Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa
File:                     386f2b26-4a36-3769-ad36-2706cdf55418.roa (raw, json)
Hash identifier:          CeIXRw76vRMPiRV44gdYZsG7z/rcPke+OPGih7GsF4k=
Subject key identifier:   D2:5F:BA:8F:42:54:ED:C6:DD:64:99:D0:18:B2:D4:C4:1E:A7:99:DE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EED1904F269DCFA51B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8177::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ee:d1:90:4f:26:9d:cf:a5:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=ac72d016-41c4-4bf2-b611-1a4fb32b4e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:0a:e5:85:7c:76:28:17:86:e7:9a:c0:ae:
                    c0:52:52:47:bc:94:8a:b1:df:f7:48:fe:aa:72:eb:
                    bc:a0:d6:a0:b3:c5:2d:46:7e:f1:1d:48:05:70:94:
                    52:b2:3e:c0:55:a4:c7:91:da:d0:26:71:0b:d5:3a:
                    e5:43:dd:35:3a:19:6a:5a:f1:f8:d6:26:d7:cb:4e:
                    34:1d:8b:6a:fc:4b:ee:d7:b5:e5:c6:66:da:86:89:
                    e4:1f:5f:2a:8f:5d:34:13:4e:2c:a0:9a:78:4f:55:
                    ce:ca:a5:92:7e:11:6a:5b:33:2a:4f:36:da:d0:72:
                    3c:6a:37:e0:26:04:24:fc:f0:e2:7e:c4:8e:16:a4:
                    72:0f:05:ae:e1:f5:7f:be:28:28:a1:21:9c:aa:f9:
                    85:64:53:10:27:96:11:ab:b4:58:95:4d:e6:67:28:
                    85:da:6f:d9:02:a8:f9:8b:16:c9:30:83:e8:33:40:
                    26:60:99:3d:0d:92:e3:b7:42:bf:c0:fd:20:ef:d3:
                    c5:58:e5:d6:7e:b8:86:5f:06:75:3e:30:d7:72:eb:
                    00:e4:ae:f8:e9:65:5e:48:54:b4:60:f8:44:0b:2d:
                    44:32:79:14:02:28:5f:1e:0c:33:af:58:e0:e3:3d:
                    c4:76:9b:e4:09:65:ef:03:11:98:d7:39:8b:02:95:
                    ba:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5F:BA:8F:42:54:ED:C6:DD:64:99:D0:18:B2:D4:C4:1E:A7:99:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8177::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:fd:52:4a:4e:64:d7:1a:d0:34:2b:b4:3f:1e:a8:01:fb:
         9b:0d:df:17:8c:87:fb:1c:b9:e0:c0:fd:27:99:9c:55:f2:88:
         c8:ba:9d:3e:ed:08:77:33:12:f5:a0:77:d2:92:55:aa:63:79:
         b0:e5:22:6d:10:0c:8d:73:3d:16:01:a9:07:a1:dc:eb:ea:07:
         a5:99:d1:e8:18:2f:ac:df:7b:7c:1a:36:4f:08:b2:6a:f9:c3:
         b8:31:f9:a3:48:2e:88:3a:5d:70:9a:11:4c:29:50:e8:93:4c:
         71:67:ed:26:75:32:1f:35:97:fa:78:48:54:be:4e:27:86:96:
         bf:03:75:ad:de:88:72:19:55:2d:0e:4a:48:c5:b9:fc:54:6b:
         e7:3c:b9:85:ff:0f:19:b7:74:72:51:44:02:1c:4b:d8:7a:ce:
         6d:5e:8b:b0:4f:4b:be:68:03:27:4b:b9:8d:0f:6c:fc:84:c0:
         d3:66:e2:42:90:49:96:40:48:4f:91:10:d1:45:13:cf:e0:29:
         c9:4e:fb:1c:a0:ab:fd:67:72:c4:d9:e8:7d:83:73:06:63:01:
         bb:5a:09:e5:f4:62:b5:a9:16:bc:5b:38:0f:b9:03:5e:c7:1f:
         1f:1f:06:bf:5c:74:db:53:2c:22:98:09:60:54:aa:46:35:76:
         64:c4:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:32 2024 by rpki-client on console-ams.rpki-client.org