Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4247e90a-bfc5-39e0-a7e0-96edbd717ce3.roa
File:                     4247e90a-bfc5-39e0-a7e0-96edbd717ce3.roa (raw, json)
Hash identifier:          dLGaRHCSJLCCAyaZ6Dc9jq5Fhy3yf4t8guA+aTa6btk=
Subject key identifier:   19:A3:3A:0A:58:91:1D:FA:CF:2E:59:A3:BB:55:C9:67:4C:2C:3E:B0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5ED3C0C8DD59D548EE280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4247e90a-bfc5-39e0-a7e0-96edbd717ce3.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8571::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ed:3c:0c:8d:d5:9d:54:8e:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=9bb56c95-4907-415c-8350-aa4f341aeed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c5:65:87:6c:90:3a:4c:59:25:89:8a:7f:f4:
                    45:6e:2f:41:6b:3a:2d:ec:96:61:a9:d0:59:f5:41:
                    a3:48:3f:4d:c8:35:3e:25:70:9a:93:4d:ce:0d:e9:
                    df:21:89:70:6a:96:ef:5e:9b:2e:b4:50:a1:cf:d3:
                    9f:40:62:ae:69:71:57:49:83:db:20:68:8c:1a:eb:
                    2c:b1:07:5a:33:9e:69:86:29:4b:c3:b3:23:cb:40:
                    54:0c:73:3c:98:a1:ce:8d:b8:2d:67:fe:55:5a:7a:
                    7a:ed:dd:6b:8c:3c:b6:12:8d:51:9e:40:07:e5:e1:
                    01:5d:a1:c8:14:00:b1:8f:5b:ca:da:ce:0c:b4:cd:
                    42:81:bc:62:71:b7:e4:ee:4d:90:30:6e:64:f7:23:
                    9a:3a:c3:4e:3a:61:41:a7:32:fa:ca:74:01:6f:ba:
                    36:70:d0:10:57:50:b9:5d:54:e5:a6:f5:8e:f8:4e:
                    83:9a:35:e9:63:9d:e1:ce:3c:b8:bf:d1:6f:c5:86:
                    06:dc:42:b0:09:98:87:9c:7d:54:75:2a:f9:07:d2:
                    ae:5b:f8:e9:14:59:a2:f0:7b:f9:a2:27:e0:43:d9:
                    c0:09:da:9c:78:57:56:31:56:66:73:6e:8c:40:58:
                    02:07:24:3f:27:95:8b:bc:39:3d:6e:8d:97:bb:df:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A3:3A:0A:58:91:1D:FA:CF:2E:59:A3:BB:55:C9:67:4C:2C:3E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4247e90a-bfc5-39e0-a7e0-96edbd717ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8571::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:71:4a:13:3b:ca:e7:5b:ff:c6:82:08:ce:7d:c6:15:f4:58:
         42:16:84:e1:b7:9e:10:5f:09:0b:a1:e0:87:f2:53:d6:c1:6d:
         58:4d:8b:5d:12:a4:f5:b7:9f:5d:a4:4e:c1:5d:e1:d0:6f:16:
         09:4d:73:e0:8d:25:c4:f3:fc:58:48:f6:c5:80:ef:0a:ed:33:
         95:11:4e:c4:49:d5:42:4e:27:81:f9:11:40:59:5d:51:fd:4c:
         c8:e6:50:1d:9f:e4:b9:4e:fd:ac:01:b0:56:bd:a6:06:ba:68:
         49:65:aa:b7:6e:97:90:16:50:fc:b2:70:0e:a8:bb:74:1a:86:
         d4:6e:2e:5b:a5:6f:5f:d3:a9:4e:7b:40:e7:02:d2:b3:cf:e6:
         2e:0e:91:89:1e:e8:a6:8a:3d:65:c3:1d:2b:a8:25:d9:0e:3b:
         f4:1e:05:8b:ea:17:59:b5:97:03:ca:d3:96:d5:5a:ba:ba:0a:
         76:ff:48:25:32:ff:01:47:3e:ea:88:42:3e:eb:84:b7:6b:21:
         7d:60:bf:f1:a9:80:96:06:dc:f4:23:5c:bb:e6:e7:f4:4c:c3:
         55:25:03:66:3d:8d:8e:2c:65:4d:5c:c1:31:b0:40:b4:d5:d6:
         fb:ab:41:15:b8:5a:79:ee:db:f6:53:93:55:f0:6c:9d:6c:77:
         07:76:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org