Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa
File:                     2db1f454-3527-345c-a857-68b9d2939fd7.roa (raw, json)
Hash identifier:          5wLlu1hEXzFcN9WaZL9L/rcHJVQ22c2uqZfKDSO4wsw=
Subject key identifier:   49:48:69:4F:36:28:93:B4:2E:3E:B6:8F:AE:69:70:CC:7C:B5:0B:59
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F4F5A4A482C7BC790400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80c3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f4:f5:a4:a4:82:c7:bc:79:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=bf37bb9d-7d0c-4760-acc6-1c299eb68f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8a:a2:ac:63:d8:36:d7:f0:c1:05:b4:7f:51:
                    6f:c5:4b:e5:d2:38:77:e6:67:33:9e:74:c5:f7:7d:
                    55:3b:62:f3:1b:a2:b6:9a:7f:fe:fe:f5:e2:90:57:
                    79:a2:cd:4b:fe:91:e9:74:00:1d:3b:d5:bd:10:70:
                    ef:2d:34:15:41:50:b4:c5:d6:e3:b7:2e:14:76:b7:
                    fe:ab:de:69:14:29:a3:a9:95:b9:84:b8:0d:22:d4:
                    7f:88:b5:de:3b:88:a8:20:01:af:3a:70:1a:66:0c:
                    f0:dd:48:95:e1:13:71:15:33:04:68:ce:d1:52:71:
                    e0:af:95:23:20:39:39:da:bc:a1:37:95:9a:e7:61:
                    eb:77:59:e0:68:2d:5a:68:16:0a:46:2b:24:98:a0:
                    9d:8d:81:8f:0a:79:f6:9b:0a:d3:13:3f:45:40:0b:
                    dc:1b:99:88:6d:90:3d:16:d4:97:0c:79:13:e5:81:
                    7c:18:e0:81:e4:11:81:47:91:fa:a9:dd:fe:6e:a5:
                    1b:8d:bd:47:69:e5:dc:5a:bf:3e:b9:c1:9c:c4:78:
                    81:c5:1c:5f:99:a7:94:21:a5:c2:68:c0:92:5b:a1:
                    31:cd:fc:86:55:f4:d3:c8:c3:13:18:de:23:38:1e:
                    66:07:0d:ac:d7:1f:bc:10:28:8a:fe:eb:f8:60:d5:
                    66:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:48:69:4F:36:28:93:B4:2E:3E:B6:8F:AE:69:70:CC:7C:B5:0B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:66:27:83:ba:c3:0d:51:07:c0:7b:fc:b6:48:77:7b:fe:
         51:10:ae:5d:e6:09:2e:a7:91:47:ea:c2:6f:61:f9:21:b3:d9:
         0e:e6:db:a5:3a:41:61:01:fa:33:35:71:eb:37:a1:bc:da:51:
         2f:f0:50:1b:46:7f:e0:db:3f:12:c2:6d:db:e9:e3:f4:3e:1d:
         05:81:5b:01:6c:5f:6f:3a:ca:78:cd:26:65:c6:f8:d7:5f:58:
         bb:ca:c1:ad:90:7e:f3:94:d3:de:c4:38:cf:a4:d0:f8:e5:e0:
         e0:ec:85:2a:7e:ec:1b:5e:67:cf:8b:3a:f2:12:6d:2b:51:36:
         b4:cb:b3:02:37:8f:06:35:3a:97:fd:e6:b8:f6:88:6f:00:03:
         e3:25:5f:c7:69:f9:b5:6b:a9:d5:30:4e:08:7c:31:f8:eb:e2:
         84:e1:67:34:60:b7:45:cc:0f:92:0d:f0:b4:dc:91:00:2c:a6:
         2e:67:8d:b8:60:83:d6:03:9a:83:12:72:e6:6a:ab:07:c5:b6:
         ee:74:5d:be:ce:25:80:35:93:6e:15:cf:ec:bf:40:ab:3e:c1:
         90:16:de:4e:55:75:8b:be:66:c5:e3:f2:03:39:e2:98:76:1a:
         a2:64:fc:65:ae:1e:44:de:35:5f:66:d6:ea:a5:36:00:58:aa:
         11:c0:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:04:26 2024 by rpki-client on console-ams.rpki-client.org