Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa
File:                     0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa (raw, json)
Hash identifier:          0G1eHXD9PTk0BprfE5dhwhyofE05iLfM0dZGKtdpEBc=
Subject key identifier:   F5:F9:52:F0:0A:AA:79:1C:8F:1D:87:AB:10:73:68:8E:70:89:57:67
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F4328584561284F4A2917D3A4D652A958
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     47869
IP address blocks:        2604:7c00:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:4f:4a:29:17:d3:a4:d6:52:a9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=2a148ebb-1717-4540-990c-90af487a5295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:dd:b7:77:ae:aa:ce:f6:9d:af:03:5e:c1:
                    88:87:d9:8b:88:4d:5a:9d:5f:e0:84:32:29:bc:c2:
                    c2:c7:cc:eb:89:09:1d:07:6f:eb:07:94:48:5f:5e:
                    a0:7b:ac:eb:60:63:b0:c0:83:9c:84:74:3b:9e:10:
                    9e:3d:8f:67:d4:16:b8:5e:8a:7a:e0:02:5f:3a:7e:
                    73:9f:f9:2c:70:b5:e9:c1:51:91:7c:24:f5:15:d6:
                    9c:dc:e5:e3:59:f7:78:4b:bd:ba:fe:0b:c7:d5:2c:
                    95:35:ba:51:9c:73:5b:61:fa:5e:5c:97:ba:de:2f:
                    86:55:59:a2:bb:9b:b0:16:41:c5:e0:26:18:f1:5b:
                    cc:c7:0c:ed:1d:1d:55:0e:b8:7f:ee:9d:8b:eb:8e:
                    6a:05:1f:02:08:34:9e:c8:22:30:b8:df:80:ff:2b:
                    40:4e:ea:6b:5e:8e:25:d5:d2:2f:45:e8:14:74:39:
                    3e:4c:99:6e:c9:e2:21:91:98:cd:eb:e9:cf:df:ab:
                    27:bb:bd:0f:99:0f:9a:4f:a3:2c:54:51:9f:f2:83:
                    2e:1f:41:ea:8e:67:f9:28:08:33:b1:42:e9:9e:f1:
                    1f:c6:cd:2e:af:04:e6:d4:18:b0:70:88:fa:d7:96:
                    a3:93:de:01:5a:8b:39:3a:3a:af:b4:76:5d:58:5d:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F9:52:F0:0A:AA:79:1C:8F:1D:87:AB:10:73:68:8E:70:89:57:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7c00:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:90:d3:33:18:17:d1:a4:4e:f7:56:f1:26:37:57:df:c6:c3:
         0d:5c:46:48:92:78:24:c0:f1:cb:e1:60:39:5d:c9:79:61:ad:
         ba:54:7c:4d:6c:d0:42:80:a8:64:98:c9:21:d7:03:27:f7:82:
         d4:a8:38:d9:dd:29:fb:44:89:dc:ab:36:dc:b2:38:d4:81:d7:
         4f:c4:ab:15:8d:12:7f:10:26:af:40:3f:a8:4a:1f:d6:7e:76:
         14:7c:de:0d:6a:5b:93:22:d0:52:39:6c:5c:55:9c:b9:cc:7f:
         8d:89:a0:8c:c3:61:2a:11:41:05:d7:2a:9c:57:90:45:00:38:
         9d:aa:f6:c7:d2:a3:b6:93:e2:f1:d3:6d:7d:64:ae:a6:61:fb:
         1d:ab:c6:b9:0b:a8:47:a9:2c:fe:f6:d8:0e:27:3c:cb:c2:6c:
         c8:e8:95:5f:ee:b5:c5:25:8c:7d:8c:aa:9a:5a:14:98:70:85:
         4c:1c:8b:7e:d8:e3:01:51:08:6a:33:03:74:1f:fb:87:73:f4:
         4e:b1:88:1c:68:48:f9:96:08:5c:ad:1c:a1:5f:09:7a:4d:14:
         49:9d:de:ba:e0:30:7e:1f:b3:aa:c0:e9:44:18:40:17:ab:1c:
         21:d8:ea:78:8c:3b:40:25:24:e6:6d:87:6c:6d:75:4e:a2:39:
         66:69:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:10:35 2024 by rpki-client on console-ams.rpki-client.org