Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5f2a2369-bdb3-36f7-b5cc-2e338c541c14.roa
File:                     5f2a2369-bdb3-36f7-b5cc-2e338c541c14.roa (raw, json)
Hash identifier:          lbeGAtneyno0NtHgwAKDbyEQwo8Q7M6y0JG1oL3XACE=
Subject key identifier:   DA:78:D2:4F:A7:9F:63:40:D6:53:8D:A9:7F:89:13:12:60:20:2E:78
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD606628F3BE937483B99C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5f2a2369-bdb3-36f7-b5cc-2e338c541c14.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8254::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:06:62:8f:3b:e9:37:48:3b:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=9348941a-f1bd-4fd1-ac48-47f0ddb331ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3c:cc:6b:d9:11:24:5a:10:3e:a5:e4:d9:de:
                    16:99:d4:80:a7:76:ea:90:51:44:da:8f:ee:85:de:
                    94:11:16:14:d2:17:18:25:15:02:ac:ee:4c:3a:a3:
                    90:71:38:4c:54:c6:32:f6:aa:51:19:7f:d4:e5:78:
                    50:5c:27:cb:60:b0:85:5f:28:a8:e3:75:3f:6c:cc:
                    c8:c2:be:d7:71:0d:50:5d:d8:df:74:56:57:1c:46:
                    3a:11:32:84:6d:5f:db:65:7e:76:7b:e2:c2:a1:6b:
                    72:b0:ed:44:4a:9c:20:ec:53:78:8e:9f:ec:65:48:
                    f9:7b:ff:be:f7:16:8e:ff:b4:d5:11:ae:2d:da:b0:
                    df:60:32:65:3e:4e:18:47:5d:4d:6c:db:1a:5a:ac:
                    bc:82:07:57:89:fe:45:95:9b:08:46:80:11:d1:a6:
                    f9:31:12:8d:6a:70:a1:eb:5c:64:34:79:97:65:ca:
                    a8:59:b8:3c:7a:05:a8:c4:e0:80:ca:76:b9:70:2b:
                    03:83:24:52:99:e1:ed:b7:a0:bb:ec:f5:53:a6:d0:
                    8f:f7:79:40:7f:fa:11:ce:67:6d:11:aa:cb:36:5d:
                    9b:0e:cc:76:e1:7d:ea:1a:05:06:b5:36:59:31:6b:
                    fc:48:65:16:06:fc:b4:43:df:0e:da:a6:3f:0c:0b:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:D2:4F:A7:9F:63:40:D6:53:8D:A9:7F:89:13:12:60:20:2E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5f2a2369-bdb3-36f7-b5cc-2e338c541c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8254::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c3:40:9d:dc:1d:1f:04:90:d0:de:68:36:93:25:d9:89:23:
         2f:d7:31:4f:63:2d:0b:23:12:52:24:1e:42:8b:71:1f:21:9a:
         ed:6d:90:12:1e:1f:b7:0e:56:a3:ee:ba:f0:c9:d6:ee:63:c9:
         1f:52:e6:6e:af:b4:59:e0:e7:4f:ae:2c:31:18:75:1f:55:2e:
         76:54:6e:b7:e2:9a:7b:c8:98:62:50:c9:8d:85:e6:a5:65:dd:
         54:c2:5e:fc:04:23:03:dd:3b:a6:e3:33:93:7c:d0:f7:13:49:
         3e:a1:d9:ed:ec:28:93:12:fb:5d:af:f5:8c:2c:f5:35:7d:dd:
         54:e1:0b:9b:81:42:03:bc:91:00:96:12:5d:e7:81:00:61:8a:
         9b:69:5e:8f:99:ab:82:b2:03:c3:e7:bc:1d:0a:ef:af:41:70:
         ba:ff:45:39:26:d2:89:1f:5e:3c:b2:e3:4d:bc:ff:88:18:03:
         ed:49:c4:b1:9e:d9:d2:b8:f7:6a:b0:5a:ca:04:d9:d2:77:bb:
         99:7f:2d:62:a3:d4:ec:e8:94:a7:26:b4:72:c5:e7:cd:a5:87:
         50:34:a3:18:0f:93:a1:ca:6e:1f:c2:28:52:c7:8f:9a:96:87:
         0c:37:d6:26:98:5c:9a:8a:46:2d:44:8d:ac:d7:56:b2:0d:03:
         09:b1:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org