Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa
File:                     40ae5e84-384c-333f-9c53-a1037447f21a.roa (raw, json)
Hash identifier:          7ajIAsJTu8NGLcErGzvhV9x2+5MbYXLn9535Ua8qcM8=
Subject key identifier:   47:E3:71:98:3D:64:AD:DC:A3:51:80:4B:DF:58:AD:A7:0F:04:7F:92
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285847537B5951559593FD22BCD380
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     19181
IP address blocks:        2607:6002:700::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:59:51:55:95:93:fd:22:bc:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=42891c29-e78f-4cc8-8378-91927063cd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:8c:7c:4d:a7:5a:ba:c6:ca:71:4e:90:dd:
                    a2:4c:9a:96:68:11:ab:b4:2c:6b:f4:bf:70:a0:16:
                    6f:ad:de:a7:4c:57:fb:2c:09:f1:19:41:17:0c:56:
                    a4:f8:3b:f3:2a:4a:25:b1:12:0f:5a:2c:d1:09:f6:
                    59:7a:24:cb:ff:3b:4b:f2:66:28:84:5a:69:0b:55:
                    cd:9d:c9:92:fe:cc:86:ec:91:c7:9f:b1:9c:b6:ea:
                    80:b2:c1:cb:cf:95:e0:b3:03:19:c9:04:dd:2e:da:
                    c0:a8:8e:df:8f:4e:7c:5b:ee:6b:de:4a:b3:94:4d:
                    90:1c:fc:53:37:09:c6:d2:94:31:59:3c:a1:a1:94:
                    83:98:1c:b9:83:64:8d:d5:b4:de:08:90:56:b6:cc:
                    71:e2:fa:66:39:50:10:6d:eb:0a:54:68:64:d7:c1:
                    3c:ec:b1:69:b8:a8:64:12:c8:1e:d0:52:9c:d9:4a:
                    ee:01:39:ee:55:9e:63:85:43:d3:d1:74:03:54:09:
                    fd:96:ff:11:23:56:13:f1:98:9d:81:5c:17:27:f1:
                    bd:ae:66:5b:74:47:5e:60:63:19:d5:ee:54:a2:e9:
                    12:45:90:2a:7d:17:d8:9b:b1:60:bf:40:20:57:9e:
                    53:d8:99:dd:db:ef:ed:f4:1d:37:e2:33:22:a9:58:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E3:71:98:3D:64:AD:DC:A3:51:80:4B:DF:58:AD:A7:0F:04:7F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:57:cf:cd:0b:e9:08:64:37:37:1f:a2:8a:48:ff:2c:bb:
         74:a2:83:43:af:49:ed:87:dd:ea:d4:78:0a:fa:69:de:5b:13:
         7c:5a:8a:f5:3d:f1:a5:9b:dd:82:4e:28:36:ee:c4:39:e9:27:
         33:59:49:ba:5a:e1:ec:01:53:44:97:83:bf:1c:77:35:80:1f:
         8b:68:44:74:28:50:db:ab:99:b5:c8:dd:3e:d8:aa:31:73:13:
         6a:ef:2d:d6:c2:51:17:50:89:fd:fb:19:82:22:da:0d:ef:44:
         dd:33:4c:46:bf:80:de:8a:9d:6c:02:51:38:b8:f9:52:6c:d6:
         f1:fa:b9:95:2c:47:ec:74:3f:61:2a:d3:fe:07:9a:de:35:00:
         8d:61:ab:22:bb:7b:b0:c1:ed:10:fc:4c:21:90:8b:81:41:a8:
         d6:b0:08:cd:02:d0:78:4e:95:24:4f:87:9e:47:84:8a:d9:0a:
         fe:65:b2:9c:12:31:f6:ef:0e:af:d7:b9:f9:ba:b1:63:a4:71:
         4c:c8:e4:4c:df:48:66:40:9f:ee:c3:8c:d7:ce:3c:7c:74:ca:
         56:54:0b:a9:54:1a:15:21:90:97:af:8b:f3:2e:15:4a:94:b5:
         0a:3b:fa:6b:ed:76:70:be:0e:f4:cb:cf:e5:07:ec:23:36:0b:
         c6:bb:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org