Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
File:                     04467d97-4061-38b5-9207-71b697628f7f.roa (raw, json)
Hash identifier:          inWK+wvE0ZagtUJ/X5gw0zmtsaPEK4qJi0ot5sf7MY0=
Subject key identifier:   1E:76:E0:44:CC:1D:7F:0C:2B:53:5D:B5:5A:A8:C3:98:C8:AF:70:CA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD6013E59783BF26FA21740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2607:f098:3200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:01:3e:59:78:3b:f2:6f:a2:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=7536572a-e42c-47b7-989a-df16f5c379fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:39:0a:76:30:c8:0d:0f:99:6b:e1:14:c6:
                    09:3b:eb:86:42:46:06:7b:3c:70:83:55:0a:90:0f:
                    c2:41:ca:c3:1f:79:bd:74:10:fa:1b:ac:fd:7e:cb:
                    d3:c5:f5:6d:2d:cb:7b:eb:dd:0c:45:78:eb:75:71:
                    af:90:de:f4:56:57:43:57:11:e4:f0:60:b4:c3:80:
                    30:5c:33:8a:87:cf:b3:bf:31:7f:5d:10:e9:03:ed:
                    d4:c2:53:88:e5:3c:eb:c7:5c:98:bd:f9:d1:a9:59:
                    28:35:85:98:03:88:08:15:3d:9f:2f:3f:96:49:9c:
                    2c:b9:73:a3:58:02:cb:5d:38:a2:6e:2f:9a:89:10:
                    e7:e0:f6:25:89:73:e0:df:32:53:16:d6:42:7f:19:
                    8c:12:1e:36:ad:7e:31:81:1f:03:e1:7d:b8:3c:4e:
                    93:42:2b:4a:6f:f8:a7:9f:4f:68:b5:b3:98:9c:f4:
                    a5:cd:fc:cb:12:51:a8:4c:d0:4d:fa:b1:83:b4:7e:
                    e4:12:1f:f8:f5:23:d3:9b:38:09:af:0a:0a:65:12:
                    46:04:d4:ad:48:54:ae:57:ea:c5:54:25:13:f8:f7:
                    c3:5b:cf:85:42:b2:79:02:c7:ad:89:12:02:b0:ca:
                    90:eb:5a:80:b9:e1:19:81:ec:02:28:37:4f:52:29:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:E0:44:CC:1D:7F:0C:2B:53:5D:B5:5A:A8:C3:98:C8:AF:70:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:df:5a:4c:72:d0:7b:d6:49:66:83:62:92:1b:b6:ca:89:5f:
         63:cc:0a:e0:98:64:ab:2e:03:0a:9f:89:8a:07:09:2c:12:ff:
         00:25:05:60:4d:fd:4c:57:51:9a:ba:b9:0e:cc:8d:20:cd:9e:
         8c:45:78:fe:b4:26:52:b5:f2:e1:15:3f:96:c2:80:c5:83:98:
         84:49:a3:98:64:06:ff:42:64:ba:3a:c0:a5:82:52:3d:0c:f5:
         14:e2:2a:d5:57:85:9b:ab:6a:ed:79:ca:20:81:d1:a6:2b:75:
         7e:1f:02:b3:80:ab:eb:a3:3d:87:c2:1a:42:a8:45:9a:41:ec:
         48:32:1b:2d:06:f1:3e:f9:d3:b4:fc:87:ee:9d:24:16:0b:ab:
         f8:dc:01:67:9a:cb:9f:cc:17:cf:a6:af:82:0a:2c:cf:1d:b0:
         75:77:66:ad:0e:94:3b:f8:3c:d1:b2:70:b6:59:3b:56:9c:19:
         93:31:9d:34:25:22:69:59:35:15:3e:11:7c:8c:5d:10:05:79:
         59:86:18:69:41:3f:0a:b7:5e:8a:7b:d2:ed:2b:14:a1:5d:8b:
         9e:55:ca:ee:23:37:ac:54:ee:fa:a2:bf:64:e2:ae:97:b5:84:
         84:73:c8:55:15:c2:1a:48:62:31:c3:48:36:4e:7f:59:f3:76:
         b4:a3:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org