Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/710ed0f1-8063-3acb-b575-580c74461ec4.roa
File:                     710ed0f1-8063-3acb-b575-580c74461ec4.roa (raw, json)
Hash identifier:          nN7sSeiO8r3th4JOU7PQn9q0zBBmTotLo6Z2KIzQ214=
Subject key identifier:   B4:DA:D0:F2:12:0B:75:B9:1A:19:7E:24:94:18:40:83:5F:48:4C:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E1615D62823B6F612280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/710ed0f1-8063-3acb-b575-580c74461ec4.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2603:90fb:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e1:61:5d:62:82:3b:6f:61:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=1c2835e1-8c92-49b5-9103-ab515d11045f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:06:57:37:26:47:f5:ae:d2:d5:1a:20:cc:
                    91:9b:53:39:08:46:72:f3:c3:3e:87:69:9e:96:a4:
                    e3:b8:9e:03:16:e4:59:1f:66:78:d6:0f:3e:b4:dd:
                    75:0e:ad:b1:70:d6:c7:7f:12:0f:17:d8:4a:6f:b3:
                    e0:68:1b:05:f8:4c:1c:ff:83:de:60:80:47:03:57:
                    64:fc:28:14:b9:28:9c:ff:f4:8c:c7:33:37:b1:44:
                    60:60:4a:13:f5:24:97:86:f1:88:19:4c:f6:07:57:
                    73:b1:e4:de:bc:76:70:c2:bd:74:e5:a9:7b:76:8d:
                    f4:1a:61:56:3b:bd:3c:84:96:3d:86:51:21:96:38:
                    2a:6b:7c:cc:68:d7:d9:a4:29:33:70:3a:dd:f6:13:
                    93:7d:1e:4a:a4:57:25:df:f0:db:ee:d6:65:3a:5c:
                    71:3a:4b:be:75:71:aa:9e:47:d7:21:8a:6e:94:cc:
                    c1:1b:bc:65:0a:47:a5:54:b8:66:f9:6e:4a:b8:a0:
                    df:66:67:3f:cf:84:ef:6d:d3:73:5a:e7:05:7e:a7:
                    e7:a9:62:9f:1c:2c:ac:4a:7d:8e:d2:c1:97:ce:8a:
                    81:37:ac:39:df:a7:48:bf:b2:85:57:34:3a:65:bf:
                    7d:8c:eb:a0:67:c3:51:27:4c:e8:3b:8b:a9:0a:8a:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:D0:F2:12:0B:75:B9:1A:19:7E:24:94:18:40:83:5F:48:4C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/710ed0f1-8063-3acb-b575-580c74461ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4a:d5:76:2b:97:49:f9:66:59:7b:84:f4:8f:94:dc:cd:ac:
         da:6b:31:31:eb:39:93:b7:c7:61:a5:8f:17:e4:4a:34:77:c2:
         a7:06:6b:54:36:a8:30:94:c5:38:0e:f7:9e:0f:8e:8b:e7:9b:
         2f:b9:a4:26:63:d3:4d:08:a5:b5:56:89:d1:29:05:b1:1f:e5:
         14:fb:b0:7e:15:8c:e2:70:f9:ed:ac:56:3b:bb:d3:22:6b:67:
         00:51:9c:80:34:6a:a4:96:2c:29:70:f4:29:ec:2d:3a:f0:d0:
         51:82:41:a3:4b:d7:c6:a5:1f:f6:d0:6b:3c:97:8a:34:d7:cf:
         1a:fb:05:9f:9e:29:b6:7d:4a:89:1c:51:cd:22:d2:6f:1a:1c:
         cc:67:3d:5a:b4:a0:af:eb:e3:4f:4f:00:f7:dc:1f:bc:ab:13:
         60:cc:a1:6b:0e:47:2a:d8:97:b7:84:c5:e2:4d:77:36:22:dc:
         92:d5:b1:6a:b6:a9:73:07:2a:b1:66:fe:b7:60:26:02:cf:c0:
         50:87:6c:e1:60:e8:43:c3:78:bb:a7:57:51:b0:dd:a2:dc:83:
         f3:4d:5b:48:97:98:71:41:5f:33:a6:61:14:e4:99:6d:46:49:
         12:35:77:de:7e:75:0a:08:ca:a7:b0:55:78:32:e7:5a:c5:9b:
         9a:fd:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org