Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/298a7052-e15d-3332-8c49-21d9dc45a6a3.roa
File:                     298a7052-e15d-3332-8c49-21d9dc45a6a3.roa (raw, json)
Hash identifier:          9L4K5Pq9oWTduacMiO6dP2O7jLOLsh4mENNUt3x6jvA=
Subject key identifier:   DF:3D:7A:7C:BF:8B:E8:EB:EC:F8:6B:62:29:B1:E3:A4:1B:96:20:A1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD605DB0A2D72666E2B6D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/298a7052-e15d-3332-8c49-21d9dc45a6a3.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8179::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:05:db:0a:2d:72:66:6e:2b:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=600498d9-f2ea-4ef9-9506-fd9fee011d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:69:0b:b3:90:be:f5:d6:95:0a:14:d0:e0:
                    5e:c7:1c:af:70:02:ac:67:b1:ed:da:87:ce:a2:16:
                    ef:e2:13:65:25:a8:d7:a5:3e:33:aa:7a:74:8a:d7:
                    60:60:2c:c5:7d:6d:46:c4:a9:32:be:4f:0a:81:d5:
                    07:a3:2f:e9:17:c0:5a:f7:62:27:14:65:68:ea:25:
                    09:03:e6:f6:f0:e1:f2:89:04:b8:c1:ce:11:4e:ed:
                    0f:82:ed:5f:33:05:68:2b:8c:70:aa:b7:0f:64:9f:
                    3c:23:4b:78:54:57:e2:0f:21:f7:0d:01:09:86:52:
                    ef:32:4a:d1:73:0e:9b:3c:15:44:fc:9d:03:00:b3:
                    cd:64:63:cb:31:eb:7d:49:e4:ff:aa:a8:35:c6:25:
                    3d:d1:54:f6:1d:f0:46:14:f0:7e:38:a9:77:09:86:
                    78:c0:8b:f5:bb:3b:4f:00:2b:40:b6:50:cf:52:d1:
                    d8:c7:e4:9b:ca:8c:27:99:06:04:f4:24:3c:f6:7d:
                    5f:e7:a3:af:e1:6d:88:cc:79:d6:d4:17:6f:80:8c:
                    4c:c8:cd:97:76:65:17:01:52:f4:be:29:cf:f0:7d:
                    2a:0a:5e:39:94:58:01:66:5c:57:c7:c4:71:64:23:
                    1a:49:3a:30:fe:92:78:10:c6:b9:37:9a:19:de:70:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3D:7A:7C:BF:8B:E8:EB:EC:F8:6B:62:29:B1:E3:A4:1B:96:20:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/298a7052-e15d-3332-8c49-21d9dc45a6a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8179::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:7c:ae:0f:8e:ff:94:3a:07:02:4b:df:bc:ea:f1:0d:04:
         a6:cb:87:3a:74:5a:a7:7c:22:95:b5:b1:04:f9:dc:37:4a:98:
         fe:33:07:46:b2:a5:01:10:9a:1e:ae:83:77:4e:66:4b:bb:5d:
         cf:83:72:13:d8:e7:1f:6f:eb:6b:9e:03:93:c2:54:ec:4e:ab:
         5b:9d:61:ef:08:2b:f7:14:7a:60:52:8b:d9:4c:26:1e:38:a0:
         4e:0b:04:33:60:f8:56:a3:f9:70:1e:4c:26:cb:32:90:32:c6:
         30:0d:2a:bc:18:2b:fd:91:6f:23:22:74:f8:01:5b:34:7b:67:
         ab:a2:79:33:48:a0:bf:fd:08:65:03:52:8a:2a:1c:9f:49:ef:
         6d:29:3f:b1:2f:49:0f:b2:32:0a:78:d1:9a:69:eb:4f:1e:1b:
         0c:60:e5:d2:18:aa:6e:7b:33:46:9e:95:ef:91:30:1e:25:e9:
         67:e4:39:dd:71:ec:ad:e7:bd:14:b0:4b:bf:03:f9:3f:df:99:
         07:c0:b2:70:74:48:c9:58:5b:17:50:cd:a1:aa:26:f1:37:20:
         f2:6d:a8:7d:bc:9a:36:e5:24:46:cd:79:ba:12:0a:47:4c:ac:
         5a:c8:f6:9a:c7:6f:7b:14:13:31:b1:cb:3d:5d:02:8b:34:34:
         23:a3:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org