Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5675f250-a647-3a49-aa4f-29f455760e8d.roa
File:                     5675f250-a647-3a49-aa4f-29f455760e8d.roa (raw, json)
Hash identifier:          LBaSqBwAARg1jZpAeHMkinS3wQmH4/81e9c9B4mCk/s=
Subject key identifier:   BB:FE:F5:C9:23:34:38:32:D1:AC:DA:82:66:67:00:0F:44:D4:A5:83
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F2D3C17585C4EFC1A140
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5675f250-a647-3a49-aa4f-29f455760e8d.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8043::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f2:d3:c1:75:85:c4:ef:c1:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=98050d3d-e5f7-4aa9-b3e4-fdfa6567401a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:e6:ac:2a:ca:e6:bc:20:60:4c:41:7c:91:
                    2c:d0:b8:7b:c6:5b:cd:f2:a1:14:a3:83:c3:ef:d9:
                    d7:2e:b7:48:e8:03:16:58:41:e0:44:c2:c7:ac:31:
                    0b:83:a9:eb:eb:6b:bb:2e:de:8d:e6:43:02:c4:10:
                    ef:1f:a0:d9:47:5b:71:77:b9:6f:c1:7f:7f:b9:57:
                    5a:b4:22:cb:81:83:c6:da:2c:10:f1:e2:d9:7d:db:
                    27:48:94:e3:70:f9:b4:4b:ce:b4:41:85:d0:52:8f:
                    7a:80:fc:19:61:86:b4:d3:af:bf:89:c2:0e:05:9d:
                    42:de:29:4e:f7:fd:2b:72:77:36:ce:c1:74:aa:79:
                    3e:0f:dc:a2:62:1a:da:33:90:de:b3:c9:e0:ef:cb:
                    65:43:02:71:3e:71:94:91:2f:81:4a:7a:87:ef:e2:
                    63:a8:32:9e:48:fe:8a:85:3c:ee:94:ba:0c:c1:b0:
                    a8:59:37:78:d0:86:15:f2:62:21:fc:35:02:67:61:
                    b2:c5:a5:07:9c:63:41:c3:4d:14:5c:e6:e0:74:60:
                    59:44:c6:ba:49:1f:d6:de:cc:0c:75:75:e7:a4:37:
                    05:fe:9e:16:15:61:09:1a:eb:08:40:f3:1f:d2:28:
                    b5:f1:6d:51:60:da:67:32:7a:16:47:6d:7b:fe:9c:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:F5:C9:23:34:38:32:D1:AC:DA:82:66:67:00:0F:44:D4:A5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5675f250-a647-3a49-aa4f-29f455760e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8043::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:38:75:26:38:a0:13:f2:f4:5d:47:76:07:a8:4b:30:03:6c:
         1d:62:b7:e3:3d:f3:fa:05:c3:a1:2b:2b:59:b9:92:3f:3b:f2:
         c7:5a:2f:cb:8a:b2:87:39:e4:65:81:4b:3a:3c:7c:da:26:8d:
         07:c0:cf:3c:f8:95:a5:eb:b2:d1:96:74:bd:7d:bd:43:ac:04:
         a0:10:09:d8:e7:b9:22:0a:4b:56:3c:7a:ec:8d:8d:7a:cf:48:
         ac:c2:d3:73:79:6e:84:e4:5d:ed:77:c6:4c:f9:c6:cf:e0:bd:
         d7:4b:39:e1:8a:71:9b:87:3f:e4:2b:82:80:19:f8:15:4f:73:
         c4:5b:3e:c7:41:71:31:0c:ec:e0:85:74:60:29:86:8e:61:71:
         16:18:b0:a4:28:66:ac:e1:6f:44:56:d2:67:cc:3e:07:13:f7:
         48:9d:91:1b:e8:e6:8c:ac:07:4d:fa:51:75:a5:82:16:12:7c:
         84:81:59:e7:ed:8b:ba:8a:43:96:9c:95:a7:e0:a8:b1:54:61:
         8f:92:99:65:aa:80:d5:b9:21:c0:70:67:9f:a9:7e:d5:e9:88:
         db:36:2f:c0:75:e2:f9:39:e8:dc:d3:1b:fd:01:4c:f6:0f:ac:
         33:b4:35:04:2f:b7:04:af:be:12:d6:3e:da:0f:33:76:a1:b4:
         4f:47:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:15 2024 by rpki-client on console-fra.rpki-client.org