Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
File:                     4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa (raw, json)
Hash identifier:          g80c5gx3jUKSWg3Q7QlE0wMBOmktcYao0QbIuigtasc=
Subject key identifier:   0F:7E:98:0F:CE:46:BD:04:36:A9:7C:0A:E2:F4:BB:CF:CE:92:E7:15
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2ED2180A22686138901C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80e7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ed:21:80:a2:26:86:13:89:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=b4c769f9-049b-4d1d-8671-5e4ec986e1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:5c:94:29:f2:48:50:57:bd:32:d3:98:7e:
                    cf:3e:30:56:9d:a0:39:b7:67:bb:d4:07:49:50:46:
                    2d:39:11:32:e6:3f:b5:4b:a7:36:a2:cf:26:5f:34:
                    0a:e4:58:84:ef:68:32:04:76:1e:46:83:f5:74:65:
                    c9:13:8b:46:80:4a:d7:39:a8:c0:94:a8:ed:bf:17:
                    76:5d:84:b6:c0:3b:64:4e:04:8c:09:10:a2:64:a8:
                    69:cb:4c:f2:47:ce:13:4d:67:53:40:75:78:35:96:
                    05:15:7a:5d:ab:c1:2a:90:e4:4c:0f:f1:8e:87:38:
                    d9:50:68:ee:f3:ef:6f:4e:3d:7f:66:b2:7a:f4:3c:
                    1b:9a:4d:3f:65:4e:80:be:5c:ba:66:ce:13:3d:0c:
                    de:05:10:67:53:e1:d6:5b:ab:18:32:9c:23:a4:6b:
                    52:85:ce:d0:ed:77:76:af:b3:58:0d:21:50:ce:9b:
                    78:3e:78:dc:c0:b9:3d:8a:c3:a3:e1:9e:be:47:e9:
                    d8:22:c7:48:a6:5d:8a:80:13:f7:c3:14:0f:e4:1c:
                    56:5f:61:ce:72:2a:61:31:98:da:07:e0:b5:3e:88:
                    76:8a:33:5c:bc:e1:30:a9:08:96:f7:4a:f4:2b:26:
                    0e:28:72:d5:52:3b:84:5d:c7:6b:30:43:5d:43:a3:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:98:0F:CE:46:BD:04:36:A9:7C:0A:E2:F4:BB:CF:CE:92:E7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:94:e8:5c:07:96:fd:b5:fb:8e:a5:5b:19:e5:d8:6c:02:f1:
         bf:2d:8a:ce:83:08:75:8c:a7:3c:73:62:fa:b1:57:fd:e0:9d:
         8e:dd:91:3a:2b:6f:e5:56:7a:56:05:5d:f5:ec:41:57:54:26:
         e0:d6:36:16:c9:86:5e:7a:57:d3:1f:bb:b9:54:09:ec:4c:71:
         26:90:eb:79:a7:6b:ee:eb:fc:a5:7b:9c:8f:27:5d:dc:0d:03:
         ed:83:1d:72:92:9c:55:aa:a8:ca:f9:41:b8:f3:8c:ea:c4:8d:
         58:db:e2:e3:10:8a:b4:31:c5:6f:bc:82:56:f0:14:f3:4d:39:
         50:42:ce:ce:1f:dc:77:24:ae:52:07:f9:fc:30:02:fc:d1:1e:
         6a:37:ba:a2:07:e3:fe:22:77:42:45:1e:9b:1f:7c:6a:38:70:
         54:24:f1:f4:df:a4:85:45:af:58:ef:21:d5:5c:93:16:79:fa:
         2a:3a:ef:81:35:8b:fe:0b:cb:25:4a:51:2a:b9:d9:b8:b7:4b:
         8f:66:4f:49:8d:bb:65:69:95:82:7f:d7:27:f8:67:ca:52:39:
         67:5f:2c:b9:73:13:b2:81:ac:fe:be:54:db:9d:ec:08:a7:3f:
         84:64:d0:b4:6b:a6:4d:ba:08:0b:8b:f9:ad:de:d1:f9:00:aa:
         99:9d:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:05 2024 by rpki-client on console-fra.rpki-client.org