Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3feef19a-be1f-388a-ae35-86778ba3a073.roa
File:                     3feef19a-be1f-388a-ae35-86778ba3a073.roa (raw, json)
Hash identifier:          hoCYE9dEjl2DtffANg8o4nbYuNVmE6+iQlGjJF23nKs=
Subject key identifier:   9E:E2:5F:1C:17:98:05:8A:72:3C:FB:EB:B4:93:BD:1F:EA:72:DE:B8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967DD08074AFAD3A198F8200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3feef19a-be1f-388a-ae35-86778ba3a073.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:878b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:d0:80:74:af:ad:3a:19:8f:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=af28df02-eb15-4d71-801f-fb147b35f759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:ef:19:04:00:ec:d8:53:50:61:ca:29:c0:
                    59:40:64:3d:06:5b:e7:69:8a:8d:e0:93:eb:e7:ae:
                    55:f4:62:da:d7:f7:b6:b0:c6:2f:bf:e8:dc:1f:d2:
                    0d:01:8b:da:be:7b:ee:00:c9:8d:f0:cc:94:d2:d9:
                    f6:8a:99:00:c2:86:25:32:fb:80:ae:82:2b:dd:c2:
                    21:74:5f:a9:92:b4:f2:98:b0:2b:21:62:fc:65:30:
                    c4:0f:d3:09:9f:19:62:49:8a:49:2b:35:e6:b5:a5:
                    89:80:d6:19:7f:5d:02:50:dc:bd:e9:70:55:09:ab:
                    93:99:f7:bc:68:a1:ff:46:9f:b3:4f:6f:8d:6a:35:
                    7c:1b:fe:51:05:1d:e0:96:95:8a:65:42:b3:38:fe:
                    ac:86:60:75:96:18:1b:b2:a8:c6:ab:ce:47:0d:5f:
                    af:9e:1e:1a:7b:c7:eb:89:8c:bf:b5:8e:d9:bd:30:
                    2a:e2:fc:15:17:0a:e7:f7:58:d1:d8:b1:e0:40:8f:
                    c2:12:04:ba:5c:3f:c7:88:75:4e:a2:6f:3f:5d:1f:
                    f0:3a:9d:da:c4:51:2d:b3:4a:50:9a:2a:49:0b:30:
                    9c:99:ab:27:bc:2b:95:bb:b9:bf:8d:71:08:81:30:
                    e2:4b:69:13:38:25:80:d0:1d:fa:a5:67:72:7b:50:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E2:5F:1C:17:98:05:8A:72:3C:FB:EB:B4:93:BD:1F:EA:72:DE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3feef19a-be1f-388a-ae35-86778ba3a073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:878b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:02:b7:30:9f:ca:2f:a0:28:29:e3:b7:59:bd:8f:1f:59:
         45:59:4e:bf:37:a1:e2:3b:76:3a:e7:af:42:52:cc:25:8a:07:
         08:d6:25:24:00:95:8d:65:85:08:05:d3:09:bc:64:d3:b1:aa:
         af:66:0c:cf:f9:bd:77:3b:29:a1:26:f6:b7:0d:e2:66:44:57:
         67:07:a1:23:90:05:7e:d2:cc:0b:60:e6:e8:d4:2c:19:b6:1e:
         bf:82:57:3a:da:64:04:e0:ce:c6:f2:63:55:f3:fe:c2:2f:e6:
         0f:58:35:77:ce:e7:5f:af:8f:be:2a:31:fd:fd:f8:4f:06:01:
         a0:c9:38:c5:96:4a:86:7a:46:74:cd:49:38:ea:68:5b:60:5c:
         37:12:af:92:7e:16:0b:25:fe:03:18:75:0c:d8:fd:93:08:9b:
         99:2e:fa:c7:43:65:51:88:2a:56:f7:13:3d:56:0a:93:92:d0:
         0d:46:df:29:2a:5a:77:4d:2b:16:23:b7:80:d9:4b:0b:ac:97:
         f9:0b:ba:38:2f:1e:a3:80:d3:3e:e3:dc:c2:36:39:02:8b:2f:
         e3:5c:7e:a2:3d:f0:b4:9c:42:50:ad:b0:c1:e4:50:b1:3a:0b:
         5c:71:fb:24:c6:fe:a8:ba:8d:c5:a2:82:64:52:30:01:65:1a:
         52:c6:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:32 2024 by rpki-client on console-ams.rpki-client.org