Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67ee09ea-c241-3309-b24a-8231d654eab9.roa
File:                     67ee09ea-c241-3309-b24a-8231d654eab9.roa (raw, json)
Hash identifier:          iVGqquZrR6ziSz5mnF+XBhTOZR7dQuikyvL5EXZdilk=
Subject key identifier:   D1:53:4B:03:D8:AD:77:E9:08:E6:F8:08:6B:ED:BC:7F:FD:D4:65:4F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD6020664B7934F4B2F4B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67ee09ea-c241-3309-b24a-8231d654eab9.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:801c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:02:06:64:b7:93:4f:4b:2f:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=9070603d-7933-4a13-a9cf-7e831f796cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:bb:16:dc:10:23:b4:d6:18:c8:41:3d:1b:
                    3b:97:f7:1c:31:3c:f3:7f:aa:77:4b:ef:72:9c:b0:
                    9d:90:6d:6c:35:e0:07:84:65:85:ba:c9:18:83:5c:
                    21:40:a0:66:a3:76:6f:fe:1b:9c:1c:01:32:a3:03:
                    89:e5:8a:54:a4:99:d5:c9:96:68:7a:c3:98:75:f4:
                    93:8e:04:2b:60:ee:88:0b:57:44:fc:3f:4d:41:98:
                    fd:c9:e9:86:1e:34:63:46:78:11:7a:03:6b:17:ee:
                    80:bc:ec:39:36:db:04:05:43:0c:4c:de:1a:2f:6d:
                    d8:6d:bc:04:e9:2f:83:e4:a0:97:1b:5b:2d:b7:33:
                    b3:06:76:49:86:57:5e:c4:3b:3a:ab:66:20:9b:08:
                    d8:f3:75:fa:66:52:37:f4:da:26:64:02:e8:ef:b4:
                    be:ac:c7:bf:1c:83:05:e3:d6:c9:6a:95:ea:db:ef:
                    bd:cb:af:5b:1d:c4:68:ce:d9:bc:38:d2:17:6a:f7:
                    36:26:c4:05:a1:d9:2b:01:3d:bc:40:3e:54:81:16:
                    3f:88:87:cf:f8:c0:be:8d:e2:3e:ca:9d:f2:8b:70:
                    b4:2f:46:96:ca:a2:18:7a:20:d5:70:f5:cd:c4:65:
                    1a:6e:fb:01:67:f7:c3:1d:a3:27:23:e1:ef:db:9c:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:4B:03:D8:AD:77:E9:08:E6:F8:08:6B:ED:BC:7F:FD:D4:65:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67ee09ea-c241-3309-b24a-8231d654eab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:801c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:8c:88:5d:f0:a7:37:99:a4:ff:e6:7c:6f:97:a7:ec:fb:
         ca:ce:26:5e:c2:54:12:64:ac:1f:03:cb:88:2f:c9:81:d9:bd:
         86:25:7b:81:e2:7f:45:82:9e:4e:72:98:86:28:49:6e:21:33:
         27:67:fe:f7:1f:af:fd:43:33:23:0d:44:8e:f8:46:51:71:14:
         74:6e:a9:d7:62:c3:9b:87:c1:98:3c:07:e9:f2:d3:54:bd:7f:
         43:0b:92:b9:1a:4a:00:6f:a8:e8:3d:13:d4:5d:85:2b:30:9c:
         ef:70:38:c7:d6:4b:49:c1:19:4e:fb:6a:0a:f8:63:ba:49:c6:
         3b:06:05:a5:b6:45:2b:5b:cb:54:58:56:7e:ee:5e:77:29:e5:
         58:f1:75:db:88:bf:b3:36:61:58:14:6d:7d:7a:2d:ad:c9:24:
         a0:1e:e9:e7:72:7e:d2:7a:be:61:b9:d9:ab:f2:b5:c3:4b:8f:
         a7:ae:a2:6e:72:74:47:90:c4:4e:b6:9f:8c:bc:a5:d1:c1:40:
         cc:50:07:c9:e7:24:04:29:27:9c:b9:ba:cd:69:ed:65:53:3a:
         69:fc:d2:68:38:d5:66:15:d9:af:ab:ea:f5:46:b2:32:26:8b:
         27:86:7f:32:9a:1d:9c:17:1e:77:f0:3c:34:56:e4:45:2f:6e:
         c4:42:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org