Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a6f760e-eb4d-31de-99a5-a2e50131a3a9.roa
File:                     4a6f760e-eb4d-31de-99a5-a2e50131a3a9.roa (raw, json)
Hash identifier:          dcTVjLO+4IYa30Jwojajl4ccy0ju5Zies8A3GeSCW4M=
Subject key identifier:   3E:DC:E4:B9:78:83:4E:16:25:BA:3B:47:50:90:FA:6A:15:61:F2:1F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967C95DAB9FFB64E51EA7380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a6f760e-eb4d-31de-99a5-a2e50131a3a9.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8033::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:95:da:b9:ff:b6:4e:51:ea:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=db762460-0f49-4894-98ed-7402e7c52cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:85:75:a7:81:57:a1:7f:18:d8:73:b2:94:
                    c6:ca:04:0c:34:09:70:24:05:79:01:0d:18:f0:dc:
                    94:11:75:04:f8:61:0e:e7:9e:a2:d7:38:18:b4:02:
                    18:e5:53:a7:bd:8d:e3:d5:2d:d2:b5:17:76:31:70:
                    23:18:0c:24:a5:47:e8:cb:fa:a8:da:e6:d5:f5:7e:
                    ce:f8:60:f6:e1:da:f2:50:c7:ff:49:52:13:98:0e:
                    cc:96:4e:64:91:f2:c0:5c:11:88:a7:09:aa:45:1d:
                    3f:a8:55:f8:e8:e8:70:a6:fe:98:5d:ce:82:eb:db:
                    8b:d0:eb:c0:40:0f:b5:4a:6a:6a:87:87:93:8a:a8:
                    0d:ec:02:6c:f9:de:8f:44:98:82:3e:6d:c4:92:cb:
                    85:cc:b0:c8:6c:ef:93:15:52:03:37:ef:01:4b:6f:
                    69:26:1d:f6:bd:a9:86:15:07:97:0d:9b:23:f1:ca:
                    0a:42:7d:2b:4d:40:f8:d5:f6:63:a6:da:9c:2e:d6:
                    5d:52:b8:6f:b9:8d:fc:b7:ea:d9:a3:9d:1c:6e:6b:
                    da:89:a2:5f:ee:e0:e3:44:02:dd:55:e6:85:b0:df:
                    41:64:0a:24:f0:23:47:f0:d8:77:c5:50:d2:09:37:
                    4b:e6:19:71:7f:24:59:06:3d:1b:7a:58:00:73:78:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DC:E4:B9:78:83:4E:16:25:BA:3B:47:50:90:FA:6A:15:61:F2:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a6f760e-eb4d-31de-99a5-a2e50131a3a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8033::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:f2:97:6f:5d:5c:04:81:1b:b3:e9:fc:75:8c:dd:e2:c2:
         0f:3e:66:b1:4d:2a:43:ad:0c:7d:a3:33:ac:45:4d:8f:1c:ee:
         39:61:37:f0:61:1a:49:4f:46:f4:ab:bb:c8:f5:36:9f:09:4f:
         8a:ff:79:7e:8f:ca:8a:5a:18:08:21:ca:78:2d:61:78:e6:42:
         3e:ff:3c:19:23:a1:e9:5f:88:b3:ac:46:08:31:a5:3a:75:5c:
         c2:40:2d:df:9c:c8:25:a4:ff:99:9a:59:d2:c8:2d:f9:e4:34:
         a1:37:af:1f:9e:66:c3:ec:36:69:23:0a:81:2c:e8:ba:36:fd:
         45:a4:81:cd:af:a9:b0:6a:26:34:11:6d:94:c8:c1:59:6b:91:
         2a:09:75:10:d6:b8:37:8a:6a:f7:50:8e:19:af:70:55:be:e2:
         ed:d1:54:e9:8a:3b:d7:d3:23:93:0f:3e:84:e4:42:66:9e:1a:
         61:27:fb:c7:c1:bc:ee:cc:02:ce:e1:32:ee:6d:c4:8a:19:7b:
         52:89:d5:a7:2c:0b:27:50:36:6d:d4:3a:f4:d8:05:95:97:5e:
         a0:04:05:bc:4e:79:8d:cd:e1:49:cb:7f:b8:d7:73:df:ab:e8:
         5d:f6:c0:31:a6:ef:d6:74:eb:85:86:86:54:17:95:98:22:3d:
         9a:c9:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:11 2024 by rpki-client on console-fra.rpki-client.org