Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a6b8944-f791-3f5d-acdb-3b846825a024.roa
File:                     0a6b8944-f791-3f5d-acdb-3b846825a024.roa (raw, json)
Hash identifier:          R5ZXJsvmyVnucjOG8n9gUYLIOgqve8Ys8GMmWm//RNI=
Subject key identifier:   B2:3C:EE:C0:71:BE:C2:17:83:B8:CA:68:52:52:97:4F:40:01:8C:C1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3130663F6DE3709679680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a6b8944-f791-3f5d-acdb-3b846825a024.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8290::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:13:06:63:f6:de:37:09:67:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=13e06074-9bb1-4aae-b2be-bd1e1594cb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:c2:ce:b0:aa:d3:44:4c:d9:3c:c9:08:c0:
                    a3:e5:a6:a5:29:5f:09:4b:10:64:0f:99:b1:3f:98:
                    23:40:54:4f:75:f7:ca:a0:99:b7:f9:18:20:ed:08:
                    bc:9c:d8:ef:0c:9b:39:c3:10:03:f9:19:ab:2a:1a:
                    7f:13:71:62:06:06:9b:01:47:84:40:37:43:16:37:
                    39:8d:0b:1e:b9:d9:8d:f4:8a:d5:23:49:fe:83:f8:
                    56:01:7b:64:a2:cf:a2:ec:0c:c7:98:d7:c0:fd:d1:
                    15:2b:82:6b:f0:94:8f:2f:18:9d:df:43:94:8b:0c:
                    fd:f3:4a:3f:77:a3:bc:08:d0:9b:91:6a:88:7d:7b:
                    8f:c6:7a:ed:de:2d:59:4d:21:ec:83:5e:0a:cb:fc:
                    89:4c:59:70:1e:12:c0:c0:77:f7:f7:b6:e2:e9:7b:
                    35:0f:d8:39:53:48:74:72:87:2f:4f:0d:b0:9c:b5:
                    1a:23:02:e7:18:40:3d:89:be:97:bb:41:17:7e:0a:
                    e0:3a:02:5c:83:0c:5e:4a:90:1d:db:d8:1c:79:a7:
                    f9:51:2a:71:62:ed:09:49:7b:23:94:be:27:3f:9a:
                    a1:4a:6e:c8:f6:bb:5d:cf:d9:9a:c6:fe:13:5d:36:
                    b7:44:d1:8f:85:f7:cd:e8:78:3b:29:ad:5a:7c:87:
                    df:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:EE:C0:71:BE:C2:17:83:B8:CA:68:52:52:97:4F:40:01:8C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a6b8944-f791-3f5d-acdb-3b846825a024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8290::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:58:f8:9d:b9:32:0d:47:56:0a:e3:c4:16:a2:9d:3a:48:fb:
         ad:e0:94:c0:06:d6:b9:87:18:8e:3a:fb:17:6f:2b:f7:06:c6:
         cf:a6:09:b4:94:a7:65:d5:ea:c6:6f:66:91:20:93:b6:a4:57:
         38:26:58:35:4e:50:eb:eb:b7:55:47:c7:03:2f:48:5d:a3:68:
         b6:ce:cd:7a:aa:b7:b0:f4:ec:57:1d:53:fd:89:5d:70:7e:fd:
         56:79:3e:41:7b:2c:7a:8c:55:f6:80:fe:40:95:85:08:f2:c4:
         47:d9:6a:e2:ef:43:8f:8a:cb:a6:7f:89:e6:1c:b7:3d:19:a5:
         c3:7b:16:f0:65:79:b0:8c:e0:de:aa:d9:a6:4b:bb:b9:62:94:
         85:1a:62:96:e9:bf:3b:03:ce:b4:f1:09:9b:d6:23:a2:20:80:
         d4:dc:7c:72:14:26:23:38:ce:02:71:1e:bf:d0:96:47:86:13:
         98:40:12:55:f8:6d:d6:84:2f:f1:38:91:ad:16:ce:19:28:61:
         50:c7:49:2c:e4:d7:24:76:92:89:83:69:39:2d:e1:34:e6:c0:
         cb:51:28:c1:f5:5b:a0:ee:d8:b7:0c:cd:e9:12:ae:4f:6d:c7:
         7d:28:0e:88:99:b5:64:ef:3f:e6:8e:f5:33:76:5e:ee:7f:1d:
         49:12:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:44 2024 by rpki-client on console-ams.rpki-client.org