Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
File:                     cd15af34-f6a2-3d65-8643-9862111885bf.roa (raw, json)
Hash identifier:          7M8T7WkVA5JDzRj9k6QGUVRdVl25j7LhznvlceVvQJs=
Subject key identifier:   D5:E6:03:01:70:C1:0D:78:8A:FB:AF:1E:AB:D9:37:4C:DC:64:CE:6E
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285845909DE8E4FDB640C52BBF0B00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     12189
IP address blocks:        2607:6000:300::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e8:e4:fd:b6:40:c5:2b:bf:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=78e351c4-e7a9-49a3-a114-2add94f4d8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:9d:12:27:6e:ae:de:19:08:fe:71:fa:67:
                    2d:1c:fb:7c:96:ab:48:94:bd:35:64:6b:c1:b3:32:
                    20:d9:9f:eb:9e:5f:97:d0:9d:0d:79:0b:be:29:b9:
                    4d:3f:40:b1:04:3d:03:de:3a:ee:f9:05:f6:44:c8:
                    4b:89:38:e0:ad:86:0b:06:54:eb:ed:3a:a4:58:00:
                    92:6a:fd:8d:2d:07:28:4e:d4:4e:04:50:26:30:19:
                    1f:41:c8:e9:5c:7d:fb:02:81:16:6b:5d:8d:5d:bd:
                    7b:e3:ba:a6:bd:0b:57:aa:c2:69:ed:26:25:2b:5d:
                    cf:8e:6c:e6:94:12:8d:92:85:89:db:1f:3e:c6:99:
                    5c:15:eb:d9:20:79:77:83:72:80:ec:80:f2:52:4d:
                    d8:44:28:d6:47:9c:b3:4c:31:b6:cb:3b:50:76:e5:
                    bd:38:ea:ae:b7:26:24:f9:65:c2:42:a9:1e:b6:f1:
                    7d:eb:fe:ec:51:db:bb:e1:9f:bb:bc:a2:54:76:88:
                    cd:fb:d9:3c:51:8e:b1:4c:6a:01:9b:d1:35:42:17:
                    d1:b9:a2:0b:39:a7:b2:e8:f8:8e:3d:4a:d1:b2:4b:
                    7c:8e:6d:53:d9:88:8a:0a:a8:76:eb:f6:0d:6a:96:
                    e1:93:0f:c6:4b:97:93:14:67:2f:3f:5d:23:6e:77:
                    13:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E6:03:01:70:C1:0D:78:8A:FB:AF:1E:AB:D9:37:4C:DC:64:CE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:15:a1:53:be:ed:df:5c:80:6b:0e:d7:c9:49:f9:07:68:
         64:d8:ec:6a:51:0a:a8:3c:57:fc:f5:5f:9a:36:dc:d6:4d:a2:
         db:df:c4:6b:29:c8:3d:c2:15:c9:3a:1a:a9:8d:c4:44:0f:19:
         30:fe:ee:d1:16:ef:d4:a0:98:cf:bc:05:56:bb:a9:50:00:ee:
         9d:39:8c:4a:ca:29:3e:f1:fb:11:20:ee:3b:5a:65:f0:9f:fa:
         6a:1a:8b:2b:9c:95:b4:e4:27:e5:f3:c4:9f:08:58:40:ee:03:
         2a:b8:2a:f3:25:71:b5:c5:df:5f:32:b5:26:57:6c:c7:5d:2b:
         a1:29:76:05:cf:2a:a0:71:de:26:42:b6:92:8b:63:bd:9a:11:
         22:3b:a0:d5:a7:99:bc:91:89:24:7d:8d:3d:c4:1c:d9:bf:98:
         e4:b3:43:88:3b:99:1b:f9:34:34:a7:60:0e:64:5c:bb:8b:7f:
         e8:b8:af:6e:b3:34:3c:e1:f0:36:89:0f:2b:d4:73:9f:e9:c8:
         41:d4:61:b4:3f:58:06:0b:12:24:5b:6d:3d:72:45:69:e0:7f:
         11:42:29:63:4a:13:03:30:de:0e:8b:72:5f:e3:1d:37:ee:db:
         38:03:5c:a1:9a:3b:f8:36:2a:dc:2c:37:70:db:8b:35:bb:e3:
         b9:7b:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:39:27 2024 by rpki-client on console-fra.rpki-client.org