Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2d58fa8b-e147-3b72-95f5-c0f37f91b185.roa
File:                     2d58fa8b-e147-3b72-95f5-c0f37f91b185.roa (raw, json)
Hash identifier:          2tio/hqOjAo234Xhe7b7T+P0E2BLg5kSwYK4ILEawjc=
Subject key identifier:   CA:08:69:74:6B:D6:9B:37:76:F2:54:17:FE:09:C9:85:EA:F6:3D:5E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967CF80EA725841346651AC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2d58fa8b-e147-3b72-95f5-c0f37f91b185.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:80d9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:f8:0e:a7:25:84:13:46:65:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=ff203496-e079-4dfd-8900-ecf7c248e079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:f3:ed:2a:84:39:54:11:4a:36:cf:a0:1c:
                    36:fa:6c:ab:6a:c4:cb:55:a8:24:25:2c:46:33:65:
                    35:88:51:03:74:9e:38:3c:92:98:24:24:89:ea:29:
                    b3:25:4d:f4:1f:86:8e:41:c1:2a:84:e2:97:36:c6:
                    57:da:27:37:ad:60:e7:87:70:63:30:a0:00:b3:93:
                    ff:ac:a7:95:ed:a0:53:18:cc:cb:77:de:50:f5:49:
                    fb:35:c7:d2:01:6b:e1:05:ca:d6:b8:6f:73:1d:4c:
                    79:dd:82:e6:f6:4c:31:03:f5:62:f6:ac:c7:08:f0:
                    dd:a1:9d:90:8e:0c:2d:0e:0d:1c:d5:1a:70:b1:fb:
                    55:67:09:14:93:07:96:d4:e1:8b:aa:45:94:4f:0b:
                    f8:b8:2a:8f:b5:8a:5d:ca:28:48:c4:6a:38:d8:88:
                    54:ce:0d:60:86:b2:f2:dc:51:28:51:99:00:01:9c:
                    6c:b9:d5:dc:4b:09:11:7d:67:8a:8d:08:b4:8d:86:
                    96:07:69:fe:37:f3:80:ff:9a:3c:7f:dc:e4:82:3b:
                    cb:f1:12:1d:7a:43:d5:67:66:bd:fd:1a:0a:5d:d5:
                    65:0d:19:9a:3a:1d:37:e1:86:26:f2:94:f9:00:ad:
                    ee:d2:11:69:0f:b7:89:be:7b:a3:69:a1:cd:c9:c6:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:69:74:6B:D6:9B:37:76:F2:54:17:FE:09:C9:85:EA:F6:3D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2d58fa8b-e147-3b72-95f5-c0f37f91b185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:28:aa:7c:20:89:47:f6:3b:fe:ba:62:7d:ec:3b:1f:79:
         51:6a:2f:eb:84:4d:44:35:ba:7c:72:4d:12:d3:8a:37:2d:1d:
         c3:dc:22:a3:73:6f:8f:09:94:82:1c:7f:17:42:a3:bf:ec:8e:
         4f:6d:f3:fd:6a:08:0c:e7:f5:47:f1:a8:60:d3:af:31:79:f5:
         4d:51:01:c6:a7:b7:ed:80:a1:32:cb:de:51:eb:ea:be:b0:c8:
         e6:b1:5f:79:f2:4f:e2:5e:7c:cd:7d:2e:5a:e6:5d:b2:cd:bc:
         43:84:1a:16:12:be:ce:e8:61:98:33:79:3c:f8:9f:98:e3:ae:
         91:52:91:a5:02:80:95:ad:3a:2d:56:98:0c:a0:d4:94:1f:f6:
         c7:cb:ed:c9:fc:86:c0:a1:6a:33:94:33:cd:0f:4f:41:d2:ef:
         c4:c3:0a:29:f7:b4:3d:87:66:0b:c9:68:c2:3b:67:f5:14:86:
         d4:96:de:38:2e:6d:c0:f3:49:96:88:9d:ed:50:40:4f:62:4f:
         49:49:bc:01:8d:2b:4a:70:c3:91:5d:58:8d:11:3b:df:ef:c6:
         3b:95:f6:af:96:59:cc:ba:40:b0:8b:ff:9a:53:9a:2c:b9:6f:
         ea:97:25:4b:8f:ab:ad:cb:1a:26:5e:02:47:07:6f:b7:59:6e:
         8e:12:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org