Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa
File:                     4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa (raw, json)
Hash identifier:          49OpvRKRD9iZ3fIj+ugIPKXF4J5ME/PSmaL1CE1He+k=
Subject key identifier:   CC:E8:CE:F9:7C:F5:72:9F:87:35:B2:EA:69:C9:4A:70:9C:3F:7D:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD60846A46A018387C22798
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:801f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:08:46:a4:6a:01:83:87:c2:27:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=59a3ad71-0d07-443b-bb0f-8b6dd602ca71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:4a:96:ad:25:12:dd:e5:86:d4:c7:9d:bf:
                    95:49:32:5e:70:93:c6:8b:5e:56:af:f2:13:2f:fd:
                    9f:55:12:a4:8d:b1:d1:70:01:7c:df:94:ea:56:28:
                    52:fe:c7:7f:6a:c5:91:fc:5b:05:c6:70:46:99:35:
                    cb:90:e1:c8:de:94:a9:ae:14:f7:64:18:e8:3c:bd:
                    bc:ca:60:93:ba:fa:b3:65:32:02:8a:5d:99:bc:df:
                    d5:32:47:16:1a:4a:5a:18:15:29:95:cd:ef:d4:5e:
                    59:0e:a2:62:d5:bd:db:7c:cd:09:36:8c:57:1d:90:
                    8d:bd:4a:ca:9e:fe:1a:d6:af:18:ec:2e:ff:77:84:
                    b1:36:9f:6e:e3:db:4c:83:90:2d:ae:e6:d7:2d:0f:
                    eb:07:7f:b4:69:a0:a5:9e:9e:50:64:f9:cc:81:5f:
                    23:0c:d8:a7:c1:11:66:38:4a:ec:8e:a8:3a:fc:4d:
                    6a:4a:1f:f9:f7:db:f1:1f:2b:00:05:c1:fa:b5:cf:
                    ec:8d:5c:a0:2c:8c:fa:e4:a2:8c:48:03:2b:f8:a1:
                    e4:ff:67:4c:d2:87:49:69:7d:99:c2:3f:b5:77:d2:
                    43:b1:73:bd:ac:57:34:4c:ee:1e:1b:c8:8b:e1:6e:
                    af:21:2d:32:d6:7c:ab:2b:0f:b8:05:bf:10:5c:c0:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E8:CE:F9:7C:F5:72:9F:87:35:B2:EA:69:C9:4A:70:9C:3F:7D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a57b41f-4c11-32a3-bef7-a56153a7cb1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:801f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:11:ec:04:31:62:b3:b0:d3:f5:6a:85:a6:28:69:10:81:2f:
         7f:9d:25:4e:7d:0c:1a:e4:2b:1e:6e:1f:af:0a:28:8b:99:30:
         16:00:c3:d7:f0:76:3f:da:6f:59:99:ea:dc:59:e4:6f:da:c1:
         a0:d8:9d:b1:99:a0:c3:12:89:c4:46:d6:4f:9e:7d:96:f9:f3:
         4e:eb:c5:12:e4:71:7e:0a:a2:a8:d2:bc:80:bb:de:48:4f:78:
         9c:9d:13:50:96:e5:09:0c:e7:c9:f4:6c:7e:db:4b:8f:4b:fe:
         91:28:8f:24:76:6f:e1:4c:21:f1:5f:e5:a4:6d:84:5c:a5:ac:
         9f:9c:8e:f1:a0:2c:24:7e:0c:78:cf:f0:7d:8e:f0:a4:4a:06:
         1d:e2:b2:ca:9a:51:2d:19:a4:60:12:02:f7:4a:25:06:3e:00:
         20:2b:28:a8:5f:04:53:83:32:57:29:63:5c:e8:2b:eb:d4:85:
         86:fb:cd:ad:10:10:33:a5:df:9d:ed:e5:f3:60:4f:65:b0:5c:
         b7:14:e8:92:e5:38:54:e0:e8:06:71:5e:12:41:5a:09:f5:f7:
         fa:ab:b6:10:9a:7e:35:fc:f0:83:c6:25:a5:30:fc:df:98:ca:
         87:e5:01:d3:71:ff:d4:01:32:fb:6b:29:b1:f8:dd:c0:e0:50:
         c1:14:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:18 2024 by rpki-client on console-fra.rpki-client.org