Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/11dae4ce-55fb-3566-85f4-9a2b30eeb13e.roa
File:                     11dae4ce-55fb-3566-85f4-9a2b30eeb13e.roa (raw, json)
Hash identifier:          Y6DSGGS+TCprIWMWjyiGfQK9zZc3Y+XtWr5CF1KV2AA=
Subject key identifier:   A4:BA:5E:CC:87:33:B1:D7:EF:08:7F:E5:B3:3C:D8:47:FD:80:62:A2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5ECD7C5D19F2EBD621C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/11dae4ce-55fb-3566-85f4-9a2b30eeb13e.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:838c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ec:d7:c5:d1:9f:2e:bd:62:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=c5d29564-5358-4461-a2c7-e1cab320fa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:99:f1:8d:88:b6:e5:cd:75:bf:c4:bf:4a:
                    cd:3b:7f:2b:cc:56:ef:c6:01:fd:06:7a:76:77:e1:
                    83:a1:16:68:ec:c9:55:59:32:7f:54:df:23:93:5c:
                    1c:9e:6b:2f:16:94:8a:f3:bf:ef:78:a0:8c:34:d7:
                    6c:bf:81:97:dc:0d:83:7a:51:85:13:bb:b0:98:df:
                    66:cb:95:d8:26:e5:74:de:39:c6:d1:e3:3f:69:4c:
                    af:6c:9f:81:22:e7:c3:5f:b6:22:82:50:b9:56:e3:
                    a4:e2:36:28:4a:07:cb:24:43:50:7f:b2:cd:45:5d:
                    71:88:86:4d:58:48:9e:23:b1:75:47:d5:b4:4b:89:
                    a4:e8:38:05:c1:73:35:a2:16:88:9c:57:d4:08:e3:
                    b7:1f:23:14:cc:f1:49:e2:95:77:2c:b6:ad:9b:c7:
                    79:a7:1d:cd:61:aa:10:47:11:af:78:b5:e9:4b:6e:
                    9e:32:fc:b7:36:a7:40:bf:a9:3d:5c:6b:2e:c3:32:
                    a4:f1:7f:91:59:62:37:6a:bf:dc:00:c5:71:29:5b:
                    92:9b:95:54:92:4a:8c:17:55:b2:18:eb:34:c3:17:
                    b2:38:fd:a9:db:bb:30:1e:18:2d:b0:a9:02:b3:d9:
                    f4:83:f1:ca:f7:9d:f2:e9:bc:66:cf:21:ef:1f:ee:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BA:5E:CC:87:33:B1:D7:EF:08:7F:E5:B3:3C:D8:47:FD:80:62:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/11dae4ce-55fb-3566-85f4-9a2b30eeb13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:838c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:e1:a8:b1:38:05:c9:53:8e:0f:2d:09:e9:03:15:97:8b:
         68:bb:55:6c:9a:35:6d:11:7c:ab:ec:9d:7e:14:bb:97:88:74:
         84:de:d1:a5:52:29:d1:6e:f5:d1:12:ab:a4:c7:22:04:ef:33:
         bf:67:31:43:5b:d0:3b:f4:92:78:c3:84:d0:61:0e:90:54:33:
         69:d9:36:9b:ff:5f:27:98:85:84:4d:15:72:2c:b0:fe:91:c7:
         5c:68:a6:7d:d5:8a:f3:2f:d0:c2:2c:26:46:56:93:11:5e:59:
         29:b8:bf:87:85:3d:9b:93:0c:4a:c8:e5:d8:98:b9:11:b6:e2:
         16:fd:22:ac:05:12:82:f9:4f:50:fd:26:95:65:ef:7e:6e:61:
         5b:bf:78:c1:e2:2c:63:fe:54:fa:fa:e8:8a:f1:00:78:08:77:
         9b:fa:01:82:ca:36:0a:12:9a:0a:7a:a4:00:0e:e9:fc:81:c5:
         1a:20:ba:0b:88:76:50:f2:bf:45:20:cb:9e:c0:51:89:a2:bd:
         b2:4d:bb:4c:a8:67:d2:2f:4c:ec:85:52:27:18:be:a5:c0:aa:
         c7:7c:ee:b2:5f:86:d2:0f:7f:22:52:92:ad:c4:e7:10:11:4f:
         89:f0:c3:ad:97:0e:b9:05:3a:0a:2c:c6:87:9b:e7:26:22:f0:
         74:d8:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org