Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9801514a-78b3-3ab3-b592-f031c39f0e8f.roa
File:                     9801514a-78b3-3ab3-b592-f031c39f0e8f.roa (raw, json)
Hash identifier:          weZ/NwYP883NpFAkZjfxrO7YR929WL3YDAtPv+Fb9R8=
Subject key identifier:   AF:EA:8D:93:F9:9A:B3:38:92:ED:4E:BB:A3:8F:04:17:7D:71:3E:FA
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285845909DE975B4BE80CAD9EDF540
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9801514a-78b3-3ab3-b592-f031c39f0e8f.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     46385
IP address blocks:        2607:ff00:900::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e9:75:b4:be:80:ca:d9:ed:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=519652b1-1ea1-4a82-9dea-e19189d5ab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:a7:c8:ab:8b:29:fd:f1:ec:a2:01:54:3e:
                    b3:0e:37:bb:a3:5f:ef:e0:da:20:cb:31:28:a8:9a:
                    a1:36:d6:a3:51:7d:49:58:0b:78:e6:6f:ae:d5:77:
                    4b:75:c9:7c:cf:8d:bd:79:76:8c:dd:dc:19:a4:68:
                    e2:c7:6c:a7:8f:93:b5:02:dc:de:c0:d5:20:44:72:
                    1e:dc:01:91:69:c1:3e:ad:70:15:64:7a:73:a5:fe:
                    21:39:87:68:0f:6f:2f:67:b9:ff:ca:0f:37:1c:5e:
                    6d:1f:6b:b8:78:f5:18:70:68:8a:5e:7e:22:8f:ea:
                    16:dc:df:39:4c:fc:8d:33:3a:a5:62:2e:17:f0:6d:
                    6e:ac:24:f1:fa:a8:74:23:f0:29:32:a4:b9:38:3f:
                    c0:eb:dc:bf:d0:7c:b9:e6:8b:ee:be:ae:8d:c6:74:
                    ea:46:a2:70:77:ba:20:55:b5:2d:74:1f:b3:74:bf:
                    63:ea:62:ce:e2:01:18:9b:38:ea:25:c0:a1:52:37:
                    5d:af:34:bf:1f:77:82:d0:5b:99:86:ae:1b:09:16:
                    8f:ad:d0:9f:be:9c:ee:f5:ee:86:b2:53:1a:82:18:
                    06:65:d3:46:12:d0:c4:4f:c5:0c:6d:73:f0:ef:15:
                    98:38:18:ca:c7:ee:5a:de:77:d5:97:5f:89:f5:68:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EA:8D:93:F9:9A:B3:38:92:ED:4E:BB:A3:8F:04:17:7D:71:3E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9801514a-78b3-3ab3-b592-f031c39f0e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:be:56:d7:91:51:d7:38:b7:e7:ae:d6:ec:f3:a3:2e:ab:f9:
         3b:a8:2d:18:ca:a2:f5:7c:5e:e6:3c:e8:46:07:79:de:8d:01:
         e1:f9:58:45:24:28:ba:8b:92:0f:d0:b5:f4:0e:ce:00:92:a0:
         a7:06:2a:78:b3:a0:53:36:3d:bc:0a:4b:0f:0c:d1:36:57:84:
         5a:69:5a:2e:f6:3b:e8:62:7c:94:b0:a2:c1:11:40:5b:c1:82:
         96:90:29:72:2f:88:0e:27:06:20:10:4e:53:c0:49:b2:0f:f1:
         a2:9f:b3:c2:ec:b4:9e:82:c0:1a:09:bf:ef:90:6c:e4:d1:cd:
         b4:00:b6:28:b6:0a:3e:fd:ea:5f:4e:55:70:5a:65:34:c4:8c:
         89:3e:d0:86:9b:fc:0c:2a:f2:d8:1e:0a:a3:c5:dc:40:62:ec:
         eb:6c:49:9d:e5:69:8d:34:70:42:89:c5:4f:27:23:26:03:7a:
         92:f8:d9:aa:7a:61:10:77:49:bf:2c:8e:4a:2b:3e:58:01:46:
         c5:c1:bd:0a:32:47:c1:69:cf:8d:89:4f:21:64:72:80:9b:6f:
         1a:bf:0c:a6:02:c1:00:e7:21:10:06:3c:64:e1:8b:61:87:fa:
         8e:1c:8b:9d:81:82:93:76:d7:9d:92:7f:49:79:fc:b9:34:46:
         ab:c0:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org