Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1143d051-2ab3-32bb-9692-e51a05293729.roa
File:                     1143d051-2ab3-32bb-9692-e51a05293729.roa (raw, json)
Hash identifier:          hP7nR7eB3DkgE+ssL1rYZdOw6rd4CUx9CNfqvgqi6VM=
Subject key identifier:   A7:0A:CC:99:D3:1D:1F:57:3C:7F:A3:66:39:FB:64:72:3B:F6:28:47
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD603A40562F04B55CB5880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1143d051-2ab3-32bb-9692-e51a05293729.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8092::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:03:a4:05:62:f0:4b:55:cb:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=159aa81b-ddae-4245-9c44-7cec8480cd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:c7:6a:17:79:b0:65:08:b1:cb:d3:d8:55:
                    18:e9:87:36:2d:ac:4d:9b:f3:29:f2:68:76:c7:f5:
                    68:f7:4e:05:1c:33:c5:cf:81:f2:bc:d6:db:27:ab:
                    df:b5:e5:f0:f5:cd:34:21:08:dc:33:36:56:0e:a8:
                    74:fa:50:77:c3:e5:0e:3f:7b:1b:62:8d:fd:65:6c:
                    d0:7c:d6:bf:fd:72:6e:3b:24:55:41:5a:75:79:13:
                    de:77:cf:57:5e:78:11:41:5b:f6:40:e0:ff:2d:f4:
                    a0:4c:0e:6c:18:32:ff:f0:62:87:29:2a:d9:36:b0:
                    1b:d7:b9:c3:20:c3:dc:7b:ab:3f:b1:6f:61:70:24:
                    e8:c2:27:5f:43:26:b3:60:ca:4f:fd:c7:3a:dc:b6:
                    a6:96:ff:d1:67:37:f7:8f:a6:75:4f:3d:cb:f3:58:
                    2a:41:a8:64:05:b0:2e:1f:3b:ec:2f:99:61:37:4d:
                    2c:68:5b:57:ac:d6:4b:5f:4b:37:c5:03:c0:53:1f:
                    ec:28:0f:4d:9c:7b:8d:82:d3:03:d4:de:9f:46:c7:
                    f5:cf:d3:88:18:f0:ca:73:61:05:21:fe:0e:b5:f1:
                    2d:38:af:54:84:5e:af:6d:42:b0:31:a2:06:25:15:
                    e0:92:88:21:c2:0e:12:0d:ef:f5:ac:62:6a:89:46:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0A:CC:99:D3:1D:1F:57:3C:7F:A3:66:39:FB:64:72:3B:F6:28:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1143d051-2ab3-32bb-9692-e51a05293729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8092::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:92:f0:16:fc:3c:fd:bd:f8:c5:01:bf:b5:8f:75:58:1e:f6:
         46:94:e1:2f:32:4f:eb:5b:88:7b:b3:58:03:d0:b4:84:c2:5e:
         c5:a1:28:a8:24:7e:83:44:32:fb:ef:88:43:46:be:54:37:74:
         80:72:fa:24:ee:56:d5:01:19:e9:8b:f1:0c:7c:ab:52:14:cd:
         1c:2e:30:63:76:93:43:52:91:4a:71:cb:54:6d:72:eb:f2:fb:
         3f:55:ff:5b:e5:75:f6:ae:8c:fc:ef:a6:f4:c1:4e:c6:43:33:
         46:5e:3e:27:d5:70:b4:32:e8:59:1a:ff:06:36:06:4f:55:a9:
         f9:1b:ad:9b:4a:40:50:99:32:2c:89:61:64:ff:e1:d6:94:91:
         d1:11:f2:e9:f6:a9:ce:b8:15:75:55:22:de:71:84:c2:5b:97:
         1c:1f:d7:f4:5f:c7:48:63:1b:55:6c:c9:1b:f7:ca:74:8b:3c:
         74:43:3c:dc:c2:c0:8f:4b:68:c4:20:47:56:dc:00:e0:8f:d3:
         78:c9:e4:2d:52:27:55:a8:1e:49:46:19:f3:99:54:44:10:7f:
         4f:86:7e:40:72:d5:fe:7b:dc:f7:be:18:9b:6e:9c:88:bb:55:
         28:5d:81:53:04:6e:06:af:e5:16:28:cb:88:b9:07:b3:aa:c6:
         cc:68:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org