60:b7:ab:
                    9f:fe:c1:eb:db:b9:f9:bd:0e:ec:c0:9a:34:c0:85:
                    3d:de:3a:4b:ab:63:64:63:aa:27:90:bd:a8:79:58:
                    29:ea:a0:d1:40:65:1f:3f:77:50:12:47:e1:b3:d1:
                    3e:81:5b:28:84:84:52:d8:66:9f:63:11:f1:cb:cd:
                    63:19:74:c7:57:71:2f:6f:e8:46:8f:ba:38:7a:57:
                    5f:a9:b7:5e:9e:65:cc:73:60:76:97:27:b5:df:90:
                    e7:74:eb:82:c3:73:57:e3:b1:8d:4a:95:87:ac:9e:
                    c0:d3:6c:df:c8:65:39:64:f8:29:8b:de:92:22:e3:
                    7f:49:57:bf:fd:b7:5b:b0:7d:35:52:c4:0e:46:5a:
                    81:c4:f1:3d:e6:9a:f5:57:4f:be:1b:c1:50:d3:0f:
                    b4:82:b4:c3:90:1a:16:03:0d:f8:dd:62:f7:42:5d:
                    02:d0:35:4d:d2:cf:85:3e:6e:d6:a1:f5:10:d8:37:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:29:A1:FB:C5:6A:9E:7C:10:B3:92:FC:5F:2C:92:68:22:FD:FF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:f3:6c:ae:ad:89:e5:b6:04:04:69:05:a2:29:ea:5a:26:
         de:21:a0:4b:60:8d:66:2d:87:16:1a:d2:e8:23:83:98:5c:9c:
         a2:b1:47:ec:bb:40:ed:24:b2:23:c6:e6:c7:3a:68:9a:60:fd:
         02:4d:97:5c:6c:84:84:02:c6:6d:02:cf:37:bf:e2:e9:b0:0c:
         89:fc:9d:6b:c3:76:ad:04:a5:fa:9c:ed:2e:01:4a:4d:8a:c3:
         28:1c:ff:6f:26:89:72:e8:3e:33:13:36:59:f9:78:fc:0b:61:
         01:3a:12:13:80:88:46:7a:4f:8b:4e:f7:0b:8b:8e:2f:c5:19:
         30:c9:7c:f7:ab:5c:15:dc:c4:c7:04:ce:53:a3:b1:de:98:bc:
         96:c6:c9:fe:09:14:51:08:78:fa:43:7d:09:31:ae:d4:7a:a0:
         98:91:fa:cb:58:60:f4:fb:ee:2a:ab:72:be:13:bd:65:ed:6e:
         c8:fc:68:7d:ca:c2:49:ad:d5:fc:30:93:15:5c:b0:45:16:52:
         5b:be:c7:8a:21:0c:83:95:05:70:fe:d8:23:64:85:f2:ff:23:
         5b:eb:ff:4b:d0:f5:60:2b:55:95:d6:5f:c1:91:71:21:b7:7e:
         63:09:68:c2:f9:f6:32:4c:2c:90:70:07:aa:c7:b7:3d:f0:ea:
         6b:fb:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:08 2024 by rpki-client on console-fra.rpki-client.org