Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa
File:                     045c24b8-a486-3aa2-95ef-291079741bda.roa (raw, json)
Hash identifier:          +L0x4Chb/inRNnqqgIosO6TPwrhaeBOU93ptmTe5cDY=
Subject key identifier:   56:B6:5F:FD:D9:A9:86:2E:67:88:2F:AD:1D:BB:A8:40:6A:2F:B0:51
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F6087A1043BC957AF320
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8111::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f6:08:7a:10:43:bc:95:7a:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=b29ce131-6c93-4c65-b215-1812e3014c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:ea:b4:d1:36:db:da:70:12:73:32:e7:8f:
                    de:ce:9b:30:54:1e:aa:b5:16:32:a8:23:5b:de:00:
                    ab:76:16:ed:d1:32:54:91:ae:63:c0:f1:39:21:24:
                    c6:57:f3:ec:45:8e:5a:6f:8d:d2:fd:74:fa:49:0d:
                    e1:17:14:1b:b7:33:90:06:d1:f2:d6:1b:77:76:89:
                    99:96:58:27:ad:d2:09:09:3f:07:23:cc:99:b4:95:
                    45:6b:89:1f:b2:ce:2f:30:b9:8e:b1:60:b0:46:ec:
                    cc:98:28:5a:2f:db:f8:dd:94:3a:54:95:49:c4:2e:
                    19:b6:e1:50:3a:42:e6:03:a2:de:3e:9b:60:43:00:
                    05:60:98:c4:87:5f:42:b3:6c:cc:65:3c:7e:97:ba:
                    ba:e5:e9:62:ba:56:46:8a:1e:4f:28:92:61:0b:18:
                    f4:88:25:48:45:16:94:ad:8e:12:61:e1:4f:3f:f0:
                    96:f6:52:54:fd:27:fa:c0:d0:d3:c4:6b:fb:02:df:
                    11:3d:19:34:f8:34:dc:79:6d:bf:d3:37:20:bb:91:
                    c2:d6:a4:25:7f:13:99:c1:a0:ca:40:0a:a2:c1:99:
                    38:ad:61:df:3b:86:db:a4:33:a9:54:97:f1:70:00:
                    84:87:f8:82:c7:7b:d3:e1:e5:50:02:8b:2b:85:45:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:5F:FD:D9:A9:86:2E:67:88:2F:AD:1D:BB:A8:40:6A:2F:B0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ed:57:1d:77:2f:2e:df:68:19:25:63:e6:97:aa:f3:8b:7f:
         51:60:6f:d4:8e:ad:1c:c5:9d:f4:e5:17:8f:3b:6b:00:d4:2e:
         e5:aa:22:a8:4e:ed:96:74:2c:d3:f1:2c:4f:1d:b5:a7:5c:5b:
         53:d9:14:b9:de:73:d1:e2:40:75:15:64:9f:da:48:75:7e:b0:
         d2:27:98:54:65:f6:cb:a2:f0:66:af:28:19:33:81:99:7f:3c:
         8f:53:f2:f7:32:5c:82:23:cb:d5:59:a1:2d:56:27:21:70:d8:
         4b:aa:80:de:dd:19:53:ce:b2:ee:18:c2:7b:70:12:f5:a1:4c:
         e2:99:20:64:7a:a5:09:dc:a6:58:83:5b:4f:e2:3f:db:ae:d0:
         c7:cf:30:be:f7:71:ae:96:cf:61:7c:56:c8:d1:52:f5:20:d1:
         b0:25:91:b9:45:94:ed:6d:61:73:97:3e:f7:59:02:6b:70:a6:
         5b:63:2d:f1:8f:11:1e:88:94:64:b3:47:c2:fe:ed:36:fa:90:
         6d:95:bd:7d:2b:55:3a:62:0a:07:da:6e:43:5b:41:ef:82:0f:
         93:fc:3d:6e:1f:d3:39:c1:c2:2b:84:89:0d:72:ad:cf:61:4f:
         ac:d0:a2:19:5d:64:99:7b:2a:1e:5d:1c:10:10:15:1d:2d:06:
         2c:51:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:31 2024 by rpki-client on console-ams.rpki-client.org