Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/394bb273-3acf-34ca-a724-2c962c3526fb.roa
File:                     394bb273-3acf-34ca-a724-2c962c3526fb.roa (raw, json)
Hash identifier:          onKguAwg9GXAx492HR8dhp5xBn13r8BEBlgvHmwfkcE=
Subject key identifier:   6C:B0:C8:19:12:8B:4C:6F:86:67:A8:93:8E:8A:EE:29:37:FF:6A:E3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967C82B736271F85B04CC680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/394bb273-3acf-34ca-a724-2c962c3526fb.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:801b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:82:b7:36:27:1f:85:b0:4c:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=cdc31baf-b313-4d99-bf11-e5430234e90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:43:8a:75:eb:ee:91:12:34:51:ba:11:dd:
                    47:f6:66:14:c4:0a:66:91:f5:de:a8:e1:04:82:c4:
                    77:d5:5f:75:33:f3:cb:49:0c:58:87:3d:ef:a4:ea:
                    f5:a7:44:85:38:82:3c:51:f9:d4:97:62:da:90:80:
                    78:c4:50:79:79:f0:09:fa:20:86:f0:6d:2e:32:8d:
                    52:1a:1b:d7:89:0b:3b:6d:c1:1a:f6:13:5a:d4:d2:
                    6e:7f:10:52:88:6d:09:18:f8:13:2f:05:f0:ea:ef:
                    22:ac:47:1b:2b:78:94:0c:82:21:0b:1f:88:06:7b:
                    87:a3:1e:98:0d:2c:74:b1:5d:81:c1:7f:e8:fb:c8:
                    0f:39:ff:7a:4c:4d:3e:6c:17:12:6d:a9:34:a9:b2:
                    ee:93:66:06:af:5a:22:59:9e:58:96:70:f7:46:5f:
                    bf:62:a9:a2:d3:de:bb:3a:97:86:9b:7c:23:a3:d0:
                    28:48:66:6c:8e:60:67:44:e1:9b:b8:54:55:f1:71:
                    f2:47:ce:fe:3d:79:d1:32:1d:66:c7:a2:93:a3:51:
                    8e:12:1e:00:87:4b:0e:f9:e2:2e:78:d9:63:1e:79:
                    5e:14:62:28:bf:1f:04:17:3f:6c:bc:d5:e7:cf:a5:
                    f1:01:8f:fd:da:f8:6a:a7:8a:8c:74:4d:ca:a0:f4:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B0:C8:19:12:8B:4C:6F:86:67:A8:93:8E:8A:EE:29:37:FF:6A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/394bb273-3acf-34ca-a724-2c962c3526fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:801b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:74:d4:aa:ae:ef:64:45:15:9c:a5:96:fe:d7:b0:e5:13:50:
         f8:9b:78:81:da:55:2a:66:eb:df:37:e8:b2:9b:81:ca:71:55:
         44:33:73:d9:75:fb:f8:e2:83:f6:61:ba:a5:09:17:cf:03:4f:
         16:95:8d:8a:61:18:4d:98:9a:94:57:2b:95:fe:5e:4b:35:ab:
         29:07:cc:41:c7:b4:b2:e9:98:dc:a1:ad:6f:f3:7c:39:f1:f4:
         c2:59:90:48:7b:d3:19:e4:a2:58:ce:d0:9c:24:51:df:82:8f:
         42:89:2d:99:59:c8:91:39:69:b9:04:19:b9:c5:f6:8f:ba:aa:
         46:09:58:48:2b:b5:e7:9d:93:3d:3a:7b:db:06:e9:30:3b:5c:
         9c:6b:70:7b:59:b7:dc:97:92:58:20:54:9c:7e:3b:0a:ad:8e:
         7b:95:59:5b:03:fc:3f:f9:55:70:61:90:c1:fc:f2:61:d6:d1:
         0c:c4:2a:97:71:2a:fe:07:95:92:ee:a3:3c:5c:cb:01:78:10:
         36:91:67:51:95:1c:61:ef:4a:80:ef:29:cb:c6:d2:1e:60:c8:
         24:5d:78:94:50:f5:ef:cc:fb:bb:a2:a3:38:5e:10:7d:d9:22:
         33:7b:47:71:3a:9e:e8:94:2c:2c:b7:1e:e9:cf:75:3d:d6:37:
         22:09:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:32 2024 by rpki-client on console-ams.rpki-client.org