Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5576a24e-b951-3970-89de-1389c09af4e9.roa
File:                     5576a24e-b951-3970-89de-1389c09af4e9.roa (raw, json)
Hash identifier:          oi0Jdjbus6C3LC39aNiGCn4phTPk6Wup99mrxxjv7jA=
Subject key identifier:   44:F3:62:44:83:6D:4D:75:E5:CB:F9:CF:D3:CB:46:11:7D:A5:68:CB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967DAE6072BAFD589E82F6A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5576a24e-b951-3970-89de-1389c09af4e9.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:84e5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:ae:60:72:ba:fd:58:9e:82:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=2bac0ca6-20ff-4b1e-bc21-19be5f43ac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:24:18:f1:95:d2:94:23:08:79:c5:99:93:
                    ab:2d:3d:3b:cc:ad:cf:cf:3e:8e:3e:91:86:5b:5c:
                    eb:92:a9:5e:12:e7:00:db:cf:05:c0:e7:c7:5e:21:
                    ad:09:a0:38:5a:70:46:87:93:70:be:be:2c:4d:d1:
                    89:04:1f:03:e6:75:33:67:68:6b:86:10:52:1e:60:
                    c6:e9:be:fc:93:fe:e3:8f:37:f9:b6:82:18:5c:9c:
                    f6:6d:20:80:42:34:8b:16:f6:3a:0b:3e:6f:8e:df:
                    c0:3e:3e:23:ac:51:31:af:ba:80:04:43:d8:b1:45:
                    6f:da:67:e0:6d:36:35:cb:ee:90:c7:03:aa:d6:b0:
                    bd:97:f6:34:eb:ca:70:6c:a5:40:35:ac:cb:ac:c8:
                    3f:a8:60:cc:fb:a2:d5:9c:91:7e:32:fb:eb:de:66:
                    50:1d:39:f3:7b:91:fa:0e:e9:4c:7d:11:23:9b:c7:
                    8b:5e:d1:bd:d1:46:3b:7f:6a:76:b7:b9:c4:9a:66:
                    5b:c1:7a:cb:de:06:59:29:0b:70:0a:9e:e8:3b:a7:
                    ef:d9:52:0a:a8:bc:c4:9f:e8:fe:fc:1c:9d:3a:c9:
                    39:ac:48:ab:d6:66:6a:3b:78:f9:4f:54:5a:78:5c:
                    9c:60:88:df:d8:01:fb:7f:2f:12:00:d0:6a:c1:60:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:62:44:83:6D:4D:75:E5:CB:F9:CF:D3:CB:46:11:7D:A5:68:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5576a24e-b951-3970-89de-1389c09af4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5f:ca:98:6b:90:54:ed:bd:69:ff:a0:24:60:9f:05:a0:bd:
         cf:d6:e0:1d:53:d8:3a:41:cf:2b:8d:c9:b3:d0:91:02:6b:df:
         61:9f:cd:45:32:a3:06:3f:df:1c:2f:bb:d9:e5:3f:e1:75:d1:
         c5:04:3e:bb:32:8c:a3:43:f4:0b:18:a6:38:97:39:99:b1:9a:
         0a:55:11:ef:70:37:30:78:fd:68:4a:49:5f:1d:09:63:56:c1:
         41:bf:a0:33:3b:36:27:bf:38:59:c2:4f:9d:6f:ec:4f:d2:a7:
         ee:fa:f6:a4:86:0a:5e:94:5e:ed:3f:6a:4a:f8:bf:9a:e0:a2:
         de:11:df:83:dc:35:97:d2:db:22:9e:10:66:4c:9c:dc:30:b1:
         16:3d:23:a1:f7:f1:26:7b:1d:3f:79:a6:35:58:b2:c4:0e:f0:
         97:69:7f:38:84:da:46:40:ef:e1:d0:e4:09:44:6a:a4:00:0d:
         a5:c7:56:b6:ba:7f:67:09:52:d4:54:8c:0b:b0:92:58:2c:66:
         56:e1:58:14:28:a0:06:e7:f2:76:c3:52:5f:46:dd:5c:eb:11:
         74:ba:24:6f:5b:5f:b4:1d:89:d5:25:20:3b:44:cd:50:9f:71:
         10:37:bd:c9:f1:02:c2:62:8e:e3:f2:bd:64:d1:f9:c0:b4:b5:
         76:ba:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org