Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/37f4f8b4-e904-3396-9348-af9d517e3f33.roa
File:                     37f4f8b4-e904-3396-9348-af9d517e3f33.roa (raw, json)
Hash identifier:          qyxNnk826NetZU5Fq17mKiktadMET/GQ97NIcg/6fPc=
Subject key identifier:   4C:8F:BF:AF:E6:02:F7:19:BE:2D:A6:C6:8C:53:82:F0:94:BC:0F:A6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967C78C35B5956D32FD3CC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/37f4f8b4-e904-3396-9348-af9d517e3f33.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:800b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:78:c3:5b:59:56:d3:2f:d3:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=8c334b29-2a70-46c5-9caa-1f4172ba6145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:37:28:9e:e7:4f:3d:c1:ea:ed:7a:58:65:
                    1f:eb:6d:d7:5d:de:cf:bc:b5:84:51:ed:39:09:cd:
                    35:44:d8:8a:69:3c:56:65:5a:6d:40:01:3f:86:a6:
                    64:1d:b4:a7:f1:b8:d6:85:59:8b:d6:47:51:80:42:
                    4a:e5:60:fc:c3:c8:88:bd:7b:2d:4d:be:d6:f4:28:
                    b1:78:dd:06:f7:af:26:08:b0:45:53:8a:28:9c:b4:
                    77:b9:29:52:9c:19:fb:22:d2:57:9a:22:57:e4:fc:
                    6b:8b:46:c5:6c:85:3e:15:3c:42:7e:f2:b9:ae:a5:
                    00:ed:af:da:5f:0a:f8:65:fd:94:e4:6a:41:bc:19:
                    46:1c:e5:4a:fe:d0:44:dc:7b:cf:4d:23:3a:6a:a3:
                    1d:d7:37:3b:18:2a:00:1a:c5:11:bb:d5:d3:95:ea:
                    53:7b:68:75:94:a3:c4:d8:7d:b7:99:e4:45:c0:ae:
                    9d:14:b6:eb:26:0d:bb:60:77:04:a8:8c:1e:f1:69:
                    f2:1b:e4:13:86:a8:14:f6:70:97:b9:38:99:1a:fd:
                    fa:5f:07:1c:05:b6:e1:c1:44:56:5d:a9:72:78:25:
                    d0:f0:f3:43:97:6a:8a:98:fa:d1:4c:8f:86:fa:87:
                    e8:74:69:01:cf:e0:76:a7:4b:0e:27:27:3e:98:6d:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8F:BF:AF:E6:02:F7:19:BE:2D:A6:C6:8C:53:82:F0:94:BC:0F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/37f4f8b4-e904-3396-9348-af9d517e3f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:800b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:73:c3:cf:d3:bc:f7:13:09:3b:6c:44:6a:3d:0d:4b:af:16:
         db:29:fd:67:ed:42:f2:9f:dd:64:18:5b:30:45:4b:32:b0:8f:
         8e:cd:47:0f:85:78:85:f9:f9:b0:ff:c1:b3:20:da:0f:b1:d2:
         96:7d:99:82:02:15:67:c8:31:37:09:1e:20:1f:f2:a2:4f:64:
         8c:05:1c:a9:3c:d3:53:85:c4:ee:83:ec:73:d5:ef:fe:49:e1:
         7c:5d:5d:f2:f5:84:bd:cf:71:5c:cc:2d:8c:38:09:37:6e:96:
         cd:c1:93:07:00:18:55:fa:56:a6:7c:51:ec:91:b7:24:8e:9b:
         c0:e6:f2:bc:03:5e:50:40:c6:82:fc:b0:8c:db:86:60:a7:0e:
         84:34:1d:63:27:bc:a1:1e:47:7f:39:e0:7c:ef:59:60:4a:db:
         25:88:f6:5f:32:13:6a:87:89:57:ca:2c:1d:c9:3d:b6:0a:bf:
         d6:58:f5:e1:77:23:e1:59:9c:a5:44:a2:c9:1c:60:fb:2e:df:
         36:46:50:c4:64:06:af:0a:a6:53:49:d2:d5:43:8e:cc:68:a4:
         5f:f1:06:a2:e0:79:c7:8a:82:8f:d6:d3:96:79:ac:8c:c1:9a:
         fe:e6:f1:7a:67:34:07:a3:ee:b3:9c:c2:2f:0f:16:9c:48:f4:
         0a:15:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:44 2024 by rpki-client on console-ams.rpki-client.org