Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa
File:                     005f5344-a550-335e-b752-433dc39d5f9a.roa (raw, json)
Hash identifier:          ZN6ljf5cSDRLoJsHyAtTRtdsWRPdSSW+a/E+anrmVow=
Subject key identifier:   39:23:AA:52:19:70:79:D8:A3:1D:0D:B4:35:05:A4:1D:3F:B4:A6:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2ACB6C30DBA6D95BEE0A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        2600:4040:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:cb:6c:30:db:a6:d9:5b:ee:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=01fc5542-2280-4a5c-a59f-b1df8420e59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:90:f9:01:37:5a:a7:35:10:18:6a:c9:17:
                    cc:8a:0c:31:f2:47:f6:a4:7a:db:40:33:3f:05:ea:
                    16:a1:a2:df:61:e2:06:60:3f:72:0a:6f:80:5c:eb:
                    69:c5:35:a5:de:9c:43:31:87:32:a5:24:cd:5e:6b:
                    e3:77:a2:d4:a9:66:4b:28:b6:2b:5c:98:cc:fa:02:
                    7c:04:68:b9:e4:97:23:02:e7:bb:5d:ad:8b:02:5d:
                    3b:5b:d3:90:c3:a9:1e:5a:f8:6b:c1:03:71:ec:b3:
                    e6:87:a2:12:a3:1d:a3:cc:a6:88:a9:9b:d0:5b:e3:
                    ec:52:e8:bd:1d:3c:29:bc:97:f0:d2:50:1c:9a:3f:
                    5f:97:0c:8e:e8:70:d5:54:51:03:68:c0:9f:67:a0:
                    8f:14:92:4e:a6:d0:cc:96:d5:8c:17:48:b1:45:ec:
                    cd:81:da:12:1d:7d:9d:c9:1c:f0:46:3b:ed:2d:3d:
                    43:42:a0:55:79:59:11:60:ba:b9:7b:13:69:aa:ca:
                    48:b8:52:22:3a:ff:55:49:36:30:68:5e:46:a0:3d:
                    48:aa:49:bf:b5:16:96:51:ec:df:1b:a2:77:81:64:
                    a3:ca:2e:89:ef:b2:54:4f:39:0c:76:e1:43:be:86:
                    c6:43:59:71:e9:f8:19:ae:19:22:6e:ed:8c:41:01:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:AA:52:19:70:79:D8:A3:1D:0D:B4:35:05:A4:1D:3F:B4:A6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/005f5344-a550-335e-b752-433dc39d5f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:20:ed:ad:b9:4f:25:42:8f:24:70:ae:72:0c:e1:91:e5:
         e7:40:cc:e9:96:4f:4f:be:c5:81:4c:05:76:f1:1c:67:a7:b0:
         ed:24:ad:cb:fd:dd:b9:fa:d0:bf:68:70:68:89:4b:5d:ba:c7:
         59:57:58:47:ef:77:41:a4:e4:6f:a5:79:bc:ba:e4:c4:4b:80:
         67:4c:5c:fc:dd:d3:62:ac:cd:47:09:73:ee:22:93:6c:27:b4:
         8a:0a:67:06:d0:2a:df:c7:8b:16:1e:cb:a1:2b:c6:2b:ab:93:
         69:73:ca:cb:c2:90:96:76:51:9a:71:8b:5e:d5:5f:8a:21:e4:
         d8:ec:ee:68:3a:4f:07:5d:26:bd:35:cb:8d:d1:fe:d6:d2:c4:
         59:59:a3:45:ac:27:fc:f5:bd:5d:c6:bb:fa:8e:14:82:f9:1f:
         c9:e7:46:49:c4:cf:1d:57:3c:6f:2b:a9:a3:ee:f7:51:f8:84:
         26:03:66:68:f2:67:94:57:29:46:70:3a:a8:fd:ea:92:1c:f8:
         d4:86:0d:b8:56:2d:68:28:ba:00:ab:35:12:da:4b:a6:8a:76:
         59:a1:25:7b:92:84:f4:64:99:60:47:cf:f8:cd:c8:f2:21:f9:
         16:bf:57:fd:b7:2a:48:4f:81:ec:27:6b:ad:3b:26:1a:d9:dd:
         d7:30:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:17 2024 by rpki-client on console-fra.rpki-client.org