Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e8c0f7-453d-3860-beb2-ade4bfe50834.roa
File:                     07e8c0f7-453d-3860-beb2-ade4bfe50834.roa (raw, json)
Hash identifier:          2ZGLU/PXM5GPmJ80QQ6S+n1cQ+oGuyd6hBIk2CnMai0=
Subject key identifier:   D1:03:13:E8:AA:F8:D1:31:B7:30:A5:C7:88:34:EC:11:86:14:16:73
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D9725A6714821FE88E780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e8c0f7-453d-3860-beb2-ade4bfe50834.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:838d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:97:25:a6:71:48:21:fe:88:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=000bf709-295b-4694-bbe6-61fd59487436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:d9:2f:89:36:33:dc:d4:7b:94:60:e7:c7:
                    19:ac:a0:5e:bf:e3:1b:c7:cf:93:54:2f:9c:b5:c6:
                    6f:fa:3e:12:36:b0:86:6b:22:1c:3a:30:e9:f7:19:
                    0b:9d:c3:6a:fa:5b:1c:3e:ca:bf:fc:39:3f:09:2b:
                    cf:00:1e:68:8c:63:26:91:73:5f:ed:6b:c1:6a:2e:
                    4b:99:99:d9:d9:4d:9d:6d:76:72:44:14:8a:6b:dc:
                    69:6f:4f:3a:7f:28:c8:c7:f4:94:e1:34:53:27:8b:
                    05:39:0f:ed:44:cf:1d:5b:da:df:3a:c4:cd:bc:a9:
                    af:f9:bf:70:9b:7d:c1:eb:c8:91:cb:7c:ac:35:b0:
                    91:1d:ad:40:dd:6e:e9:a5:c6:46:83:e9:32:32:43:
                    42:3b:b0:01:ca:6a:f5:aa:c9:72:09:ab:ab:a7:92:
                    64:9d:20:b4:d3:1e:79:db:bc:58:ce:a4:7d:fd:8c:
                    88:74:31:d3:5e:1a:60:4b:5f:41:bb:27:a3:b4:60:
                    c9:6f:49:db:83:ef:d4:27:ea:78:a5:92:8a:09:cf:
                    20:6c:ff:61:01:12:70:b6:bf:fd:ea:79:26:e5:7f:
                    66:e8:47:11:0d:c2:cc:82:8f:1c:f0:2b:6b:92:db:
                    1a:13:5a:1a:e1:88:8c:47:11:7c:17:cd:43:d3:c0:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:13:E8:AA:F8:D1:31:B7:30:A5:C7:88:34:EC:11:86:14:16:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e8c0f7-453d-3860-beb2-ade4bfe50834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:838d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:fb:47:2d:b1:5f:3c:7d:8b:a8:9f:02:0d:56:5a:01:61:
         15:55:1e:ec:db:6f:ce:e5:f4:d0:28:f1:b3:0f:30:4a:46:03:
         3f:a5:93:d3:33:2c:8e:50:61:11:43:72:1e:1a:06:14:05:61:
         c1:c4:6a:83:93:5a:db:a4:2a:9e:8b:79:9e:b0:03:c7:b5:c5:
         09:a5:56:51:4c:e7:c1:93:a6:d7:4e:a1:3d:22:ac:c0:d5:3c:
         69:df:e1:25:5a:9a:3b:9b:2a:f1:f0:b2:9a:31:43:8d:4e:23:
         71:01:b3:47:04:10:8d:ae:c8:6e:79:99:47:a2:d1:d3:c1:b2:
         61:db:e5:41:b8:3b:6c:d7:a9:c3:37:e7:06:e4:05:86:56:b3:
         32:43:f6:11:92:68:49:2a:4d:89:b8:2d:af:99:7b:a3:04:78:
         57:61:74:4f:f8:59:8c:78:87:7e:a5:06:bf:5d:2a:c0:64:79:
         a9:45:62:55:7f:f6:51:0e:c3:50:08:46:da:bb:aa:50:8a:aa:
         e2:e2:c3:99:2f:74:6e:2d:c2:7c:08:6d:31:5b:37:e8:b3:8f:
         de:98:83:f1:7b:52:7a:89:2f:87:55:ec:f3:42:0a:ee:46:fd:
         58:79:b5:5f:3b:94:2c:4e:d8:a0:0a:41:4b:b9:8d:6a:8d:28:
         6a:85:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org