Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4741f151-188e-3ef8-a40c-52d5d2b35816.roa
File:                     4741f151-188e-3ef8-a40c-52d5d2b35816.roa (raw, json)
Hash identifier:          wMiWaIO7k58jC2gPlrQQu1OW41cFVXoejiDuww9PCS0=
Subject key identifier:   99:73:E7:09:23:16:EC:38:2E:11:F0:FC:71:27:E0:FB:B1:9A:9E:3F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F382481DADABA2E2F500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4741f151-188e-3ef8-a40c-52d5d2b35816.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8bcb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f3:82:48:1d:ad:ab:a2:e2:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=2b513931-485a-4a68-a963-e7eebc6ab9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dc:4e:7d:f7:01:97:24:00:9e:a1:fd:d6:2b:
                    08:e6:a6:5f:1f:67:cc:c3:16:8a:4a:44:6e:37:aa:
                    18:68:99:26:87:73:d9:fb:88:14:5b:f7:6e:7a:2f:
                    96:76:18:d3:da:b4:0e:df:34:06:1f:07:ac:d7:14:
                    e0:55:0f:7a:0a:61:9e:4c:98:fa:67:2a:6c:63:c1:
                    63:7a:30:d4:42:08:1c:80:a9:08:c6:f2:d3:97:c0:
                    92:9f:98:21:58:6a:05:d6:a3:76:1e:bd:2b:ed:65:
                    a8:30:30:a8:9b:57:7b:44:ed:9f:77:db:10:56:db:
                    e1:7b:cd:f8:9b:27:dc:40:52:4a:9c:4a:3a:0c:f2:
                    25:da:a3:ef:02:3d:a0:df:6a:85:f2:56:f7:81:7a:
                    53:91:53:77:d2:98:4f:da:16:65:38:67:1f:e8:37:
                    26:f7:c6:d3:1b:c9:e2:cf:02:f9:1b:33:0f:49:db:
                    b5:c3:2b:83:17:5d:2d:40:95:84:fd:1c:ae:ed:f5:
                    6c:94:53:b9:ee:38:02:86:a5:86:82:bc:d7:56:02:
                    d3:0c:c0:89:c6:20:e1:4e:e1:26:d0:3a:fb:70:7b:
                    52:08:96:01:c8:30:6c:db:56:c9:f9:27:e2:ba:fa:
                    24:00:f8:1e:7b:29:e5:1c:75:43:77:84:ec:36:5b:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:73:E7:09:23:16:EC:38:2E:11:F0:FC:71:27:E0:FB:B1:9A:9E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4741f151-188e-3ef8-a40c-52d5d2b35816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8bcb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:bc:91:a2:80:d6:d3:81:ff:9e:11:e2:a6:9b:a5:10:ef:
         5b:85:14:f7:09:34:8e:77:54:85:c3:5d:12:51:a8:b5:23:c7:
         7d:8d:29:23:b1:1d:ca:4f:12:6b:3e:ca:6f:a4:ff:16:ba:b8:
         69:d7:fa:72:0b:0e:b6:1c:b5:24:c2:f0:15:89:c5:8c:10:23:
         73:d9:a8:41:97:63:4d:c0:4c:c4:35:17:80:a9:49:c0:74:0d:
         89:6f:e6:cc:5c:88:8c:3e:c1:03:21:99:3a:f4:cb:ba:38:28:
         d3:e8:fa:c3:53:1c:a3:98:8a:61:66:42:57:ed:18:0d:48:0a:
         57:99:e4:df:2e:e0:55:b1:6c:af:e5:f9:e4:c3:83:c2:87:b5:
         55:4f:8a:74:8e:f2:84:4f:4a:3c:ce:3b:8e:88:3d:1e:c9:43:
         f6:61:80:f6:e0:d3:05:63:46:41:f2:04:b6:ef:fa:92:e8:d4:
         b2:fa:c4:fc:ad:ab:56:ec:6c:f3:70:2a:31:00:59:ff:64:5c:
         2e:6e:16:b8:6f:ba:6b:d5:07:ca:26:be:d8:52:2b:ba:54:95:
         01:6f:3f:9d:ce:ab:1e:b2:61:f1:02:b6:3b:d1:eb:2e:e9:04:
         4b:dc:19:67:69:d3:03:7f:ff:d2:32:ce:9f:4d:d7:6f:0a:18:
         56:42:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:07 2024 by rpki-client on console-ams.rpki-client.org