Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa
File:                     83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa (raw, json)
Hash identifier:          OTnuKtq9iuY8R+hvZ7e6Z4XO+PoGw6PRdsqiqHS7OeI=
Subject key identifier:   00:27:9F:A2:44:38:52:A7:B2:86:5B:90:10:A9:DE:09:18:7D:CA:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD30766A1B8357BF2AA60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     701
IP address blocks:        2600:4040:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d3:07:66:a1:b8:35:7b:f2:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=7ec1ff7f-076f-4f9d-b345-0650ee6cd83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:65:f7:ff:1e:a3:c5:f0:b4:ed:f2:37:a5:
                    48:c7:e5:c0:f5:d8:29:c1:30:85:ff:c1:75:1a:91:
                    af:80:fb:c8:ab:9d:2b:65:30:e0:17:d1:ba:87:5d:
                    8a:b9:b5:37:f5:95:f1:b3:75:57:ef:2d:f0:e5:92:
                    73:bb:17:3d:3a:ca:e7:af:29:e2:5e:6c:7a:41:c5:
                    c2:4b:b1:eb:74:a0:f5:b5:f0:26:6a:c8:13:0e:cf:
                    94:f6:8c:89:0f:42:64:3a:74:e3:21:2f:ad:15:be:
                    cc:be:ea:5c:dd:86:d7:f1:60:eb:4a:43:a0:f0:6c:
                    ea:72:e2:a8:a7:e2:ba:b5:43:c6:80:bb:38:7e:7b:
                    49:d0:c7:de:0b:8e:5a:28:75:2a:17:13:bf:b9:ab:
                    a7:66:40:46:21:ed:8e:63:f6:98:c6:12:21:02:6c:
                    c9:e0:ef:cd:18:fe:d5:92:08:67:63:4a:cb:7f:9d:
                    d0:ce:3d:6d:18:19:fb:b6:2f:c0:d4:60:7f:1d:59:
                    26:43:9c:ec:98:1d:5f:dc:ae:5f:c5:0c:16:89:71:
                    97:7e:12:27:ad:fa:3b:a9:93:20:32:a1:6d:1e:f8:
                    0b:00:31:bb:d0:12:2a:0d:85:56:5e:16:8d:2f:a0:
                    9f:a3:a2:04:6a:92:db:76:65:af:76:58:d8:ba:12:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:27:9F:A2:44:38:52:A7:B2:86:5B:90:10:A9:DE:09:18:7D:CA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83077bfd-3b3d-3dc8-b271-7f818ea047e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:e2:e3:bb:d1:87:76:7f:19:c1:5a:fb:17:95:47:97:3c:
         41:40:96:df:64:00:13:fc:2c:71:2f:17:a1:5b:e8:e7:b8:5e:
         6f:83:73:27:31:9c:0c:34:3b:40:77:c8:41:c6:fd:4a:50:f6:
         25:23:d0:a4:b8:b3:b9:cd:9c:dc:aa:1d:f2:3c:1b:2a:63:2a:
         95:d5:43:09:e9:d8:b9:36:8c:ef:e9:9f:3d:14:b7:df:89:dd:
         fe:4e:00:1a:b0:eb:62:ff:75:28:b0:09:3b:7a:cd:2f:09:c0:
         91:15:8e:a6:b3:38:3d:4c:fa:9e:77:4d:61:d4:72:77:88:45:
         13:50:ed:77:ff:37:4f:d5:c6:12:76:56:a9:c1:94:1b:af:42:
         bc:aa:45:de:09:cd:aa:80:0e:f9:db:6e:1d:5e:1f:66:7b:0e:
         a4:c8:1f:c2:53:f2:5f:71:60:02:9d:2d:03:b4:cd:75:e8:7b:
         a8:c4:b3:31:f8:c0:bb:dd:7d:a2:52:a5:57:cc:c9:c3:6b:46:
         5c:18:4d:88:7c:ee:9f:9e:7f:11:4e:12:25:3f:b5:27:e2:20:
         00:b7:69:6a:1f:a6:f2:d8:6c:a8:57:2f:b6:c2:56:8b:23:a9:
         00:16:03:27:b7:7c:a2:23:c8:e3:c0:ec:3e:77:e1:f3:86:c8:
         c8:81:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:25:03 2024 by rpki-client on console-ams.rpki-client.org