Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa
File:                     1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa (raw, json)
Hash identifier:          7IEqPvV2kqa5X7tAjiYkOxpGnftnlvScAAmqi91Aczw=
Subject key identifier:   4B:38:5F:7C:8C:6F:C4:96:E3:95:7A:BA:3A:6C:99:1F:93:1C:1C:35
Certificate issuer:       /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Certificate serial:       010D0C9F43285845A15E116D9DEB93A31FA4BDC0
Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     981
IP address blocks:        2605:ac40:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:11:6d:9d:eb:93:a3:1f:a4:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=f7b94fd7-0570-4ea8-b69c-1a39a33bd088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:d4:84:3f:a9:28:81:13:7c:26:6b:3f:0d:
                    2c:79:95:c3:92:00:ba:f3:44:4e:ee:2c:cf:2b:d4:
                    12:69:28:38:23:08:c4:39:26:65:53:b6:23:ab:1e:
                    2b:9c:03:37:ca:26:bd:3e:23:e2:d4:3c:78:c7:0d:
                    b3:b2:5e:0e:e6:f6:5f:dc:b3:14:6e:86:80:7a:85:
                    f0:f7:60:7e:3e:24:b3:b2:16:73:ae:d3:81:e4:d0:
                    0f:d9:84:f3:1c:fe:2e:b9:1d:fb:95:03:85:6e:3a:
                    7e:e3:44:04:8e:ea:a0:c3:ae:47:1d:1a:e5:97:82:
                    9a:5a:c9:0e:63:9a:9e:c1:8f:b7:9b:56:50:b2:0e:
                    a9:d4:52:11:d2:f8:4c:7d:b1:5a:76:70:22:d6:d8:
                    7f:5e:92:2d:74:c8:9e:16:ca:4e:a3:a6:51:a1:78:
                    d0:97:7a:25:4d:f0:f4:18:6d:f6:17:34:ac:aa:f8:
                    25:7d:60:44:8c:02:d5:4c:1a:a1:82:f8:ac:41:4f:
                    3f:97:99:aa:56:05:85:a4:84:d2:31:42:52:43:66:
                    7a:fe:f3:f0:ec:69:eb:70:70:55:a7:ed:ec:f0:f0:
                    1e:c0:61:af:12:d9:58:3c:67:c3:bd:00:ad:60:51:
                    f9:cf:c5:03:3d:dc:86:26:ee:dc:4d:23:10:23:a5:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:38:5F:7C:8C:6F:C4:96:E3:95:7A:BA:3A:6C:99:1F:93:1C:1C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl

            X509v3 Authority Key Identifier:
                keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ac40:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a9:7a:0d:ea:4f:a3:54:8a:19:7f:e7:cf:0c:19:1f:e7:1f:
         7f:1e:84:85:52:57:81:0f:e3:80:6e:51:b9:09:1a:25:e5:77:
         79:b6:fe:f1:6e:f2:53:43:de:bb:91:5d:e7:e7:a0:c2:53:b5:
         f2:40:d9:b8:f6:df:3b:eb:48:b4:43:5f:45:55:3a:4f:a6:21:
         9d:da:de:a5:07:dd:c2:74:db:09:21:f6:4d:32:2c:9b:18:d5:
         7a:b9:b2:b3:7e:f7:64:ad:0c:c0:2d:f4:3d:1a:e3:7f:b7:62:
         09:d6:5a:27:58:57:30:1f:df:2b:4f:f0:95:a1:98:a5:20:97:
         a8:df:18:bb:7a:50:37:52:00:14:a9:33:c4:f3:aa:bd:55:bb:
         fc:ae:6a:c8:35:56:73:80:69:02:ee:f9:f8:4e:af:8a:38:c8:
         5a:c1:30:2c:3b:29:be:24:91:16:9d:3b:b9:19:82:b7:6c:2b:
         5e:21:66:8a:1a:b5:7c:38:a2:17:8b:92:a4:b4:c1:de:4a:e9:
         cd:f2:42:93:e5:ae:07:b6:fa:5d:dc:75:64:2b:e7:16:b6:bd:
         75:73:9c:c9:3f:ad:a0:83:67:ae:fd:47:97:8d:5f:a5:af:49:
         b2:61:26:2b:8e:8a:e5:28:23:f0:11:a1:58:33:ac:ae:ef:aa:
         ac:9a:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:22:46 2024 by rpki-client on console-ams.rpki-client.org