Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/eff046e7-f8a5-3479-a47b-188dfdf76f32.roa
File:                     eff046e7-f8a5-3479-a47b-188dfdf76f32.roa (raw, json)
Hash identifier:          ulCV+m1GQr4WvH3W2uUOGG+GL5lQ+m+el3Az7YUn2NU=
Subject key identifier:   45:BE:31:00:32:B7:B4:34:98:2C:B6:52:36:2D:0F:A1:68:10:7A:79
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F432858458F387C5605FB843F0985AF20
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/eff046e7-f8a5-3479-a47b-188dfdf76f32.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     399091
IP address blocks:        2606:1340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7c:56:05:fb:84:3f:09:85:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=99d82a61-5855-4462-a3a7-34ba01111487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2b:04:5b:6c:69:09:89:15:d9:e5:fa:c9:ae:
                    f3:74:3d:9e:27:bb:10:8b:1f:13:b2:80:53:75:42:
                    4c:3d:24:1b:48:a6:73:5d:8f:86:b6:cd:9d:bb:ae:
                    da:f9:72:58:b8:1b:1a:ba:c8:b8:45:e2:a0:6a:d8:
                    d2:5c:e1:56:85:ce:3a:4d:ea:49:b1:56:36:45:89:
                    a4:1c:2b:8d:8e:44:f0:c2:91:fc:fd:f3:c1:6f:b7:
                    6b:4e:53:23:f9:ab:8d:0c:e9:12:7b:7d:8e:d6:a7:
                    4b:a3:9b:1d:41:3d:94:48:2f:03:8d:51:fe:c5:64:
                    cc:78:cc:e3:ac:fd:a7:35:c4:0c:45:2a:6e:06:14:
                    06:6a:b2:78:c6:db:6d:ea:df:b1:19:eb:73:e5:fe:
                    b1:b7:f6:1c:63:f0:84:e0:01:9d:2c:33:c3:e5:9c:
                    0b:79:3b:8b:e2:ba:5b:da:ff:7b:76:64:20:0f:71:
                    bc:2e:4b:1d:6a:12:1e:10:bc:29:39:cb:5c:9e:cb:
                    14:49:30:ce:a3:45:12:96:26:2c:4c:7d:b7:a6:ed:
                    a8:5b:cb:cf:6c:a7:ff:80:94:e5:74:55:1e:58:56:
                    b3:fc:c0:72:2b:fb:c7:65:8e:19:82:60:6f:78:48:
                    55:e8:b5:eb:56:d8:34:5d:e4:69:16:67:d7:0f:08:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:31:00:32:B7:B4:34:98:2C:B6:52:36:2D:0F:A1:68:10:7A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/eff046e7-f8a5-3479-a47b-188dfdf76f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c1:f5:a5:a9:29:17:75:9e:0b:fd:04:fa:06:ad:95:f2:87:
         2d:49:ac:d2:b9:35:76:6e:1e:28:e4:37:bc:56:9f:1a:7b:f7:
         ce:e7:be:7d:ee:8b:25:22:65:ac:7a:e2:4a:81:f2:8a:41:d4:
         3f:72:f4:de:61:1e:97:c2:83:af:39:95:18:b6:dc:8d:cc:dd:
         37:f4:47:a6:1f:5a:1a:d0:33:00:1d:59:da:a1:cb:df:aa:15:
         f7:07:8a:c2:44:fc:aa:5e:77:a5:bd:ee:9d:4f:38:21:07:0f:
         36:5b:f4:7f:e1:8d:7c:a9:08:25:2b:44:f8:b3:27:2e:7b:11:
         11:45:a5:91:34:a0:d6:96:cb:f7:d2:10:5b:89:13:9b:1f:3a:
         e9:03:bd:4a:cf:62:53:51:04:12:ba:ab:58:71:9e:2e:b1:7b:
         74:ed:6e:40:bb:72:38:ab:ae:18:6d:e0:cc:1c:fd:6a:ab:9e:
         f7:7f:8d:67:be:a9:e6:ba:2e:b3:37:af:6d:67:66:d3:3c:f9:
         9c:27:18:53:8d:ae:f6:c0:6e:94:2b:8e:b8:6e:de:bd:d0:45:
         6c:08:64:44:b0:84:1e:d7:62:87:64:d1:ec:ee:f4:12:ef:1e:
         40:60:2a:db:cc:fa:e2:8b:ec:34:33:08:34:ae:32:e6:67:84:
         91:96:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:22 2024 by rpki-client on console-fra.rpki-client.org