Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bf6b140-07c4-3858-951e-dc23c3367c55.roa
File:                     1bf6b140-07c4-3858-951e-dc23c3367c55.roa (raw, json)
Hash identifier:          mgnJg7fK2c6xqXLrd0Qkk6QUPoYNrEb+/KWeKbZ9+6g=
Subject key identifier:   8E:06:16:A2:29:28:8B:A0:99:52:40:50:99:D1:21:F9:C2:C4:BA:9B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F330F60C52B495D52940
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bf6b140-07c4-3858-951e-dc23c3367c55.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:89ea::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f3:30:f6:0c:52:b4:95:d5:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=8f27e42f-3a43-4f1d-8162-e9810c075b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:56:47:a5:69:2b:59:82:9c:aa:84:e9:d1:
                    f4:cd:d8:ee:fe:56:0e:16:50:41:e0:a0:98:1f:97:
                    d6:99:51:ba:ae:0a:71:39:e5:f3:58:7c:a9:97:b9:
                    89:b1:f4:7d:6d:17:7d:56:32:8f:e0:14:99:cd:12:
                    ab:75:3b:05:c9:3b:e0:42:2d:03:ac:01:c7:5b:9c:
                    e8:e7:73:05:b1:e2:db:16:1f:36:9b:57:5a:4b:fb:
                    bf:f2:68:7a:5f:c6:86:34:b0:4c:13:ec:09:55:49:
                    8d:d0:f7:03:75:7b:14:0f:dd:f5:7d:09:b4:d0:67:
                    b6:ce:7f:f4:8e:2a:a3:fc:8a:5c:bd:fb:f3:bd:3b:
                    7d:77:55:35:1b:dd:a1:3f:2b:9a:10:f2:e0:ef:44:
                    fe:bf:8d:a1:08:ef:c3:6e:30:23:d5:ae:9c:45:c9:
                    bd:d4:8f:95:57:84:4f:c8:ef:80:f5:95:08:04:f5:
                    b3:be:33:5c:a6:29:e4:42:a3:9f:16:05:64:21:7f:
                    29:35:5c:99:25:ef:81:51:bb:56:3d:12:0d:6c:4b:
                    65:9e:67:84:fb:eb:47:13:aa:f4:b1:d1:7e:2f:eb:
                    87:25:8f:88:0e:26:4c:1b:3a:56:58:a4:7b:74:1d:
                    50:04:16:2a:a1:1e:d8:17:24:a4:49:90:26:43:8b:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:06:16:A2:29:28:8B:A0:99:52:40:50:99:D1:21:F9:C2:C4:BA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bf6b140-07c4-3858-951e-dc23c3367c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:89ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8f:6b:ab:fc:20:5a:78:f4:30:b0:15:1c:5c:38:b4:6a:d6:
         19:9d:c2:b8:51:f0:d8:86:28:e2:67:20:eb:13:d6:ae:1d:e9:
         df:76:b8:07:c8:67:fc:83:61:95:0b:f5:e6:5a:23:6f:dd:c3:
         05:4f:66:81:66:a2:3d:42:69:19:39:f0:11:98:3a:1b:31:71:
         5e:7b:d3:20:6b:5e:ef:27:d7:89:7b:dc:20:94:87:c5:1f:80:
         d0:d5:27:68:c6:63:e3:f3:d9:4b:cc:c0:dd:71:0b:31:c8:ea:
         00:f6:5c:07:c4:1b:39:8b:a5:10:f4:d7:18:78:cb:47:21:fa:
         f5:99:b4:9e:da:c6:f9:f0:fd:79:4a:d4:8a:d5:7c:84:c6:13:
         71:11:bf:5c:8b:fc:3f:7e:78:a7:95:3a:c2:3f:ed:00:b1:0d:
         4a:83:83:12:94:5b:67:ad:0a:30:ba:03:30:8f:14:db:84:1f:
         9f:11:98:17:5d:0c:88:93:56:82:0c:de:e1:59:8f:e6:f4:47:
         43:7e:8a:08:1b:58:61:92:4d:81:4b:14:d2:65:5a:b6:16:dc:
         de:bd:76:c1:75:0b:bf:f9:1e:e1:19:81:e4:4d:99:25:87:f3:
         bd:ee:d8:93:79:79:c1:60:98:fa:44:19:79:c7:d8:a5:75:c6:
         c0:a1:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org