Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa
File:                     28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa (raw, json)
Hash identifier:          033Qi/x4ajFcbivCXi0CwxZ2jFIIFCErcezcwxRdPeA=
Subject key identifier:   93:10:E2:D4:87:10:6F:42:14:E1:81:FD:B8:3A:D6:B4:8A:C6:F1:8F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EB5DE3D9BECA5DF51980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:814b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:eb:5d:e3:d9:be:ca:5d:f5:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=d0112d6b-ea7a-4ab5-91f3-15594c788ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:47:4e:06:56:f7:e4:c4:a2:32:b0:7a:e3:
                    0f:64:f6:be:5a:c6:b8:fc:f2:45:a3:22:7e:02:50:
                    85:e1:65:f0:76:49:da:43:5b:f2:46:17:4c:42:d8:
                    7a:c3:5e:d5:9b:45:44:46:e1:6f:50:92:34:33:3c:
                    ab:40:eb:c2:f2:40:6b:e0:87:25:fa:21:84:9e:e5:
                    1a:c9:01:57:9f:15:de:5b:7a:02:2f:2f:44:6f:3d:
                    8e:17:8f:4e:65:3e:46:d6:19:bf:f7:62:4b:d9:6f:
                    2f:c6:ba:f9:c9:3e:94:a1:fd:f8:a4:91:cb:56:42:
                    28:5b:07:91:4b:07:4f:2d:cc:de:95:9c:04:b8:ab:
                    69:53:ab:de:f4:44:9c:29:97:73:a5:5d:98:dc:ee:
                    cd:69:43:17:c0:ad:a2:09:cb:6a:d3:05:64:f7:6d:
                    bd:37:63:8d:a3:0d:25:c0:b7:ca:c4:be:59:ef:91:
                    f9:eb:eb:9c:f2:23:b1:6b:e9:ba:dc:f3:df:28:97:
                    20:3b:3c:9b:69:47:20:65:9c:5c:c6:12:ea:c0:34:
                    b6:f0:08:b9:a1:4f:90:82:d9:3a:12:dd:e6:bf:8e:
                    97:e1:5a:7e:6e:cd:83:51:bc:bf:a8:1c:bd:bd:f1:
                    29:52:5a:3a:bc:29:59:87:ee:a7:ab:f4:04:b1:be:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:E2:D4:87:10:6F:42:14:E1:81:FD:B8:3A:D6:B4:8A:C6:F1:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:814b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:13:42:0e:bc:36:cf:ea:fd:75:52:a0:3b:14:ec:22:26:09:
         b1:9f:83:5f:cb:c0:ea:12:97:f9:09:50:ef:bd:6f:80:64:e2:
         4a:16:01:3f:ae:94:b9:36:96:99:f3:d7:83:f5:60:1a:f3:f8:
         0c:99:ae:3e:95:ad:d6:6f:7f:b8:eb:7d:a2:14:79:94:86:fc:
         41:dc:f8:8f:9d:fa:ff:3b:37:4b:c7:9a:35:a1:34:30:85:59:
         21:d3:c4:eb:52:bb:7c:24:f1:12:ba:e0:cd:0d:1a:08:e6:05:
         38:c5:d5:00:f0:58:f4:2e:c2:1e:17:df:26:d4:d8:24:5b:a1:
         ed:d8:1b:2d:4f:4d:52:8a:53:9a:4d:0c:04:b3:78:a8:4e:f5:
         02:1c:95:a8:8d:de:ab:6c:d0:8f:ae:58:10:f1:86:b4:b5:bc:
         14:47:9f:bc:e7:45:11:ee:dd:3f:3a:89:37:57:83:59:01:d2:
         a3:69:be:65:ea:e6:1c:e8:18:ad:93:77:33:78:c0:81:d4:0b:
         b2:58:43:fc:22:95:e0:73:00:b8:dd:70:38:86:6c:e7:ee:2c:
         a9:bb:6c:a0:ea:2e:40:1a:22:dd:08:10:58:97:e9:4a:93:24:
         6f:b4:ab:a1:2a:0c:3f:c2:ea:49:93:75:27:39:2b:89:08:f0:
         ec:c1:ab:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org