Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2cb67393-7280-335c-88ac-dfe8da4e667d.roa
File:                     2cb67393-7280-335c-88ac-dfe8da4e667d.roa (raw, json)
Hash identifier:          VhhKOvpi2483GC0msi9FoUI20Yp0xhZQFyMZIfYX/pU=
Subject key identifier:   13:E5:C4:35:DE:89:F8:DA:F2:E3:B6:D5:44:D0:1F:51:7C:FC:EF:89
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967CB5B7BBD587C9030E4C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2cb67393-7280-335c-88ac-dfe8da4e667d.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8066::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:b5:b7:bb:d5:87:c9:03:0e:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=e19e17dc-a1af-4b53-8670-e169045f54b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:8a:ac:f7:a9:44:bb:56:ce:19:a8:da:44:
                    ee:7b:5c:10:7f:47:d4:44:01:cb:96:ec:7e:44:06:
                    f3:53:e4:3e:17:8c:7c:15:53:29:91:c3:e5:d4:ee:
                    1d:3c:9e:2d:7f:f9:f2:df:4b:3f:73:16:e4:4e:7e:
                    ce:31:ab:fe:80:63:c3:5b:15:74:9e:5d:42:aa:62:
                    2b:75:a9:e9:6b:3b:9b:53:82:5d:5a:8c:71:36:93:
                    08:7d:31:73:5f:5a:70:75:f1:71:35:c2:c0:5d:4d:
                    78:df:6a:88:de:0c:69:70:67:4c:e4:c4:41:48:a7:
                    60:2c:1c:02:db:a1:ea:94:7b:d1:dd:6a:8c:e7:64:
                    a0:ba:c4:9f:58:63:ca:77:d4:3b:f5:5c:32:36:71:
                    e4:46:e2:b7:2b:87:32:2b:5b:17:f6:91:23:0e:d2:
                    80:f3:b5:dd:e1:28:97:c8:5e:e9:09:6d:8e:47:4b:
                    fd:bd:78:00:87:a9:e8:f2:71:79:9b:7f:7a:1a:42:
                    52:84:fa:fe:73:41:1a:2a:a9:82:f6:1d:35:aa:99:
                    2a:1e:d9:00:aa:95:5a:97:06:a9:b8:54:62:25:cf:
                    4f:d7:1f:a6:99:19:d9:03:b0:9c:68:a4:06:9c:2e:
                    b2:d3:ba:1c:6e:d2:09:16:f9:38:23:2e:83:6d:72:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E5:C4:35:DE:89:F8:DA:F2:E3:B6:D5:44:D0:1F:51:7C:FC:EF:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2cb67393-7280-335c-88ac-dfe8da4e667d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8066::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:24:89:7d:c0:e4:ed:98:cd:5e:ca:74:9c:fa:e2:6e:40:17:
         20:27:e7:49:11:c4:28:b5:11:28:20:16:24:4b:42:7e:00:8f:
         c7:a2:ad:df:bc:e9:63:25:39:87:b7:f2:74:08:75:77:f3:6c:
         de:fb:a6:7d:0c:8f:c0:9f:ed:5f:8d:73:33:a2:fd:95:68:2c:
         de:3a:a8:d5:63:cb:f0:f2:b3:83:06:d3:cf:24:d1:5d:92:ba:
         80:ae:76:8e:26:3c:60:9e:64:14:58:55:8b:89:20:20:a6:94:
         64:12:35:3d:92:93:a8:4a:2e:10:74:d2:f2:b2:b5:d3:b9:96:
         dc:68:ed:41:47:50:ce:d7:92:cb:d3:36:33:5e:f6:74:5e:69:
         58:b2:55:04:17:ca:f8:a0:a2:b4:31:23:18:bb:36:f1:57:6f:
         8c:2d:81:5a:1a:e0:1b:b0:36:fc:6b:71:4b:84:f4:7e:f0:1a:
         f5:90:e3:4e:d1:16:0f:8c:9b:5f:38:ec:25:08:fd:c7:53:0d:
         ce:15:94:d2:68:38:27:d3:d6:34:eb:0d:14:ec:6c:4c:20:c6:
         5a:59:9d:c3:e2:f0:28:e6:4e:5b:26:e1:b8:47:78:4d:32:b5:
         21:c7:57:c8:51:c6:5f:98:7d:97:df:b9:b5:67:67:4e:90:cc:
         57:a0:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:10 2024 by rpki-client on console-fra.rpki-client.org