Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa
File:                     410b7467-8dc1-343d-be62-6eca5954139a.roa (raw, json)
Hash identifier:          Z5nizEovRSdxDumkziv0B37RvYGR+2GSfJDeY7yDO1M=
Subject key identifier:   CE:2C:26:3C:37:4E:DC:98:BB:89:01:72:23:1A:51:1C:75:B6:CA:83
Certificate issuer:       /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
Certificate serial:       010D0C9F43285845CE08F9B0D204D552DC37CE00
Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     399494
IP address blocks:        2604:3b40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f9:b0:d2:04:d5:52:dc:37:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=be3ea35b-2b65-4ab9-91c9-e62a170cc2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:bc:17:8a:f1:0d:da:38:84:92:d2:95:40:
                    95:85:a3:a4:9b:29:cf:e2:b9:95:96:1d:b9:24:ac:
                    a0:e1:b1:00:43:8c:21:88:11:5b:af:86:06:c8:fd:
                    9e:18:26:9f:3d:c1:bd:86:dd:df:08:d5:af:cc:fa:
                    31:f1:d8:97:dc:7d:4f:71:13:47:c1:9f:d6:75:55:
                    26:45:bd:e9:39:79:7d:e0:7d:c4:16:21:0d:19:3a:
                    f5:b8:ec:14:46:9a:63:64:b7:7a:98:0a:54:f7:1c:
                    d3:02:2c:90:e1:77:62:07:ac:39:fd:f4:b9:f8:f4:
                    cb:e4:cf:b7:ff:92:8c:de:90:e7:13:62:7c:3a:7b:
                    24:65:d7:6a:0d:e1:8c:39:ac:6d:7a:80:e3:27:cb:
                    bc:23:13:24:19:b4:4b:79:ce:44:e5:ae:c8:94:d3:
                    65:57:fc:f8:a2:63:fe:e2:a6:c3:bc:de:de:23:77:
                    6e:4f:4c:a1:cf:18:ab:e9:f8:c4:e3:99:6e:ad:54:
                    2d:f4:0f:01:98:cd:c8:71:25:a9:86:e2:01:2b:f1:
                    a6:48:10:24:b7:05:7b:ea:aa:66:d9:fc:fa:64:41:
                    8c:52:d1:b8:e3:ed:92:74:70:74:20:66:8a:8b:95:
                    ef:ed:82:21:a9:1c:8f:37:c2:50:b8:00:33:80:dc:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:26:3C:37:4E:DC:98:BB:89:01:72:23:1A:51:1C:75:B6:CA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl

            X509v3 Authority Key Identifier:
                keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:bd:29:ef:82:ef:c3:73:a8:e3:02:3e:a6:3a:c4:5f:10:
         41:88:7e:e3:0b:64:45:0c:f2:53:94:c9:df:7c:eb:16:7b:24:
         c9:87:17:0e:98:93:4e:0d:ad:3e:99:65:9e:91:c5:0d:f1:5d:
         82:b9:7a:d6:cb:c5:b9:dc:fc:f2:20:00:55:c7:51:82:f7:38:
         36:4d:2e:61:0f:38:66:bb:63:12:bf:61:71:d6:e8:2e:21:a1:
         8f:e1:ec:cf:7a:9e:5a:e6:1c:33:62:10:9f:84:35:3a:41:08:
         0a:44:52:02:b4:cc:a6:65:c4:6c:b9:29:88:b2:0f:32:e4:27:
         fc:2a:d2:4d:a0:a9:6b:37:75:7e:0c:36:2d:48:ac:22:12:56:
         3d:dc:83:4e:79:4f:9a:80:db:40:67:1b:92:b7:f5:42:b4:54:
         2a:9b:f4:88:63:a2:e4:17:1d:ba:14:cc:a4:bf:05:c6:10:1a:
         a4:2f:50:f5:5d:6a:2e:db:e6:34:7c:f8:b3:0a:47:ae:b4:bf:
         bf:f6:64:e2:1d:6f:55:41:e9:72:f0:fa:d2:98:e6:63:b6:ad:
         c7:c5:28:50:f7:7f:b8:0a:d1:86:48:3a:b5:16:ad:a2:91:ff:
         89:a0:51:92:54:fa:85:06:16:45:0d:88:44:e0:7f:27:01:e8:
         5a:7f:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:50:24 2024 by rpki-client on console-fra.rpki-client.org