Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1077f147-9d78-3b5c-b702-4198d3ef32d9.roa
File:                     1077f147-9d78-3b5c-b702-4198d3ef32d9.roa (raw, json)
Hash identifier:          7YuJ9np6CuTIy8JcERTvggApYGEGHcJoPbi5puQiQqU=
Subject key identifier:   3A:16:E8:B6:21:F1:7B:88:72:43:78:44:63:1D:00:59:64:39:C3:A7
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584593689725ABFEB8DE98865E80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1077f147-9d78-3b5c-b702-4198d3ef32d9.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     20454
IP address blocks:        2607:6002:100::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:97:25:ab:fe:b8:de:98:86:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=abc477c0-0799-4dc0-a7e6-a0b742714ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:90:ce:82:1d:e9:dc:ea:21:26:4d:1d:bc:
                    b0:0e:45:cc:e5:4c:6e:6c:f0:26:6d:0c:f1:54:43:
                    19:59:4f:e7:d2:ce:bf:59:07:36:26:98:be:ab:44:
                    09:8d:f6:8c:c1:b8:55:a5:ed:a8:b2:0e:10:a8:c1:
                    ff:81:11:e3:4a:3c:0c:cc:1e:68:94:b4:6d:f7:8d:
                    d9:e8:7d:13:bc:dd:c6:d0:da:4a:e8:d5:93:40:25:
                    1f:7e:36:2e:f4:e5:a9:fd:92:66:8e:8e:db:7a:a6:
                    6f:2e:cb:f0:59:04:d2:2b:21:92:8a:0d:6d:59:69:
                    5c:fa:3b:68:71:e4:af:33:17:27:45:c7:bb:54:38:
                    55:51:2a:59:02:f2:4a:bf:f6:e0:bc:ed:54:6d:28:
                    2c:0c:1e:a8:e3:1f:e5:73:38:7b:ad:bc:21:34:16:
                    86:38:71:f6:d5:dd:de:3f:1f:ed:06:67:93:f4:00:
                    3a:69:c7:81:8d:93:42:b3:19:f8:d7:b0:93:29:58:
                    4d:6c:0f:dd:b3:04:52:b3:c1:54:81:4a:04:4f:c6:
                    70:d9:8b:bb:88:18:a5:69:ea:bb:a4:10:1c:e5:b7:
                    b3:67:dc:e7:2a:94:4f:3a:31:e0:7c:6a:f8:01:4d:
                    0d:60:55:9e:29:11:73:da:7e:02:4d:d1:03:dd:5d:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:16:E8:B6:21:F1:7B:88:72:43:78:44:63:1D:00:59:64:39:C3:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1077f147-9d78-3b5c-b702-4198d3ef32d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:57:39:d7:80:f5:5a:02:9d:d5:93:f1:af:fb:95:ad:7f:8e:
         34:20:47:60:6f:db:6d:a5:b0:98:ed:cc:76:5b:53:5c:ec:c0:
         d6:24:d3:70:ca:74:e1:bc:f5:a7:ce:99:d4:f2:a0:dd:86:e5:
         39:59:77:b5:a0:b4:15:90:11:fe:98:7b:df:76:2b:d5:5d:af:
         01:09:3b:a7:f5:62:40:08:a9:af:f8:d6:e1:8d:f9:77:97:32:
         70:79:35:22:4a:03:91:26:5a:71:7b:1d:e1:a8:ed:e6:be:5f:
         76:34:e6:5a:fa:b9:c4:55:85:c4:60:40:3e:7c:df:15:45:ff:
         a1:90:d3:ea:9e:f4:f5:d4:72:06:dc:80:b7:43:82:65:db:7b:
         9e:ab:19:a1:47:d8:41:64:ec:c5:a1:6d:ed:33:3f:44:b2:18:
         ea:d8:dc:f4:f9:44:91:96:bf:80:84:28:29:db:fd:6e:93:75:
         bb:b3:00:9d:bd:7c:a0:67:2f:a7:91:37:a2:a1:5e:b6:10:db:
         5d:a2:16:69:da:a7:a1:ca:2c:bc:12:9c:91:e0:5c:2d:01:63:
         4a:d4:39:f8:76:a2:b7:4a:3b:dd:0e:eb:df:51:cb:27:01:8f:
         01:70:e7:e9:4a:34:ab:00:f7:ac:1a:69:c7:49:e5:96:26:5f:
         9f:8c:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:05:07 2024 by rpki-client on console-fra.rpki-client.org