Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6a7654dc-2a33-34a7-adcc-f4332ae29dc8.roa
File:                     6a7654dc-2a33-34a7-adcc-f4332ae29dc8.roa (raw, json)
Hash identifier:          xGN+bzNAXGXrS4L7FmVv8D05CSh0F0uBKdqDjogxKi4=
Subject key identifier:   24:E8:1D:17:B1:D4:FE:FA:F9:E1:5C:A7:7C:08:1D:3B:27:0F:C1:EC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD6089B3DDAAC168F9E3700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6a7654dc-2a33-34a7-adcc-f4332ae29dc8.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:804c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:08:9b:3d:da:ac:16:8f:9e:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=6324e0a1-c73d-4a66-a625-a0a0e1e21b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:32:f0:21:b3:78:e5:8e:49:76:4e:7e:92:
                    0b:62:9d:48:35:1a:6b:69:5f:6d:c2:fc:90:53:1c:
                    be:b5:4a:9b:72:66:bd:31:17:d7:ce:8b:20:05:25:
                    7f:d5:4c:35:e9:a7:0a:35:46:b9:95:88:19:12:7b:
                    14:d9:9e:9f:5f:54:cb:e3:1a:aa:5a:99:9a:70:45:
                    79:54:3c:fa:91:2c:b1:93:90:5e:7c:38:8f:80:47:
                    04:6b:1e:b2:5e:62:ec:ba:5a:1c:db:55:8d:e6:9c:
                    af:b8:f7:4e:42:81:a1:59:bf:8f:d1:71:1b:49:68:
                    1c:b5:57:a1:08:d6:03:6c:fc:99:c4:76:1c:e2:41:
                    f2:90:24:82:8e:02:5e:54:ac:63:76:e0:8b:2e:1c:
                    eb:5d:fa:84:85:88:44:ff:e0:6f:00:9f:fa:07:68:
                    7a:a0:ae:a8:78:aa:e4:90:cf:f4:a7:30:9e:1b:9d:
                    16:c8:78:d5:74:6d:ab:a1:c4:af:6c:a9:ad:d1:cd:
                    18:11:6e:db:ee:ec:6c:de:aa:52:4f:b1:40:25:55:
                    1c:33:3c:2e:cc:42:87:57:dd:5f:84:da:48:6d:c1:
                    86:3c:59:f7:d0:bc:fc:a4:dd:16:8b:39:99:c2:04:
                    b4:b5:b9:32:62:38:4f:c3:8d:d7:6c:4e:42:5a:14:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:1D:17:B1:D4:FE:FA:F9:E1:5C:A7:7C:08:1D:3B:27:0F:C1:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6a7654dc-2a33-34a7-adcc-f4332ae29dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:804c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:94:f5:af:8c:d3:1d:65:65:48:93:15:e3:eb:6b:7a:ce:67:
         f0:64:ff:53:52:27:2c:37:e1:cc:3c:ba:11:54:72:b7:ca:c7:
         a5:bb:9c:7b:44:08:72:91:29:41:6d:16:3c:0a:49:ed:e4:d3:
         cc:48:21:cc:e9:f9:dc:04:ef:2e:65:5f:7a:da:5d:1e:62:0c:
         28:15:0c:6b:0b:45:ae:20:d6:6e:14:b5:75:b1:5d:4a:7c:15:
         b0:29:c2:b7:d9:df:20:00:42:00:18:be:98:48:30:76:f8:19:
         27:f4:f9:04:42:cc:dd:ac:50:89:b0:b5:99:b7:57:d8:a2:6f:
         47:87:a6:2d:9c:38:53:c1:0b:75:44:33:7c:2e:f8:71:ec:db:
         2d:d2:f7:d5:c5:b9:b5:8e:7e:91:6e:09:3e:af:b0:fb:b9:07:
         3c:d2:19:86:b0:6c:af:a8:ce:12:38:72:d3:03:e4:00:1d:f5:
         9f:d3:d6:e4:cb:a2:ad:bc:b3:14:97:d3:08:06:24:1e:e6:8c:
         90:6e:c1:c6:14:57:24:f7:73:ca:fe:fc:68:9e:c5:d0:e0:9f:
         50:d6:da:84:73:a0:00:a7:fe:a7:e0:c1:3b:52:65:67:5b:c5:
         20:c5:b6:46:58:3b:94:eb:4a:e7:2a:a1:fa:07:29:cf:e6:d3:
         c6:cd:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org