Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3376fe51-1a49-3456-ae00-e358de1c68ee.roa
File:                     3376fe51-1a49-3456-ae00-e358de1c68ee.roa (raw, json)
Hash identifier:          0oIT+a0FvmOmgels6YtALg8RPbNRWJhYcolaKOonRBs=
Subject key identifier:   B1:8A:E6:D2:64:AD:AD:E7:85:F8:64:CD:29:0C:AE:F3:D3:0D:F9:67
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD605282C0CE0603A273080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3376fe51-1a49-3456-ae00-e358de1c68ee.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8123::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:05:28:2c:0c:e0:60:3a:27:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=de5d6ef3-ee45-4e11-a1cd-1aad452ac274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:d1:7e:5b:31:b5:b1:1b:fa:64:f6:db:bd:
                    ea:34:ba:77:33:ea:9e:04:f3:c3:ba:30:70:5a:87:
                    a9:ad:f8:2a:5c:3f:f7:45:90:08:5f:c7:0b:26:2a:
                    76:75:92:f9:c4:4e:5a:70:89:78:11:ac:cf:27:16:
                    31:24:c6:db:fa:84:e7:74:e6:77:35:c4:40:fd:c9:
                    75:30:8f:d2:04:58:a4:1a:d8:bf:f9:df:ba:61:eb:
                    6a:09:4c:49:1e:b4:26:31:3b:d4:92:ba:14:99:a4:
                    d0:df:b3:16:1f:56:1e:59:97:b5:69:55:c4:2e:76:
                    1f:4e:3e:81:98:ae:2a:05:64:7c:f0:3f:2a:20:4e:
                    98:6c:d3:ae:a8:5b:10:3c:4e:50:b3:cd:e6:95:47:
                    ea:de:7f:9c:25:28:a7:53:91:e1:a4:e7:db:68:d2:
                    72:e8:6c:3d:6b:a7:8a:20:11:4c:70:be:7e:81:12:
                    9f:45:01:5f:56:04:02:b2:12:bc:69:13:3f:13:f6:
                    28:3a:26:69:81:5d:2e:fa:41:ed:09:9c:e2:41:cb:
                    55:c9:88:44:40:62:94:83:65:33:d0:40:62:a6:68:
                    5f:b1:3c:19:58:8e:fd:db:27:d5:48:e5:f8:f1:05:
                    13:68:cb:98:46:2e:6c:bb:86:a5:6f:11:1f:eb:8c:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:E6:D2:64:AD:AD:E7:85:F8:64:CD:29:0C:AE:F3:D3:0D:F9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3376fe51-1a49-3456-ae00-e358de1c68ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:da:cb:91:2c:5f:f9:5b:13:fe:a0:6d:0c:12:9b:51:3a:dd:
         2e:4f:ae:bb:d0:f6:48:5a:67:bb:de:8e:0a:29:e1:86:5e:f6:
         8d:11:91:2e:e4:81:be:25:6e:aa:83:11:77:bc:88:e4:e5:b2:
         54:91:72:c6:23:8f:01:7b:80:d3:e5:1a:51:d6:bf:1d:7f:dc:
         c7:b5:ec:6e:2f:ec:c8:d7:62:21:6a:86:58:08:2f:b8:2c:75:
         5b:f3:0d:ca:1a:1c:20:68:28:a1:9a:97:93:c8:d1:9f:52:2e:
         aa:f8:e5:1f:0e:de:40:28:a5:8a:ae:1a:56:a1:32:69:f6:29:
         4c:54:26:4b:7f:fd:d4:d3:22:11:4d:a1:f5:a6:2f:98:07:c6:
         03:2f:2d:4f:10:22:23:c9:58:af:e6:1d:02:08:59:28:97:cb:
         bd:b3:e7:dc:57:b9:c0:14:b0:20:a0:c5:21:5b:89:45:88:40:
         f8:2d:3f:56:7d:cd:ca:ac:5e:e6:0e:c3:bb:62:7f:20:52:06:
         e3:cd:73:76:01:ab:e1:10:fe:a2:d9:d6:ab:07:75:35:66:49:
         b7:87:31:31:ae:f8:dd:14:00:b6:2c:e0:18:eb:bb:49:44:c1:
         19:6f:7c:5b:f0:cb:59:ad:6c:41:bd:d9:d8:8f:ad:08:1a:8e:
         ba:66:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:07 2024 by rpki-client on console-ams.rpki-client.org