Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa
File:                     2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa (raw, json)
Hash identifier:          dr0vbEBxbU5VqcllNWPlCwHcuy75UGfRNkYfm2bvlX8=
Subject key identifier:   D4:9E:27:EE:4E:ED:81:AD:5F:96:1E:54:9B:0A:07:6A:E4:39:7B:C7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC315D05474A3984BFB1820
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80a2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:15:d0:54:74:a3:98:4b:fb:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=157fa2d9-d5e2-4f86-a973-79706fd927f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:b4:f9:35:38:89:ad:8b:d1:d9:87:44:85:
                    22:38:4d:08:96:24:cc:38:25:6a:62:84:ee:8d:e3:
                    b2:06:a7:c7:88:1e:2f:cd:96:fa:a7:b5:53:1a:a0:
                    eb:a2:c3:f1:66:df:c4:3c:90:ef:a5:d4:4e:0d:35:
                    8d:73:56:fa:64:c1:fb:12:81:05:9f:59:ce:a6:43:
                    2d:3f:27:f6:20:4f:d3:38:8b:54:86:e4:c9:ff:d3:
                    8d:21:66:a0:c9:39:5b:75:7a:0b:17:83:38:75:1d:
                    d3:0f:2c:4a:06:30:e1:00:01:ab:a2:58:99:8b:e0:
                    95:71:04:be:5a:01:41:4a:c4:0a:91:42:61:40:fd:
                    49:70:06:93:59:50:ce:95:94:d8:93:d7:99:e3:70:
                    96:02:8c:ea:d6:00:d5:ad:27:05:c7:67:00:6a:ef:
                    c4:fd:97:05:51:0c:8d:da:f1:64:80:86:ad:df:81:
                    86:3c:79:24:03:08:16:95:5e:73:78:6e:f8:99:2c:
                    28:8a:bc:30:fb:c1:a7:3a:63:1e:16:f4:da:a9:a8:
                    c2:0e:d3:63:b2:da:cb:fe:37:f2:4b:99:b6:b8:e5:
                    5b:8b:5f:e0:84:5f:fd:b2:d2:bf:15:ce:be:2d:a2:
                    f2:d3:77:1e:08:23:37:c6:9c:c5:51:77:84:58:d8:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:27:EE:4E:ED:81:AD:5F:96:1E:54:9B:0A:07:6A:E4:39:7B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:35:9e:91:5b:4f:5f:9f:a7:87:de:1a:66:be:cd:76:96:43:
         a8:d7:47:b5:3d:f4:64:a7:2a:4d:8c:ee:1b:5a:2c:cb:c6:3c:
         8b:eb:7e:1f:d9:c8:a4:02:07:a1:eb:cb:3b:fd:95:13:3f:59:
         3f:42:18:75:92:c5:0a:ff:5a:75:75:60:d5:51:5c:ee:68:f2:
         da:52:1e:09:8c:49:6d:c7:70:24:d0:72:82:5c:0b:22:a9:d9:
         e6:c7:f6:47:de:1e:ad:ae:a7:04:31:df:20:99:8a:c3:6b:53:
         28:61:01:46:d4:90:8d:b3:57:71:6c:d1:9d:ff:78:5c:ab:9b:
         22:f3:9e:9d:2e:b9:29:e2:0d:93:3e:0a:32:21:13:45:fa:ae:
         f9:4e:ff:2b:f9:1d:fb:4b:32:e4:15:74:f6:8b:e5:fb:06:84:
         37:27:4f:8a:bb:7a:15:c5:96:79:bc:bc:f0:b0:c5:41:14:16:
         27:cb:7d:0c:77:7a:72:1a:da:01:71:00:54:49:4f:36:12:c4:
         84:99:5c:48:23:ea:e4:38:ad:1f:1c:88:c1:50:28:2a:af:ac:
         d6:ae:52:34:98:9f:59:5c:40:95:00:a4:1e:47:a4:37:80:0e:
         c2:b8:7d:14:b4:93:09:4b:1c:d1:53:c8:d4:cb:8d:ee:45:38:
         f8:6e:15:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:05:49 2024 by rpki-client on console-ams.rpki-client.org