Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/290169b2-e832-356c-881d-c6aea0f7340b.roa
File:                     290169b2-e832-356c-881d-c6aea0f7340b.roa (raw, json)
Hash identifier:          29QphUC6PdTHbGvpvoGmusGuptloCLSPDopwKyZlsjs=
Subject key identifier:   8F:8B:C4:1C:D1:7C:86:0E:FE:C4:61:13:3D:A7:CC:8A:59:01:55:14
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5ED5B7D24D1DC70923800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/290169b2-e832-356c-881d-c6aea0f7340b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8596::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ed:5b:7d:24:d1:dc:70:92:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=61133858-67d5-4af7-a800-6cf3b00821f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:bd:89:9c:1c:33:b5:de:e0:80:6a:18:8a:
                    7a:f8:c5:dd:e9:53:92:e6:34:9c:e6:8b:e5:2b:35:
                    2f:3b:14:f2:82:b2:e9:1c:63:05:30:10:ef:c9:9e:
                    73:44:dc:bc:4f:f6:36:2f:bc:54:92:2a:70:91:89:
                    13:ac:53:3c:34:6f:86:63:9c:34:27:7b:1d:c1:1d:
                    a0:65:ac:a8:9d:41:87:fd:ac:65:ee:2a:5d:59:1d:
                    2b:87:cb:bb:9a:a5:5d:24:53:81:2e:b9:52:f7:17:
                    86:1e:fb:4a:a4:0d:4e:aa:c8:3a:0f:b9:6f:fa:3d:
                    13:6e:eb:dd:4b:8d:66:f6:4b:88:7f:08:50:09:d8:
                    d9:ae:52:78:39:2d:9e:e5:39:55:5d:f7:aa:63:16:
                    2c:b3:e3:b9:81:96:b7:f3:0f:7d:08:64:80:98:ad:
                    e9:11:1e:c3:d8:e7:7c:98:11:64:7f:7c:2b:1d:5e:
                    c5:3c:0a:b6:3a:76:47:cf:0d:16:f1:82:aa:da:f5:
                    f5:52:3c:4e:48:69:6c:35:b6:5d:b4:f8:f3:ff:4c:
                    e1:da:41:72:d4:a1:81:0b:d0:ff:60:7e:13:38:74:
                    5e:b7:7e:6b:e7:da:dc:9f:e4:96:c0:0d:25:9f:7c:
                    0e:3d:9e:c1:9b:67:3c:bf:c3:d8:26:14:d2:01:21:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8B:C4:1C:D1:7C:86:0E:FE:C4:61:13:3D:A7:CC:8A:59:01:55:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/290169b2-e832-356c-881d-c6aea0f7340b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8596::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:8e:c4:89:a8:95:d2:14:2a:75:21:91:b6:5c:df:6a:51:b9:
         85:e5:96:fb:71:3e:a4:18:35:33:cf:c6:e4:3e:17:f9:80:5b:
         3b:5a:84:e0:79:87:31:01:04:7b:e4:2f:87:7b:6c:af:40:c4:
         b0:3b:73:49:66:1c:a7:56:55:54:92:4d:21:d5:fa:3e:57:1e:
         61:99:f5:c6:63:be:42:6b:da:09:2b:bc:8c:71:00:cc:45:76:
         90:76:46:0c:7f:0e:7a:a9:02:07:45:97:68:6b:cf:03:05:ed:
         bf:ce:01:ec:96:b3:c8:e3:ad:7a:b9:3c:cf:35:35:1c:f2:76:
         fb:58:0f:b1:38:e9:84:6e:b0:01:25:57:7e:89:a2:a0:51:3e:
         54:ed:9f:ba:fa:55:34:ae:df:d6:86:a4:b6:6a:6b:53:73:ae:
         75:76:8d:e1:04:6d:f4:94:ee:fb:f3:46:ef:25:c7:83:84:d9:
         c3:24:6d:17:40:82:1f:01:a4:4e:d5:6c:e3:5c:68:6e:85:98:
         ff:57:7a:df:27:6b:5c:ee:ce:93:74:36:c3:68:29:3c:1b:a3:
         57:a0:9d:b4:62:38:70:b8:7e:29:a8:27:cb:78:09:d9:43:fb:
         c6:54:8f:ca:f1:f1:ac:22:15:46:55:60:b6:59:f4:81:14:96:
         ec:64:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org