Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
File:                     4d791053-3127-3f02-a4e7-20d3e1e44946.roa (raw, json)
Hash identifier:          qze7UrzjoLbwguK0FZI8ijA7L993M7y59NaMIRrlk7k=
Subject key identifier:   D2:02:9A:D2:1D:15:0E:80:C7:11:56:38:D1:4A:94:3C:E2:C0:9A:47
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584555FD860DE23ABB93C77DC290
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
Signing time:             Tue 26 Mar 2024 13:00:35 +0000
ROA not before:           Tue 26 Mar 2024 13:00:35 +0000
ROA not after:            Mon 24 Jun 2024 13:00:35 +0000
asID:                     399045
IP address blocks:        2606:d640:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:55:fd:86:0d:e2:3a:bb:93:c7:7d:c2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Mar 26 13:00:35 2024 GMT
            Not After : Jun 24 13:00:35 2024 GMT
        Subject: CN=f4062c65-f105-4e76-9864-555d167ed856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:36:83:97:54:74:24:83:75:bd:cc:66:94:
                    c1:71:4c:25:da:26:e7:3a:1d:d1:f6:fb:52:b4:c5:
                    ee:2d:7c:52:a8:d7:6e:46:70:a9:7e:68:94:a3:51:
                    ba:89:ce:ce:72:f0:18:56:af:de:c6:bf:ad:61:81:
                    40:ce:60:12:8c:9b:a4:72:aa:d8:68:7a:c1:21:36:
                    b9:35:cf:9f:a0:18:f3:a6:c4:74:40:70:dc:c5:e6:
                    e2:cc:9a:a9:ec:36:8c:6d:0b:1f:b5:6e:6a:7b:39:
                    fc:52:87:08:fa:3f:e9:80:cc:76:7b:d5:1a:0f:61:
                    ae:5a:bb:ee:31:21:e4:bc:3a:dd:52:a2:1e:a4:31:
                    7d:5b:cb:e3:59:b4:ef:00:3d:94:a4:96:8a:3f:ab:
                    07:a1:86:bd:b2:f0:48:5d:8f:62:2c:a5:51:75:38:
                    e6:b5:22:ac:45:3e:f2:8d:80:e6:bc:09:2d:8e:3e:
                    27:04:44:a4:0c:a2:4c:68:57:d2:c2:15:d6:56:aa:
                    4a:09:40:52:48:23:f7:b2:0d:c3:40:14:d8:d2:f2:
                    00:bd:76:c0:81:c0:22:cb:b2:75:d8:40:df:03:bc:
                    7c:f8:23:61:67:27:1f:9a:0a:a1:19:e5:f7:7e:d3:
                    42:5e:ac:15:23:34:83:ea:f6:0f:1c:f1:c8:13:f6:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:02:9A:D2:1D:15:0E:80:C7:11:56:38:D1:4A:94:3C:E2:C0:9A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:8e:71:a7:61:4d:4c:9f:2b:dd:31:93:92:24:06:d6:8a:
         f0:60:40:f0:b7:0e:f2:43:3e:51:91:ab:a0:02:2d:30:25:fa:
         ec:28:c7:c4:04:2a:9e:58:99:2b:0d:01:b8:ac:55:27:84:05:
         e8:98:8b:78:e8:f7:07:f5:3a:45:94:04:94:03:b3:ad:92:84:
         75:61:fb:f8:1e:be:c1:81:73:bd:3a:76:ce:1c:c5:4d:57:53:
         fc:3b:66:24:8d:57:5a:55:ca:09:c9:69:c0:f1:cd:8f:7b:2c:
         35:2d:50:c1:e6:35:c5:e3:f4:56:a3:42:6e:55:89:16:72:71:
         89:8c:b4:03:41:13:a0:15:61:d9:91:c4:f6:9a:b9:93:7e:80:
         5a:dc:25:9e:d4:28:41:b2:d3:24:bc:a3:99:46:49:20:bb:85:
         e9:54:f3:a4:9b:3f:b4:ab:2c:18:2b:05:e2:7a:6d:c9:21:fa:
         fa:2a:5e:dc:8d:1d:e2:01:b8:42:59:81:a1:74:aa:d2:ec:76:
         3e:7c:56:aa:a7:85:ad:2c:79:99:9b:6f:bc:35:b1:26:ea:17:
         9b:ce:9b:5b:ca:ed:e5:aa:9d:e6:77:04:57:60:6a:62:be:fd:
         84:6a:20:9d:6e:0b:65:8f:a7:b3:09:a7:b0:29:65:c0:1a:43:
         91:c9:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:53:56 2024 by rpki-client on console-fra.rpki-client.org