Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/76cf4350-eb47-33b6-9c89-9f450199fdf2.roa
File:                     76cf4350-eb47-33b6-9c89-9f450199fdf2.roa (raw, json)
Hash identifier:          cVArNiXdLVEfXH609t5Tg4+0uzRgGszIndaTxXPaLbM=
Subject key identifier:   5B:1C:A6:0A:49:08:C7:5B:27:A4:78:98:C9:B0:D4:93:CE:4D:64:E0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD601D593973BB8B4804480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/76cf4350-eb47-33b6-9c89-9f450199fdf2.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:800f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:01:d5:93:97:3b:b8:b4:80:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=59fe84ab-6500-4696-93a0-9c7574262a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:da:0c:e6:fc:d7:92:22:1d:0c:d9:38:ac:
                    ba:64:83:ef:ca:a9:41:51:c1:42:b5:11:3c:fd:9f:
                    82:73:04:73:a0:a5:8a:2a:95:54:cb:ca:64:65:91:
                    9c:1f:fe:5b:51:f3:f7:26:6c:d4:53:24:4f:70:3b:
                    ef:77:1f:9a:bd:ec:bc:b5:6a:ea:3d:26:7f:07:fc:
                    12:8f:5c:6d:c3:71:dc:23:6a:a7:2e:a7:5d:3b:90:
                    14:00:d2:0d:47:41:fb:3b:28:21:a9:00:8a:ca:c7:
                    94:f6:bb:5a:7e:70:de:31:91:69:22:c9:34:e0:c2:
                    29:29:c7:c5:90:5f:0e:63:b8:3a:07:d1:92:f9:bb:
                    32:ab:16:d0:bb:fe:c4:d0:17:3f:fd:1c:14:d4:7d:
                    d4:87:b9:4c:62:9c:6c:f2:d3:3e:ea:e0:ec:58:0d:
                    e6:2e:5b:0e:15:b7:f2:5c:ee:fb:60:83:75:12:ca:
                    1c:29:18:f7:17:98:bd:d6:0c:ed:bc:75:45:30:36:
                    f1:f8:4c:00:f8:61:80:d5:11:83:fb:1f:cc:40:be:
                    2d:5b:1a:e2:d8:5b:23:84:ab:79:ac:e7:a7:ff:fb:
                    2a:2a:a4:e0:8c:37:c7:b9:5a:5f:7c:75:d7:37:2c:
                    d8:74:9c:54:b1:74:1e:f4:2c:03:f2:75:c9:f7:dd:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:A6:0A:49:08:C7:5B:27:A4:78:98:C9:B0:D4:93:CE:4D:64:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/76cf4350-eb47-33b6-9c89-9f450199fdf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:800f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:3b:2e:12:a3:76:c6:52:09:01:60:dd:7f:64:66:86:1f:
         7e:10:22:aa:81:94:fc:b5:30:d2:14:a8:30:74:8a:fe:e2:37:
         22:9f:03:4f:e4:72:80:90:1e:95:33:6e:ba:15:80:52:71:4d:
         34:bf:3b:ef:9c:70:0c:1a:e0:f5:49:0e:0e:cc:62:2b:4e:46:
         09:f3:53:30:c7:ec:eb:1f:9d:48:b5:93:9e:fd:aa:4c:8b:33:
         90:98:02:df:e6:8e:55:58:34:92:f0:77:3b:2b:23:58:84:bc:
         69:8c:49:2c:79:d9:04:59:01:1f:49:4d:75:f6:95:e0:5d:63:
         52:fa:50:66:2c:82:bb:2b:66:26:9a:4c:66:4b:d5:18:a7:3b:
         b2:6b:8e:f3:2e:0e:63:44:e5:b5:76:ca:90:1a:53:5c:78:81:
         2d:3d:fb:2d:89:f1:9a:53:6a:11:90:57:c6:c1:13:ad:31:75:
         9e:a2:af:b8:28:75:24:9d:ae:b4:fe:93:ae:72:d4:94:29:32:
         dd:77:97:74:62:1f:4b:df:b3:c5:36:58:62:a6:3a:92:a3:28:
         17:d4:36:b7:8b:3d:94:24:85:d0:4d:b1:e9:f5:0d:32:f3:16:
         96:60:d5:c8:f2:f0:0c:77:c6:39:b3:b5:dd:90:de:86:bb:34:
         cb:55:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org