Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
File:                     7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa (raw, json)
Hash identifier:          cu6xXZ9asbuVqFb09Rw0r9Q5P7S0Tz+i6V2untQFfyE=
Subject key identifier:   F3:E4:50:38:08:2F:9B:29:EE:84:35:57:27:64:C2:98:A4:A3:CB:87
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285844F5CAA1FC37BA9598B4DD5080
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     32298
IP address blocks:        2606:d640:ef00::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:a1:fc:37:ba:95:98:b4:dd:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=e43629e2-0876-4ac8-99ca-cc3b04df36bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:fc:3d:ff:c4:e2:00:d1:64:f7:a5:0f:6c:
                    a9:cf:92:df:6f:e0:44:46:01:5f:fe:bb:23:6e:84:
                    aa:7d:8e:bd:58:40:fe:c2:eb:cf:3e:0e:d3:43:b3:
                    e7:4b:37:21:de:5b:d0:9b:5f:d5:27:17:e3:5d:9d:
                    97:48:0a:98:23:81:bb:60:66:a2:53:e7:ff:d2:ed:
                    31:67:b0:68:6f:7d:60:65:a3:bf:f7:83:cd:b3:7c:
                    e8:59:98:23:fa:20:c9:03:7d:a8:c3:73:e6:70:d2:
                    ac:bc:ee:29:8f:5e:1a:04:b6:28:2e:40:61:51:29:
                    d4:39:ac:83:bd:20:d7:a5:dc:1d:fb:b0:4d:f6:a3:
                    a6:9c:f4:80:33:a2:c8:f3:b5:7a:90:3d:8c:12:52:
                    a4:c9:1d:45:b0:17:87:c4:87:07:f4:4e:88:23:35:
                    0a:11:59:02:90:d6:49:1c:20:a4:d7:98:21:6f:2a:
                    2c:30:8f:32:82:cc:a2:b8:16:e8:72:18:07:ad:a6:
                    3e:75:10:73:89:10:0e:19:95:7d:5e:5a:e2:86:19:
                    05:3a:e9:4c:66:44:c8:c4:14:60:d4:a7:20:f9:b8:
                    1d:56:e8:3b:79:32:b0:ea:43:1e:89:a0:21:1b:10:
                    ca:46:a8:4e:cc:7a:6c:c0:a6:65:72:e9:ca:76:6e:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E4:50:38:08:2F:9B:29:EE:84:35:57:27:64:C2:98:A4:A3:CB:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:ef00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:07:57:7c:93:b1:b2:d3:6d:07:ff:3f:63:cc:56:ae:70:1e:
         e5:f2:05:1d:2f:43:11:e6:28:22:52:fe:9e:c6:b2:4f:85:e3:
         b4:c3:9d:84:fb:10:2a:d1:94:c6:e1:c7:47:7b:da:e9:06:e5:
         cb:2e:12:9f:82:8c:7a:4a:54:34:22:95:ec:54:a3:14:cc:c5:
         c3:e2:54:2d:19:64:8d:07:f2:b6:45:1a:40:50:a7:be:6b:58:
         eb:c3:31:ad:cd:a2:bc:35:9a:7d:6d:d9:1d:d6:ae:ed:88:c0:
         55:20:bc:0d:80:3d:57:08:3b:32:44:3d:89:e9:03:45:d6:59:
         ce:0a:41:ea:09:de:a0:24:1d:a5:7f:0d:8e:50:bb:5c:0a:5b:
         8f:bf:17:97:cb:8e:d2:39:3c:de:13:5a:f4:d9:aa:e9:56:34:
         78:ed:bf:80:61:e0:88:fb:fc:92:55:40:1c:a1:e6:e4:6b:99:
         26:67:8e:32:dd:de:2f:c8:5a:39:13:91:fb:89:96:f3:18:4b:
         0a:41:51:6a:72:ec:7b:7b:c2:71:f4:99:44:f8:ed:54:ea:c6:
         6d:60:5e:35:3d:bc:ac:fd:e2:98:cd:53:db:ea:43:76:f2:28:
         aa:c7:8e:ca:98:dc:6e:4d:ef:d5:9b:06:a4:90:67:97:67:28:
         7e:4a:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:55 2024 by rpki-client on console-ams.rpki-client.org