Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5260160f-964a-33ec-bfb0-da544e679e3a.roa
File:                     5260160f-964a-33ec-bfb0-da544e679e3a.roa (raw, json)
Hash identifier:          e5V9J6eELb+SAanXgMAjsFu63GTw6OvLyFloa4Uycug=
Subject key identifier:   9C:8C:79:77:00:75:91:AE:D3:60:B1:32:CC:ED:B1:EB:0F:3A:AA:BE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EE2042FC7C1D7DFDD580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5260160f-964a-33ec-bfb0-da544e679e3a.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8028::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ee:20:42:fc:7c:1d:7d:fd:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=94bcd9fc-1e84-4230-9373-0c6e747327dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:10:3c:4e:d7:34:ac:1c:6d:e3:c4:28:94:
                    e1:6a:97:76:33:8d:b3:39:e0:7a:3f:5b:0a:da:09:
                    f5:88:a9:c7:b9:1e:d5:31:8f:cf:8e:6c:38:96:93:
                    6e:74:35:ac:74:8e:1d:dc:e6:d9:b4:85:df:96:38:
                    37:12:23:78:8a:5c:5e:10:47:fc:3f:f6:9d:4e:40:
                    a0:66:7c:5c:e5:98:0f:67:74:da:0f:00:32:26:b9:
                    d5:16:5d:f3:77:36:25:06:af:8d:48:dd:df:bf:ea:
                    f7:82:b3:71:f0:f5:05:43:eb:e6:bc:2c:e1:cb:af:
                    a1:55:67:da:78:48:22:ad:45:c2:81:e0:2c:dd:f7:
                    db:a5:2c:a1:8b:f0:5c:45:e4:1e:39:61:61:6c:e5:
                    2b:17:a0:bb:7c:7b:d7:4b:fb:a2:66:39:7a:ce:93:
                    2c:2f:ba:6b:cb:be:bd:24:ce:c9:e3:8b:6b:2e:04:
                    3e:af:4c:37:55:20:34:9f:70:25:70:46:5d:fa:cd:
                    95:55:69:7d:56:aa:04:e8:96:0b:11:06:7b:ff:f0:
                    0a:b5:a1:75:3c:de:84:b7:66:34:49:f3:78:90:82:
                    2a:61:b3:a9:99:27:df:9d:b1:1a:18:94:11:ab:67:
                    b9:48:0a:2a:6a:fd:f6:1c:f0:14:bd:ef:dd:45:73:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8C:79:77:00:75:91:AE:D3:60:B1:32:CC:ED:B1:EB:0F:3A:AA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5260160f-964a-33ec-bfb0-da544e679e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:30:aa:23:9d:c9:a3:b9:6e:0a:b0:9b:0c:0c:83:68:ce:07:
         6f:6d:8e:77:1d:2d:35:3f:48:ce:55:01:95:6b:bc:28:a3:13:
         2e:91:d7:ae:61:9f:25:94:bc:7f:d6:dc:f3:c7:25:7d:50:aa:
         ba:12:8c:af:53:02:97:f1:41:48:d6:8d:99:8a:4e:d9:70:99:
         4e:d5:06:96:4b:3d:ea:5f:44:9a:48:0e:2b:d9:ec:49:14:79:
         b9:2a:f7:b8:f4:9e:bc:42:cf:ff:28:72:9e:2c:fd:89:32:1a:
         41:1b:3c:88:7e:a7:10:9b:72:48:29:4d:b4:92:89:f1:d3:ab:
         32:f4:d9:00:5c:7b:d7:33:81:b5:be:87:67:87:22:e6:67:fa:
         ef:93:14:b6:96:af:ad:c1:0a:04:a7:89:f2:ad:05:f6:84:13:
         d0:a5:4a:1b:9f:a2:b1:6f:eb:f2:ab:5d:7f:c4:62:92:6d:23:
         c9:2f:33:33:35:b2:5c:97:81:81:ab:a9:32:b3:09:08:f2:a0:
         11:89:5e:04:ba:d8:b7:26:99:14:50:44:b3:0f:06:85:9a:e2:
         d9:de:1d:bd:4d:fa:fd:2b:1e:4b:b2:fc:e1:33:ff:61:19:d2:
         dd:ee:5e:a3:f1:3d:eb:85:83:2e:f4:fe:73:dd:d3:95:12:48:
         23:52:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:07 2024 by rpki-client on console-ams.rpki-client.org