Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44704838-884d-3b97-a4b2-8bc858ee1126.roa
File:                     44704838-884d-3b97-a4b2-8bc858ee1126.roa (raw, json)
Hash identifier:          sb9kDJWa4MaT70chVYGR1YoaNFLyvDCmaFB/Uol019E=
Subject key identifier:   25:2D:AF:DA:71:FD:5D:02:A8:B5:55:B6:14:DC:A3:86:28:E1:C6:23
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858395BD69D01B03FF941CC6FA860
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44704838-884d-3b97-a4b2-8bc858ee1126.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Wed 17 Mar 2027 04:00:00 +0000
asID:                     19115
IP address blocks:        2607:f098::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5b:d6:9d:01:b0:3f:f9:41:cc:6f:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2027 GMT
        Subject: CN=133d1346-1fcc-4188-adcd-e41a3db30485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:0b:c0:20:7c:84:29:61:8b:f0:70:44:a8:
                    ba:82:ec:8c:f8:6c:ce:14:f6:55:fc:c8:e9:0b:87:
                    93:c3:32:4c:ee:55:95:db:d4:92:81:df:49:ae:dc:
                    c4:b3:0a:39:d2:d7:83:c3:63:3b:af:30:fc:c1:32:
                    5d:a1:da:6e:c4:e0:17:66:a4:8f:ae:f0:55:52:34:
                    4c:a7:51:c0:0c:8f:bd:8c:7f:35:9e:17:09:4e:1a:
                    a9:74:de:98:02:cc:bc:31:47:04:b2:4a:82:7a:c3:
                    db:f8:2f:ce:33:a3:14:b3:09:5e:03:32:15:91:94:
                    89:73:da:6f:ac:b7:34:ad:8c:ce:0d:7b:e5:83:40:
                    ab:39:46:4b:6b:87:a5:be:c5:ff:7a:1e:9d:c2:9a:
                    6a:68:49:02:1c:b4:92:ca:b3:2c:d6:5f:57:94:1b:
                    55:37:7a:e7:c4:cf:4e:d2:07:77:bc:80:a2:ca:61:
                    fe:a6:ab:17:58:c4:5b:57:3b:c6:56:e4:40:99:94:
                    6b:2c:bb:41:84:c8:82:e6:9a:75:7b:6d:38:b6:51:
                    5e:8c:65:fb:07:70:7d:38:9f:e6:09:f9:5b:f4:1d:
                    ec:1c:04:23:11:73:80:3f:ee:77:e6:b6:4c:b9:fd:
                    69:6b:1d:63:0d:ca:34:30:b5:2d:4a:bf:c3:29:fe:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2D:AF:DA:71:FD:5D:02:A8:B5:55:B6:14:DC:A3:86:28:E1:C6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44704838-884d-3b97-a4b2-8bc858ee1126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:06:ab:3a:ae:1a:5d:c6:e5:18:bc:95:a3:cf:d7:7e:80:
         99:d1:25:92:5d:fc:fe:ac:de:57:02:ad:94:23:99:b0:77:c4:
         b9:95:51:05:72:a9:0f:cc:3d:28:9a:4a:93:fb:4b:34:3f:2e:
         1b:3e:16:c4:ac:fe:9f:74:37:1a:a4:a9:d6:c6:8c:6e:d5:23:
         68:d6:e4:6f:57:90:c1:b0:60:79:4d:f4:cd:c5:2e:d5:02:64:
         1d:9f:57:80:2d:c9:d4:dc:71:88:83:ea:f7:cb:7c:cc:45:52:
         4d:c7:12:e8:dd:f3:48:97:d4:fb:24:71:df:75:1b:29:ec:f0:
         91:62:62:28:2c:58:db:3e:ac:b7:5d:f5:38:f7:af:7e:58:ed:
         6c:55:80:c1:cf:de:0a:6a:1b:15:6a:42:2c:67:8f:44:27:69:
         a8:83:86:ba:82:ad:db:07:a3:d4:4f:a2:59:72:4f:f1:02:32:
         57:d9:28:10:85:ea:73:ab:e1:16:63:cb:15:96:4e:72:72:dc:
         80:9e:2d:bb:4e:f1:1e:d1:d3:ff:04:b3:09:9a:34:8d:17:14:
         dc:fa:98:fd:70:26:57:81:57:ab:8d:91:4a:4b:bd:6b:cf:e0:
         3e:bf:41:48:34:01:57:01:f3:85:3c:88:4e:11:5c:17:60:0c:
         75:a4:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org