Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6facbc91-4c2e-37c8-8f1f-20397a580f81.roa
File:                     6facbc91-4c2e-37c8-8f1f-20397a580f81.roa (raw, json)
Hash identifier:          nm2A2ptJbozTEN5fNuSEXdo3yY++EhDU0WyWcEaXig0=
Subject key identifier:   83:D9:C9:2F:CE:CE:B9:2B:7F:50:41:DC:9C:D7:80:DA:D5:E8:57:6D
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285845909DE94601E57EDB9CB4D040
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6facbc91-4c2e-37c8-8f1f-20397a580f81.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     11572
IP address blocks:        2607:ff00:500::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e9:46:01:e5:7e:db:9c:b4:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=f9d09a90-3d65-4161-a768-607fb0fc4a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:6d:d0:11:e8:c8:d7:e5:ce:a4:8e:c4:11:
                    2f:86:14:65:25:1a:b4:55:14:34:1c:83:8b:30:81:
                    79:bb:00:3b:02:2c:e5:3d:61:8d:06:35:ab:29:ab:
                    81:79:fb:d2:aa:6c:1f:02:ad:22:11:67:df:9a:85:
                    ae:a1:64:4f:98:06:7c:a8:68:d5:aa:97:77:9c:27:
                    23:41:eb:48:5e:9f:1a:5b:35:2a:56:3e:7b:fb:05:
                    3c:b4:c9:bc:37:e7:d8:f0:bd:da:60:6a:96:4c:9a:
                    52:81:ce:87:78:4b:9a:1b:e3:07:2c:7c:8c:4e:80:
                    9a:c5:fa:01:12:10:9e:ef:fb:d6:25:91:2b:80:9f:
                    37:bf:c6:75:2f:7d:41:69:18:1a:2e:2e:6c:02:af:
                    5c:7f:54:7f:78:10:cd:fb:72:33:bd:4a:08:df:f9:
                    fd:53:b2:bd:08:be:b4:ee:e7:27:70:88:c4:93:29:
                    67:89:7f:e6:55:29:0b:8c:e4:9a:6b:ad:37:f6:8f:
                    2c:53:d6:e3:a2:c7:40:74:5b:27:7a:c4:95:6e:27:
                    c6:27:60:b8:10:9c:cc:62:34:97:89:56:de:61:fb:
                    e2:4a:f6:b1:0a:16:c1:c0:da:ba:1f:c7:e9:32:8b:
                    d3:c5:5b:cf:c2:6f:d1:21:57:34:db:67:09:7a:bf:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D9:C9:2F:CE:CE:B9:2B:7F:50:41:DC:9C:D7:80:DA:D5:E8:57:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6facbc91-4c2e-37c8-8f1f-20397a580f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:23:b3:8b:ae:95:34:33:56:a4:61:aa:fd:a6:f8:14:69:
         7b:d8:c4:bb:99:8b:14:d2:82:cc:d5:b8:b1:b7:6c:da:ff:89:
         6a:76:6b:f6:72:be:96:49:eb:65:3d:e4:be:a0:70:5c:6a:47:
         f9:e4:2e:33:a0:5d:c6:c7:34:eb:f1:d9:35:da:12:eb:3f:8a:
         91:67:a8:42:b3:df:f5:40:76:57:fa:7e:4e:c1:12:34:38:b7:
         20:5c:aa:60:d8:10:4f:c3:dc:ed:3f:d5:e8:90:ec:79:5f:1a:
         d9:ee:84:bb:47:46:25:ae:ba:e5:37:5d:b5:a6:ef:4d:e7:e2:
         94:49:74:f2:fa:36:b1:1c:08:16:05:bf:f3:3f:5b:71:e6:ac:
         67:f6:9c:34:56:8a:e2:dc:96:6f:3d:8d:06:f1:a3:2e:6b:31:
         f0:bd:a8:b8:47:a1:dc:9a:c5:43:fb:5f:ab:5a:29:dd:17:ff:
         b8:c2:83:29:9f:e1:04:c5:d6:17:58:86:d0:72:f1:c8:f8:19:
         c3:38:b1:7b:b1:be:9a:f1:bd:ea:6b:f4:6e:2f:69:a1:83:18:
         49:77:ed:58:42:50:3d:b7:c8:fa:1e:6e:52:d3:63:37:8c:d7:
         e6:9e:42:97:fa:bd:c2:1a:72:f6:c5:21:3c:1a:b5:23:9f:60:
         85:ba:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org