Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78d8ad1e-8921-33e4-b21b-fead8f819fdf.roa
File:                     78d8ad1e-8921-33e4-b21b-fead8f819fdf.roa (raw, json)
Hash identifier:          5TkoEKw6z1a6/bP1+eUvcTsL1/bYx12n37wIswU6oqM=
Subject key identifier:   79:03:C0:F7:0B:24:FA:87:BF:C4:56:5D:ED:29:7D:44:6D:67:8D:7E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD60943D30454ECD187D900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78d8ad1e-8921-33e4-b21b-fead8f819fdf.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:80f4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:09:43:d3:04:54:ec:d1:87:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=b8617a48-80dc-4690-afdb-0d9f6b5fa3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:41:71:5f:76:9e:8e:d5:49:89:11:76:39:
                    29:c6:cd:73:e4:41:5b:2e:18:49:98:88:b5:36:cb:
                    2e:41:49:17:bf:fe:ad:ba:7f:92:8b:2e:d9:d9:e5:
                    cd:1e:9d:ca:35:5d:3d:67:77:4f:a1:b3:ed:9d:f8:
                    82:0c:ea:2a:78:24:84:84:5e:3e:5a:64:76:85:55:
                    2b:0f:6c:72:46:63:1b:7d:78:df:70:2d:62:70:f0:
                    21:49:91:66:cb:f9:2c:23:51:05:09:d9:8f:de:06:
                    9e:0f:6b:a6:dc:20:30:41:b5:2f:a3:fb:03:c5:b9:
                    da:99:97:99:e5:2f:73:76:57:e5:12:8c:0e:fd:41:
                    a9:94:61:07:d5:fb:14:4e:0a:57:32:94:2b:98:93:
                    73:1c:a0:c0:f8:69:9e:a9:3c:93:23:fc:5f:9f:f2:
                    45:5c:da:74:2c:23:d1:d8:83:4c:96:47:4c:45:20:
                    b8:6b:da:24:0a:62:76:6b:27:49:5f:8d:51:09:33:
                    ef:d3:93:92:42:ce:95:6f:fc:d9:8d:a4:79:fc:4d:
                    ec:ed:41:47:c3:15:6d:6d:24:32:14:fb:cc:b3:ba:
                    2d:51:29:d1:23:20:ed:a3:45:23:70:e2:d1:4d:20:
                    1e:f9:c5:b4:55:f2:ce:3b:55:b2:80:28:81:39:65:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:C0:F7:0B:24:FA:87:BF:C4:56:5D:ED:29:7D:44:6D:67:8D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78d8ad1e-8921-33e4-b21b-fead8f819fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:47:68:0b:9f:5f:e7:df:2d:6b:1c:44:41:d3:b2:d4:98:
         73:65:ef:6a:e1:ce:92:0a:53:82:be:e7:bc:88:95:74:5d:55:
         d8:3d:e5:d6:3d:bc:49:9d:e5:24:d4:24:2e:8d:13:1b:f7:2d:
         cb:f5:af:29:73:8b:c9:30:39:b4:2e:1a:86:2b:24:69:ee:9c:
         0a:03:30:c7:57:96:6b:c0:56:1b:3f:ff:31:5e:70:60:61:05:
         23:e8:15:58:5c:a5:69:08:a2:49:31:2c:4d:b2:4f:3c:f3:56:
         83:f6:7e:6b:1d:73:32:57:1c:d9:b4:62:03:a7:29:87:3c:4a:
         5c:0b:b6:98:27:01:89:c1:67:f8:1b:49:fd:47:1c:c9:41:71:
         83:3b:2a:38:03:0a:7c:3d:e3:4d:91:59:49:6a:e4:23:60:f4:
         59:6d:f7:92:e9:18:1d:94:58:17:1b:3f:ae:97:01:2b:10:93:
         34:2d:d3:f2:07:67:69:a4:d6:76:52:14:f0:c1:f0:71:9a:22:
         ae:1f:66:f6:c2:57:52:18:76:2b:52:71:55:0b:bd:b0:24:75:
         22:e6:a8:06:91:e0:c1:ce:07:57:c7:81:9a:f4:61:4e:b8:59:
         5a:8f:de:49:15:2f:11:c6:fe:e6:96:ac:c2:99:72:35:13:55:
         c2:93:dd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org