Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c2223e5-0153-35aa-a55e-6aa4a2f26fc8.roa
File:                     1c2223e5-0153-35aa-a55e-6aa4a2f26fc8.roa (raw, json)
Hash identifier:          fIJwb+q89LdOQtYJJeJYpva47ulUExn+pv7mceklhLQ=
Subject key identifier:   57:D8:EF:31:74:B1:60:5B:61:AE:65:BD:1F:09:04:6A:45:01:9D:55
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967CD590EE6C180EA67AB680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c2223e5-0153-35aa-a55e-6aa4a2f26fc8.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8092::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:d5:90:ee:6c:18:0e:a6:7a:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=5d0da05b-6007-48ca-af55-dad55db079a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:fa:0e:a8:57:77:ea:00:07:9c:41:65:2b:
                    c2:d0:38:f3:89:4e:77:1f:c5:9c:32:d7:e9:ea:7f:
                    b0:c7:34:9a:52:d9:d8:b9:af:36:45:04:c6:3d:65:
                    d6:72:d8:bf:93:e3:77:49:f2:93:15:0e:94:08:a2:
                    6b:0b:ee:64:25:e1:dd:ac:ec:ba:57:d5:9c:54:49:
                    b5:b6:02:48:ab:79:f0:04:5a:db:4e:32:61:5f:10:
                    7e:bb:7b:58:4c:4c:45:dd:37:ec:b0:ce:f1:18:06:
                    ae:2a:a7:bd:1c:aa:f3:f7:57:b9:f5:91:47:ba:7a:
                    b8:8f:55:33:ed:fb:c8:f3:a1:d0:e8:0b:b0:8d:78:
                    f5:1e:80:53:04:60:24:07:ab:ac:af:ed:2c:eb:ad:
                    0f:4a:cf:e4:56:d4:17:18:73:51:f0:53:cf:da:82:
                    8b:eb:cf:ff:6a:7e:e6:2a:ac:a3:fe:ef:2c:d7:57:
                    3e:51:4d:6c:88:2f:dc:5d:a7:78:1a:9f:30:4f:d2:
                    80:36:ae:4b:30:2d:9e:c1:61:7b:1b:8a:2c:11:a7:
                    3c:aa:e9:cb:6f:d3:8b:1c:19:a5:97:59:ed:c0:15:
                    e0:5d:81:65:5c:be:b6:53:d9:76:3f:69:4e:0f:82:
                    b8:78:58:46:f2:3c:9d:25:6c:24:bf:32:09:33:98:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:EF:31:74:B1:60:5B:61:AE:65:BD:1F:09:04:6A:45:01:9D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c2223e5-0153-35aa-a55e-6aa4a2f26fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8092::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:a5:80:79:de:39:af:1d:a8:65:8b:28:54:e6:b8:14:28:
         cc:01:70:2c:23:74:86:e1:88:14:1f:07:77:10:ca:6a:59:99:
         7e:69:3a:31:e9:d5:5b:f5:80:3f:f0:b7:3c:7d:9b:44:9e:c0:
         2a:7a:e0:d7:f8:43:b2:4d:85:b1:7d:09:2d:b1:01:19:22:a0:
         49:60:a6:df:9b:6e:c1:b9:ab:fb:11:09:ff:d3:52:ea:13:e6:
         54:fb:cb:c2:44:51:3b:73:9e:bb:63:5a:75:58:be:2d:84:98:
         e1:9e:49:4b:41:6d:f5:d7:6c:19:65:67:73:b2:ed:90:09:c3:
         cb:0f:5f:e8:72:36:47:42:22:67:50:66:d1:75:d3:68:03:31:
         b5:31:b3:69:54:f8:fd:35:ed:2f:76:52:c8:7d:37:b8:ef:b6:
         e7:60:4a:af:35:b3:87:a5:92:33:1b:0f:c7:b8:21:ff:b2:05:
         1b:03:4e:f6:cb:95:bb:09:f5:e8:87:0d:7c:a4:b4:4f:da:9b:
         23:65:a1:41:11:fc:13:59:65:0e:59:8f:7b:d9:37:b4:2b:cc:
         c2:e8:fd:99:53:cf:6f:41:d8:a5:d5:6f:db:36:7b:99:17:86:
         df:99:2b:9c:a1:0d:93:8d:7c:c8:23:40:7a:7b:59:c8:f6:0a:
         f0:2f:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:05:49 2024 by rpki-client on console-ams.rpki-client.org