Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa
File:                     28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa (raw, json)
Hash identifier:          S6gnpKdI2xnPxDZGnbY1/OGwqXPlipz41jerh6wgK5c=
Subject key identifier:   2B:BC:FB:33:07:69:16:BB:27:E7:8C:09:73:E8:72:7B:24:36:50:A7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EF599DAA2E9473EABB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8209::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ef:59:9d:aa:2e:94:73:ea:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=f5104137-55c2-439d-aeb1-44fb872acbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:ef:99:18:af:48:e9:86:2b:17:2c:90:8d:
                    ec:18:f9:a0:01:05:eb:a6:9f:7f:12:e3:b0:f2:2c:
                    be:f1:71:68:5b:38:9a:13:f5:83:8e:fd:27:46:56:
                    09:29:97:2e:47:65:eb:ca:dc:85:c1:6e:73:ed:b0:
                    7a:eb:f5:a4:4d:36:a5:83:b9:89:b5:34:c8:66:94:
                    82:66:a1:9f:9c:d3:bb:78:99:06:78:21:f6:10:b4:
                    92:a3:74:9a:bc:be:ea:c9:1f:be:10:fd:d6:8d:ee:
                    81:54:bf:79:74:35:07:07:3c:65:69:34:7f:41:9c:
                    5e:1d:29:2a:76:29:fa:be:43:e2:c6:fc:56:7d:d4:
                    62:cf:78:b1:61:b4:09:af:20:38:97:f9:7a:4a:61:
                    d1:31:60:f9:9b:76:3d:c4:3f:8a:f2:27:e8:2f:e9:
                    10:75:58:05:14:05:f6:55:dc:4f:a2:c1:ef:c4:1f:
                    6b:fe:a6:eb:54:3d:cf:6f:77:0a:f0:88:c5:86:49:
                    93:4f:33:bf:37:33:fc:7e:41:d0:5d:d9:dc:05:47:
                    d2:da:30:77:ea:f3:f4:aa:e3:49:1b:ec:62:34:8b:
                    1c:e8:cf:df:0b:76:51:9d:7c:7a:d5:08:79:c6:6c:
                    78:23:d9:07:af:73:a8:cd:62:a4:30:c2:86:e0:94:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BC:FB:33:07:69:16:BB:27:E7:8C:09:73:E8:72:7B:24:36:50:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28ce963b-ee34-31d1-9ec3-c568a38ff46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8209::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:8a:6a:2f:60:d8:7e:e9:62:ee:5a:fa:9a:35:c0:6d:ac:
         52:26:19:35:24:fe:29:26:59:a3:f5:4d:90:01:b6:2a:d6:26:
         f7:88:34:49:be:22:45:7c:2f:f8:4e:15:a7:49:27:a0:e2:0d:
         d7:53:0e:ef:9c:3c:27:8b:f3:bd:5b:e7:99:a5:ad:0d:8f:a5:
         cd:a6:29:3f:d3:3a:38:46:02:e4:df:70:19:30:66:c7:1b:e8:
         82:cc:c9:a6:f1:80:3b:cc:43:f3:11:6e:7d:72:49:a5:12:09:
         0a:4c:4d:89:c6:b7:d4:2e:05:38:53:91:8c:8a:01:ef:7e:dd:
         bf:53:1e:df:66:17:ac:56:28:81:82:18:58:10:22:71:f5:c9:
         d6:16:43:31:a7:14:c3:85:83:f3:8f:a6:8e:8d:3d:cb:68:4d:
         4f:c8:f9:ed:15:81:cf:84:66:2d:5b:13:35:b7:ff:52:25:57:
         3f:20:5c:7b:00:0c:39:06:f5:3f:6c:e9:a9:15:df:df:89:00:
         13:6d:54:4d:86:bb:34:f1:2b:95:11:84:f7:12:06:e0:68:ee:
         35:db:6c:d2:8e:9f:15:3b:a4:d8:3f:ae:2c:c6:a3:99:c2:a9:
         bb:af:97:81:41:6a:dd:4d:b5:68:7f:d1:2a:e7:71:ee:f7:6c:
         6f:23:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:10 2024 by rpki-client on console-fra.rpki-client.org