Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
File:                     5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa (raw, json)
Hash identifier:          /7xwITKd0oc92QBhMWAKoTXQvY87GpX3thEvhLhNO6g=
Subject key identifier:   93:E9:D0:AD:3D:3B:B6:38:98:47:2E:F9:26:9E:64:62:81:CA:89:69
Certificate issuer:       /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial:       010D0C9F4328584582E3B09EA0C3C932A64D37B0
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa
Signing time:             Thu 11 Apr 2024 14:59:56 +0000
ROA not before:           Thu 11 Apr 2024 14:59:56 +0000
ROA not after:            Wed 10 Jul 2024 14:59:56 +0000
asID:                     399989
IP address blocks:        2607:340::/28 maxlen: 28
                          2607:340::/29 maxlen: 29
                          2607:348::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:e3:b0:9e:a0:c3:c9:32:a6:4d:37:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
        Validity
            Not Before: Apr 11 14:59:56 2024 GMT
            Not After : Jul 10 14:59:56 2024 GMT
        Subject: CN=717e708e-2a5e-4c7d-97c6-100643146c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:15:86:2e:99:be:cb:34:3b:fc:10:cd:ff:
                    99:c8:7f:c8:03:24:f5:a6:3f:3d:c2:91:80:ce:eb:
                    19:14:44:bc:37:17:c6:b8:6d:68:4a:fa:fd:97:7b:
                    ee:32:de:1c:ec:0a:53:3b:eb:ba:3d:16:2f:c7:9b:
                    42:2d:e0:b3:95:20:10:ae:0d:75:16:0b:41:82:67:
                    58:5c:6c:d4:4a:e1:8b:3e:b4:97:c7:fe:5f:59:d6:
                    c3:e3:ab:16:16:68:ce:79:73:bf:2c:9e:37:d5:26:
                    e0:c7:e0:35:d8:1f:31:2a:b8:0a:65:dc:db:75:e3:
                    04:53:09:18:90:a6:cd:bc:9d:94:d9:85:ae:bc:1c:
                    fa:f5:ff:96:b3:5a:9a:31:18:82:70:a7:24:b1:ce:
                    6c:3c:53:a7:9d:03:fc:1e:38:ef:ac:49:de:75:ab:
                    a8:26:3c:8e:22:ac:e0:5b:c2:33:49:9c:e7:45:5e:
                    67:96:96:24:2f:f7:d6:5e:db:85:82:f4:bb:1f:b8:
                    f9:df:5e:ad:08:ba:e0:b1:ad:e9:76:75:2f:20:de:
                    be:c4:fa:92:eb:7a:d2:0d:52:38:1b:10:28:9b:c3:
                    34:b9:3f:22:11:ae:19:28:fb:b3:5e:10:f9:ca:dc:
                    f2:55:34:5d:b5:a5:50:3d:73:1e:de:f2:bc:e5:6c:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E9:D0:AD:3D:3B:B6:38:98:47:2E:F9:26:9E:64:62:81:CA:89:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:340::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:cb:e3:2e:a4:e1:41:27:59:bb:68:33:51:82:2a:77:82:
         28:cd:5d:1e:0f:fb:a7:63:43:34:11:e3:ea:29:0f:97:e7:5d:
         c3:a5:7d:91:5a:25:4c:a1:2e:8f:52:0d:09:dc:8c:2c:7c:9c:
         02:06:9a:de:18:9a:55:6c:3d:3a:74:21:00:94:8b:e7:ad:95:
         64:f1:c7:88:2b:4b:49:5b:e1:4a:b5:97:c7:a8:0e:fc:9d:7a:
         f3:e2:52:42:a8:fb:10:7c:e8:a0:35:c4:ab:1e:31:99:ec:ad:
         94:d8:86:55:da:36:62:78:53:40:fa:34:14:2f:e7:93:d9:bd:
         99:35:08:da:1a:9f:78:11:3e:34:41:7c:5e:a3:db:7a:ac:c7:
         bb:35:f0:88:15:f4:cc:4b:be:52:8b:f8:19:f9:76:f5:b6:e4:
         ee:39:c4:c5:f4:c5:bf:42:4b:2d:58:4e:67:ad:2f:d8:97:7c:
         76:be:74:6d:b0:27:87:a4:d9:ae:85:1e:09:82:f2:87:47:ce:
         b3:ad:83:0e:bc:0e:88:c0:17:f2:df:a6:95:25:e2:3d:bf:74:
         ae:3d:27:b5:be:50:30:0f:75:09:26:b5:5d:4c:95:cc:92:92:
         a8:70:e6:25:02:cc:81:23:6a:68:97:30:50:3d:3e:1a:48:78:
         3c:b1:49:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:54:13 2024 by rpki-client on console-fra.rpki-client.org