Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c693926-6eee-3934-8fbd-f75a479cc8af.roa
File:                     0c693926-6eee-3934-8fbd-f75a479cc8af.roa (raw, json)
Hash identifier:          BcsaG2YAn6jKK6eOkghcLf9PvnNKAJwVOFrN6uf38vk=
Subject key identifier:   C1:B3:ED:AC:E6:37:EA:C8:DF:2F:2C:6F:9F:AF:7B:93:A4:80:92:BA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5ECB3F2F5D2547ECEDC60
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c693926-6eee-3934-8fbd-f75a479cc8af.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8384::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ec:b3:f2:f5:d2:54:7e:ce:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=3c74f1c6-f769-42f8-a750-6c0a1760fca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:b1:41:70:24:2e:f7:14:6c:99:16:5d:23:
                    9d:91:11:e7:ba:c1:56:c1:bc:db:d2:df:93:18:90:
                    57:07:62:6a:62:75:d8:00:fe:72:7f:5b:db:e5:24:
                    08:dd:25:2a:be:cb:43:61:be:cd:1b:5b:8e:a5:52:
                    05:08:aa:7a:77:bc:0d:af:79:70:c5:3f:fc:6c:ef:
                    81:ba:c7:48:f6:d9:bb:64:61:18:8f:ec:29:05:08:
                    f8:7e:83:b0:d9:7b:7a:64:75:0c:6c:91:1f:ce:e2:
                    90:cf:0e:53:c4:8d:ba:ad:59:15:fb:f6:ee:eb:63:
                    00:ec:1f:8f:83:a8:f7:65:ef:52:42:d0:13:6e:5a:
                    49:94:84:57:e5:6a:35:96:38:a7:0b:f4:69:cb:e7:
                    04:e5:73:c7:ca:21:fe:bb:35:62:79:c0:9f:bc:ea:
                    95:cb:55:8d:d2:a4:a9:22:7c:f3:ac:ed:73:1a:7a:
                    f9:3a:42:5b:d4:56:6c:da:18:4f:cf:cd:c8:b4:d7:
                    3c:43:9a:31:35:36:73:65:1e:fa:46:27:91:8e:da:
                    06:5a:9d:57:7f:99:5c:0d:22:e6:13:16:4a:80:a7:
                    7b:d6:9e:11:a7:83:0b:ad:ab:8d:4d:f4:17:41:be:
                    d5:c7:f1:8a:4c:be:8d:d3:8e:49:07:09:2b:e6:45:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B3:ED:AC:E6:37:EA:C8:DF:2F:2C:6F:9F:AF:7B:93:A4:80:92:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c693926-6eee-3934-8fbd-f75a479cc8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:89:ec:b9:90:89:f1:7a:df:18:df:42:1c:f8:76:a1:93:
         66:d9:4d:9d:1e:74:86:d2:61:a1:28:12:b9:ff:3f:14:c8:d9:
         85:0f:61:74:03:36:29:7c:db:8e:97:9b:d8:91:58:8e:b2:0c:
         49:23:a6:14:81:6c:f7:fa:ff:4c:eb:66:5e:fc:11:97:ed:b3:
         57:15:81:2e:6f:0a:57:0a:e2:76:55:d8:3f:43:d0:cc:7d:60:
         2e:d3:90:a2:39:43:83:48:a5:21:32:3b:82:49:d7:a2:34:4a:
         39:c7:0f:af:37:c8:f1:7b:1e:d5:1e:25:b2:9c:c1:a4:7f:a8:
         b9:e9:ad:f3:7d:b7:d1:bf:55:b6:30:f4:b2:56:b6:78:61:49:
         b8:55:1b:d4:11:b7:a5:c7:83:f2:75:ac:2f:db:c9:31:bb:d1:
         b2:b5:f5:ff:9e:02:d7:91:32:81:a8:39:8f:f3:70:2c:77:44:
         4c:f4:73:75:ec:2e:ba:81:ca:1f:8b:3b:5f:f5:bd:c9:50:38:
         ca:ea:5a:c5:6e:87:b7:6b:c5:03:62:5f:40:53:91:8c:93:00:
         3d:b5:21:62:0b:79:04:74:d1:ce:2c:d3:f3:00:37:eb:9e:1d:
         8c:25:f2:a3:c7:cd:89:91:7f:1a:91:bb:63:f8:7b:41:dc:13:
         51:a6:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org