Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa
File:                     6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa (raw, json)
Hash identifier:          IBdDqv+iJHC7bnDiWGqo7lB/I14Cmc6GCRbHgFteGj8=
Subject key identifier:   D5:98:43:39:B7:27:73:B7:B3:A0:99:08:C0:6B:1E:F7:E2:CE:3C:1F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3094FC3C04487DF6F7100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2603:903e::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:09:4f:c3:c0:44:87:df:6f:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=b4fb4ba7-9c3f-4b5c-b613-7d213d25a75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:ae:a7:31:ab:15:77:90:b4:af:2e:fa:7e:
                    71:92:57:3a:04:f0:e1:70:3c:11:96:bd:d4:16:f3:
                    fe:75:d9:98:f9:23:db:a0:5c:70:e4:2f:5a:6f:a2:
                    7d:47:d3:6e:37:93:4b:e8:08:f8:27:38:b2:a8:5f:
                    85:c6:c5:fd:77:64:68:e9:ca:7e:ed:35:bb:c7:ce:
                    36:fa:c0:07:24:6c:81:78:05:3f:3a:bf:31:91:20:
                    75:e9:74:f6:86:da:6a:5d:cc:7c:37:c0:af:5b:91:
                    f8:f4:77:cf:5c:b8:22:65:86:9f:ec:21:79:a1:79:
                    02:52:48:18:03:5b:83:8e:ad:fb:61:e8:8c:81:af:
                    a9:2e:7e:7a:69:54:b6:d5:18:84:11:2c:15:18:86:
                    d7:c5:3a:19:56:3f:0d:7b:78:97:79:91:61:ab:cd:
                    32:f8:f8:7f:b6:d3:32:85:96:1a:ee:a5:27:c7:8c:
                    15:64:2d:56:0c:9c:0a:c4:0c:57:19:3a:c7:49:f4:
                    c6:74:67:c3:15:97:9b:5b:d2:a7:9b:4f:34:94:1f:
                    fa:a0:d9:27:03:fa:34:10:24:f9:39:01:61:18:74:
                    67:cb:5f:09:96:49:d0:11:15:2a:42:ee:7e:6c:e8:
                    96:f5:1c:7b:f0:77:81:e8:47:a4:c3:15:b5:c2:e2:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:43:39:B7:27:73:B7:B3:A0:99:08:C0:6B:1E:F7:E2:CE:3C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e4:ae:eb:56:84:3b:b2:0e:2a:b8:58:37:17:26:fb:5e:bf:
         f1:28:d9:89:e6:d7:e9:50:51:88:30:f2:fc:0c:f8:b5:b3:66:
         fd:79:bf:1b:e1:f8:83:8a:9b:d4:08:63:fb:26:9f:12:29:b2:
         55:12:82:7a:64:1e:61:1f:ff:fb:f9:6f:50:8b:c7:37:52:51:
         c2:fe:5c:e5:b7:91:b7:49:69:9a:0a:fe:56:b3:7b:64:df:2c:
         fe:75:e1:01:c9:34:1c:3e:86:a8:ae:92:51:38:b2:5e:ed:0b:
         41:42:1a:92:50:d4:a1:c0:41:fe:77:af:0a:f2:7b:e5:84:66:
         ef:ed:be:7e:a3:ca:99:57:4a:a8:59:02:31:9f:68:d6:da:72:
         55:30:87:3d:03:fb:f2:54:f7:68:ab:78:95:6d:17:8e:1f:f6:
         30:77:91:23:3d:7a:2f:a6:a3:57:be:c2:90:ad:b2:28:c3:cc:
         cd:8e:ee:96:9f:b5:ad:bf:5e:bc:dd:ca:6c:db:55:58:ed:95:
         9b:ee:4c:98:56:c2:f4:b6:68:9b:78:c0:f0:a3:8e:c2:05:48:
         8e:30:53:d8:a3:eb:0b:e2:57:87:11:7c:e3:90:24:f4:b6:a7:
         cd:ba:59:7b:37:fb:2d:54:07:4f:b0:60:52:83:3d:4d:c2:38:
         c9:ac:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:05 2024 by rpki-client on console-fra.rpki-client.org