Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa
File:                     1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa (raw, json)
Hash identifier:          kgqWPMCW/lmQii9qRmYo1YVrZZ9Lo8yo6S/Vh9RB1s4=
Subject key identifier:   89:FE:AC:2C:F5:95:33:18:E9:8D:95:85:66:B4:66:85:80:47:3F:6F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC313513B552AC762069080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:83b6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:13:51:3b:55:2a:c7:62:06:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=3cc22bce-7be2-4ff1-b473-bff15537e14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:66:ba:f1:b8:59:2d:bc:5d:3e:45:35:b5:
                    b9:c7:d4:03:b2:40:09:27:c9:75:0e:ca:63:d1:db:
                    d2:18:62:f3:3d:91:4e:1a:08:94:9b:73:a5:72:06:
                    34:a8:90:94:54:fe:21:db:d3:5f:b4:fa:8f:58:8b:
                    27:fa:5a:19:66:24:56:22:88:6d:9a:6a:c1:dc:20:
                    51:28:75:28:ea:d3:9e:7f:7c:95:47:35:13:42:df:
                    90:87:35:f9:02:e9:1f:db:d8:56:c2:3f:70:d1:45:
                    d8:d9:7f:f2:d6:6e:23:dd:7a:7f:e0:cb:7f:fd:21:
                    33:0d:80:cc:14:b8:d5:98:56:5a:c8:5f:e9:f7:43:
                    5d:6b:2a:94:f2:a7:8c:4c:6d:e4:95:d6:31:c5:54:
                    e2:3f:80:d7:bd:02:72:70:19:cd:47:8a:ce:d9:4a:
                    7b:52:d6:6a:92:70:20:42:7b:61:bf:8e:72:5f:42:
                    7f:82:97:b1:7e:74:5d:44:00:7b:f4:40:98:e9:fa:
                    f5:74:2f:a3:90:c1:b1:55:f6:c9:ca:95:50:da:3e:
                    00:3a:eb:b0:3c:85:ae:f9:69:6f:13:b4:2b:c1:c2:
                    aa:81:19:31:d2:f7:ae:92:12:1f:f3:61:6c:11:97:
                    c9:75:a7:39:1a:81:05:1b:bb:d7:a8:d2:d0:e2:67:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:AC:2C:F5:95:33:18:E9:8D:95:85:66:B4:66:85:80:47:3F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:2d:ed:23:96:31:69:7e:54:f1:0c:12:53:61:71:d7:36:
         d3:3a:65:73:88:73:d3:f9:b3:c5:f5:e7:83:15:ef:e9:07:f4:
         62:14:49:0b:b5:45:92:6c:0b:75:90:72:1c:b9:81:b7:97:74:
         43:e7:a7:04:fb:e0:91:68:c3:1c:5b:bd:6a:7e:7b:61:8a:34:
         20:fb:ad:c1:61:c2:2d:46:86:6d:95:8c:98:f8:af:83:94:a2:
         92:a5:48:b2:8d:9d:ea:9e:57:62:4a:69:de:b4:68:8e:95:86:
         e6:86:ff:49:a0:fb:1b:d4:c4:8d:86:33:19:d1:a9:09:18:23:
         e9:b2:16:4f:74:cd:53:34:c1:af:67:77:39:4b:82:7f:6a:7a:
         58:19:2e:6a:b9:54:a9:4f:c3:18:0c:2a:6f:dc:42:9a:67:20:
         16:2e:37:84:ea:b8:6d:af:4a:7d:de:ac:dc:c5:fe:be:a9:23:
         53:dc:f6:ca:44:4b:10:1a:67:35:90:4c:67:46:ba:65:bc:12:
         d3:c0:fa:d0:3b:99:95:0c:69:6b:a3:a5:30:4c:16:e2:b2:92:
         b8:6f:5f:75:5c:bb:95:b8:fa:4a:51:30:36:ea:4e:a5:7c:0d:
         50:d3:c4:ca:6a:1f:7c:24:07:58:5a:01:cd:bf:73:59:cc:d1:
         ce:3f:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:04 2024 by rpki-client on console-fra.rpki-client.org