Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/684bd509-cef2-32ed-97f9-ff56155e2bc2.roa
File:                     684bd509-cef2-32ed-97f9-ff56155e2bc2.roa (raw, json)
Hash identifier:          uJX6Gtot4z/uWFOvTRnpbS10G2BJ1s8PF/7CJQgYvbk=
Subject key identifier:   3D:40:37:76:81:4B:B0:6E:EB:3F:5E:8F:91:D5:04:FC:9B:FD:94:9C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3151E045F142B42B3DC00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/684bd509-cef2-32ed-97f9-ff56155e2bc2.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8025::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:15:1e:04:5f:14:2b:42:b3:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=3401b8fd-2c8d-4b76-8941-95dd41d87ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:bf:88:a8:80:fb:a2:62:08:f6:d0:0a:10:
                    14:62:b7:4e:1d:13:b5:44:d3:1e:ac:83:ef:f1:79:
                    c3:93:f0:25:d8:a8:1c:36:44:f6:0b:c1:77:b3:62:
                    3b:90:30:ed:13:61:6d:9c:8e:78:1e:27:2b:c6:e0:
                    8a:27:a9:fd:5d:e7:bc:7c:4e:3f:e9:e2:2c:9e:f4:
                    3e:5e:12:e5:11:f3:a5:1f:e7:d9:0c:94:6e:2b:8f:
                    ec:91:30:0a:16:c8:f7:fb:1e:45:52:97:96:19:7d:
                    08:39:a8:18:92:2a:74:12:b0:e6:08:ff:93:17:b7:
                    43:3b:ed:af:e8:5a:ab:bd:64:66:b9:a9:9c:f0:46:
                    5b:cd:72:6c:92:8c:dc:5f:e2:be:61:9e:b4:09:3b:
                    e2:c6:6a:d9:fb:ae:06:a3:f3:4c:bd:82:30:78:31:
                    e5:5e:17:65:cb:03:fd:42:b0:5c:75:01:16:b4:46:
                    04:ce:3c:c3:af:50:82:91:cc:a0:1f:20:5d:4f:18:
                    17:90:26:fa:eb:72:92:b9:9c:c2:00:19:04:2e:22:
                    5b:5d:60:e5:94:7e:0a:a3:0b:7b:c6:67:73:53:d1:
                    39:f4:ac:83:95:62:c2:6e:64:55:53:06:c8:1e:d7:
                    0f:79:44:32:76:7c:60:59:ba:e8:24:58:1e:1c:e9:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:40:37:76:81:4B:B0:6E:EB:3F:5E:8F:91:D5:04:FC:9B:FD:94:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/684bd509-cef2-32ed-97f9-ff56155e2bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0c:14:7f:0b:c9:1c:cc:79:cc:87:04:27:1e:f6:e3:24:01:
         e1:6d:87:4f:4e:04:d0:6c:46:f2:c7:74:cc:53:db:7e:13:c5:
         ae:99:20:5e:2e:7f:4d:c0:d9:4b:b6:63:f9:e0:79:0e:08:58:
         07:16:5f:59:e8:8c:67:6d:62:98:cc:9d:7a:b7:b3:25:08:94:
         bb:6a:98:a3:09:b8:84:b6:e8:19:59:dc:58:69:79:bf:53:d9:
         25:e0:87:66:4c:3e:96:4f:11:0e:3d:14:5e:0c:9d:8e:79:29:
         9e:45:77:5d:fa:38:a2:24:0b:e0:da:bc:69:03:f5:41:4e:5b:
         90:71:05:c5:90:65:c8:1c:d3:c7:92:97:df:a3:d8:9a:b3:6f:
         1c:01:58:68:a0:f3:80:e2:66:af:ea:e1:d5:d9:50:44:80:24:
         27:eb:fe:bf:23:c6:8e:58:44:fb:af:a6:15:fc:af:12:93:84:
         f1:53:db:5b:a7:68:93:ca:a6:c1:ba:22:f0:17:05:35:b7:a1:
         81:55:32:36:d9:ee:b3:4f:b1:b8:89:45:98:4c:fe:25:b4:1e:
         bf:76:8a:60:72:91:cc:1e:12:35:9a:3e:bb:b0:83:0a:c7:11:
         1d:99:b8:4a:1a:47:2d:4f:a3:b1:d3:71:f3:57:09:a0:fe:ea:
         26:af:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:11 2024 by rpki-client on console-fra.rpki-client.org