Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa
File:                     49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa (raw, json)
Hash identifier:          nLmNDKVFUsQxcvpQlQit2M15Bv85r85i8pmeMXk+Uqw=
Subject key identifier:   37:7E:2A:12:E5:56:D0:87:D7:FA:DD:1E:8D:4A:C8:DD:14:A2:3E:46
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD60ACAACF8171444641500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:89eb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:0a:ca:ac:f8:17:14:44:64:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=58d617fd-179e-4ac5-967f-5054b6956be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:da:ee:ca:24:56:ee:55:dd:63:10:fe:6e:
                    71:9f:56:7b:21:1b:3c:e2:71:85:55:e9:ed:68:55:
                    ae:7d:3a:da:40:05:f7:7f:78:b2:bf:b2:0f:cc:b7:
                    02:d4:04:1f:87:17:27:93:a2:e9:bf:fe:3f:a8:7b:
                    40:76:69:10:81:87:ed:6c:4c:6f:66:5a:b9:70:db:
                    18:70:f2:2d:a5:a1:ba:49:3d:4d:49:4c:a2:24:38:
                    87:3b:e9:72:cd:37:d6:a7:e7:a3:53:36:69:87:a1:
                    d5:0c:8f:41:1d:37:04:e7:c4:b0:84:81:7d:17:12:
                    31:62:84:84:28:c9:5f:32:b1:3e:d4:38:35:02:0a:
                    18:72:3a:6a:4f:bd:fe:a2:56:a5:68:52:e9:b8:67:
                    05:43:56:91:c8:d8:c5:fa:17:58:65:b7:db:9c:76:
                    b3:90:03:a3:e9:3d:09:56:30:2d:bd:64:a8:dd:63:
                    17:c0:9f:37:e8:87:16:79:82:ab:6f:40:b2:6e:d3:
                    83:63:32:17:16:87:0b:0f:da:65:39:c0:4a:6b:3c:
                    27:18:da:c6:32:d5:11:da:2a:05:9a:89:05:f2:3e:
                    44:f1:fc:54:66:fd:3c:97:41:3e:7f:e1:cc:a9:ef:
                    24:29:f6:74:18:c8:2f:11:3b:b1:29:e9:b5:81:dc:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7E:2A:12:E5:56:D0:87:D7:FA:DD:1E:8D:4A:C8:DD:14:A2:3E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:89eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:21:1d:ec:93:0a:58:8b:58:bc:8f:fa:8e:04:bd:df:3a:40:
         05:f9:e4:84:2c:42:bf:35:c5:b2:e9:92:43:a4:79:25:a4:9b:
         91:04:8b:35:74:82:12:2c:c8:ba:4f:ba:50:16:e0:ca:5a:96:
         2a:9f:3f:cb:be:ae:29:de:93:ed:7d:9d:a7:e6:11:ab:19:71:
         4c:a8:bd:e2:1f:7c:70:f1:6b:ea:21:cd:30:07:3d:d5:98:c6:
         f7:ed:30:cd:2b:a9:4f:40:78:57:4f:af:aa:fc:49:4e:1a:4e:
         89:f5:19:86:33:7b:7f:a7:a7:5b:5d:78:e0:05:ec:17:51:dc:
         69:55:b3:ca:93:af:e2:84:17:b4:e4:87:c9:28:8f:6d:7a:ba:
         73:c6:d7:f1:67:2a:28:95:75:1e:61:b3:1f:f2:9c:86:9b:27:
         3a:f9:8c:89:ba:84:bd:ba:b2:13:de:1a:1d:c6:90:c7:82:11:
         20:93:47:40:6b:8a:ad:3a:56:b3:fe:2c:f0:b7:65:d7:9c:b4:
         23:b7:71:ef:98:a0:79:18:53:cb:58:68:7d:f0:76:cd:95:17:
         63:f1:ae:7b:18:01:e7:61:9d:6b:1d:94:9a:f5:d9:34:fe:c0:
         fe:92:75:0b:8f:52:17:23:60:d2:e7:cd:9f:0e:1d:97:a5:83:
         57:62:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org