Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f9e46f-552f-352e-8235-467bc77d6f37.roa
File:                     41f9e46f-552f-352e-8235-467bc77d6f37.roa (raw, json)
Hash identifier:          NpbZ41eFSwyQmdK1iGMTgzvR3G1ZZu+ylSLX1vec+4Y=
Subject key identifier:   EB:B9:8D:58:96:6F:93:F7:9F:9F:35:78:F8:E8:70:EA:05:BA:3D:98
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EB2C01A55CCEE76EBBD0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f9e46f-552f-352e-8235-467bc77d6f37.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8132::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:eb:2c:01:a5:5c:ce:e7:6e:bb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=b8c04e05-07ab-4fb1-892a-09bd3c9a7044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:aa:85:6c:83:f8:7b:82:12:9f:ef:e3:0f:
                    e0:3c:44:7e:4b:1f:6d:7b:86:c1:12:47:7f:13:d3:
                    e7:e9:ce:6e:01:b8:1f:32:16:49:86:bc:ab:50:97:
                    34:68:ad:fa:90:71:a8:a3:35:1a:ea:30:8f:9a:71:
                    fd:eb:67:52:52:3e:db:c5:1c:91:d0:bc:db:73:6a:
                    51:97:14:0d:d3:d1:b3:e5:0a:7c:37:22:2b:38:02:
                    ec:b1:43:2d:53:08:97:c2:5a:2c:86:49:9e:73:9d:
                    10:de:d2:64:db:23:c7:de:50:b3:12:8e:89:5b:cc:
                    28:0f:38:b5:18:c8:72:87:4d:96:0f:6a:2a:7e:07:
                    06:8b:a6:4c:29:ad:ca:de:e4:df:da:a5:df:ef:5c:
                    12:37:8e:75:7b:8c:d9:a1:24:2e:15:e4:0b:58:88:
                    b8:26:09:6a:8a:9a:a5:22:be:00:55:f8:b5:5e:48:
                    71:7b:f7:d9:28:61:fd:2d:0d:76:22:66:12:b0:ef:
                    fb:5c:19:60:3e:8e:ad:f5:ec:3c:33:e5:29:15:bb:
                    1f:c5:06:6b:16:93:1d:63:0d:bf:c7:54:bc:7e:8e:
                    58:c0:2b:3d:72:5f:76:09:fb:99:43:63:ba:ef:9b:
                    a8:b7:ea:e9:95:62:cb:20:f5:2d:04:02:6d:4b:52:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:8D:58:96:6F:93:F7:9F:9F:35:78:F8:E8:70:EA:05:BA:3D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f9e46f-552f-352e-8235-467bc77d6f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:12:97:46:c3:19:16:6e:d9:cb:cb:a6:59:e0:be:40:76:
         24:e5:34:3e:0b:1b:1c:ee:ed:5e:88:3c:d2:3d:e4:b6:a4:5b:
         c8:27:19:1b:2f:90:ef:b5:a1:74:9b:e3:71:78:93:50:6c:b7:
         22:10:95:d5:45:26:93:64:85:4e:b4:a7:3c:d5:04:5d:ca:2b:
         7a:c2:6e:67:19:cc:f9:50:ca:55:50:5f:4e:83:ce:2a:89:38:
         7f:bc:8e:69:be:8c:bb:76:63:99:2e:5a:bb:41:27:4a:fb:1e:
         c2:fc:e4:fe:46:ad:90:a5:37:41:12:62:ea:b9:52:ec:2a:88:
         fe:eb:83:32:2a:36:d1:82:6f:b9:c2:64:71:e3:51:85:af:01:
         f4:77:d5:b5:ae:74:37:31:9d:9d:b1:58:9e:dc:43:d3:1d:e2:
         ac:73:ad:1d:c7:bb:75:ab:e1:7a:e6:16:1b:99:71:a7:c6:f4:
         e9:58:9e:d8:5f:09:34:f3:29:b3:99:3e:76:44:b4:d8:ae:4e:
         49:e3:d1:62:42:8f:fc:de:ac:19:64:31:43:6e:bb:63:a7:43:
         9f:e7:03:85:c7:17:82:7f:3d:d6:ee:fe:37:e2:98:75:ff:c2:
         c0:08:c5:fb:ec:e4:fc:27:d9:7f:0c:53:f9:0f:44:cd:ee:9a:
         42:6f:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:07 2024 by rpki-client on console-ams.rpki-client.org