Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aee9ac9-1057-3da3-9aeb-eeb5004fe98d.roa
File:                     5aee9ac9-1057-3da3-9aeb-eeb5004fe98d.roa (raw, json)
Hash identifier:          eYg5hVELZq3Rs9SIERlw1ReJ/VgLelWDSAmHwme9ZIA=
Subject key identifier:   63:DC:41:85:C1:D0:91:1D:4E:BC:AD:FF:ED:DB:F9:1C:24:F7:25:E2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D8A6B093AABA0661E8680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aee9ac9-1057-3da3-9aeb-eeb5004fe98d.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:82db::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:8a:6b:09:3a:ab:a0:66:1e:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=42cb0f22-44cf-4afa-875a-9c8883b6aa1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:8d:cf:b8:26:b4:5c:7a:8a:5a:b1:f2:f5:
                    51:56:93:fe:d5:16:fa:72:bf:df:e6:50:90:38:be:
                    af:89:27:6a:8a:f6:ab:85:a3:06:ab:1c:98:9a:c7:
                    5e:cb:dd:d8:5a:4c:66:0f:55:89:62:79:86:68:ab:
                    af:96:99:0b:2a:ae:39:13:ad:ff:9a:8b:31:e2:ae:
                    ab:67:a9:2d:32:0d:45:54:eb:6b:26:d0:8c:b0:13:
                    a9:53:6f:3e:9b:79:86:df:22:b2:5f:84:8b:f9:9f:
                    44:e0:49:04:f5:cd:0a:dc:17:ac:bd:03:a4:af:7b:
                    a8:19:cb:bd:7d:1a:63:fc:81:64:5b:00:b9:51:3c:
                    eb:ab:1f:3e:e8:78:be:5b:25:ae:ea:b4:da:ec:34:
                    b1:a1:fb:3d:83:6c:2c:00:55:17:b7:2e:d5:77:9a:
                    bf:25:d6:60:e7:8a:71:fc:20:e8:e4:e3:d2:92:d5:
                    12:a9:28:65:45:73:9b:8b:d2:49:fa:d9:41:e5:2f:
                    99:cb:a7:2e:38:62:45:10:24:2a:99:24:a0:d9:d9:
                    b2:e7:96:40:c6:03:f5:b8:aa:ae:be:a2:0f:ba:25:
                    83:f5:19:ce:df:0c:bf:d7:0a:02:8a:89:99:51:7c:
                    6f:64:e5:69:eb:07:83:4b:4d:36:e5:ec:41:53:15:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DC:41:85:C1:D0:91:1D:4E:BC:AD:FF:ED:DB:F9:1C:24:F7:25:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aee9ac9-1057-3da3-9aeb-eeb5004fe98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:82db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:7c:23:08:af:f7:16:e3:3c:c2:0d:40:33:bf:1d:a1:d7:
         a3:7a:df:95:63:6b:8c:7d:8a:b0:5c:70:e5:58:6a:39:78:77:
         e3:b9:47:f1:a7:86:2a:87:20:9d:9f:68:55:cb:9a:b5:96:ac:
         79:c8:f7:11:e7:c0:37:34:72:ef:9b:2a:66:6e:95:6f:ae:f3:
         a3:59:5b:3b:5d:b9:fd:5c:68:6a:cb:fe:e2:2b:3a:0f:93:04:
         de:b7:d4:4c:ae:ff:b1:8b:4b:c5:76:c0:2d:b0:28:fc:0f:46:
         b6:2f:ad:ca:74:39:7b:23:39:cb:ea:3f:64:c2:33:11:42:6c:
         10:8a:cb:c6:a1:4a:85:54:1b:42:c8:8f:ea:7d:38:9e:07:58:
         70:bf:2d:82:8c:7e:dc:bd:81:16:87:cf:64:74:e9:22:cc:00:
         7a:a9:eb:8c:e7:84:a2:32:c7:e4:d6:2d:4f:82:15:91:56:ff:
         2d:61:c4:0b:77:c7:35:e8:c5:5f:fc:4d:2a:2b:6d:00:e6:be:
         c9:5e:98:da:67:d6:5e:e1:34:e6:6f:aa:56:e9:e5:f9:fb:d0:
         93:7b:6c:12:d4:49:1f:13:f9:52:c9:08:21:07:52:06:dd:97:
         35:9e:50:ca:49:b0:e6:cc:7e:14:62:be:56:f0:75:7b:93:dd:
         4a:e7:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org