Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8713678f-16ee-3f95-b6d1-bc60ade86873.roa
File:                     8713678f-16ee-3f95-b6d1-bc60ade86873.roa (raw, json)
Hash identifier:          yRmvLtaYBiUSvAMOpOsASikWHLzaPfcq9OI54npWJXQ=
Subject key identifier:   B3:60:7E:45:39:5D:46:75:60:94:88:AE:5D:C1:AE:A9:87:67:CC:13
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328583F2AF7BA1692207554E7B3E8C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8713678f-16ee-3f95-b6d1-bc60ade86873.roa
Signing time:             Tue 06 Sep 2022 12:00:00 +0000
ROA not before:           Tue 06 Sep 2022 12:00:00 +0000
ROA not after:            Wed 30 Aug 2028 04:00:00 +0000
asID:                     19115
IP address blocks:        2603:90fb:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2a:f7:ba:16:92:20:75:54:e7:b3:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 12:00:00 2022 GMT
            Not After : Aug 30 04:00:00 2028 GMT
        Subject: CN=a786f698-0bf6-453e-b565-b829fc1e5c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:eb:f9:48:40:96:ba:7e:c4:f2:f8:c9:e7:
                    23:51:34:27:72:21:74:fc:3b:82:ba:ce:12:f1:a9:
                    99:7c:56:1d:d4:cd:9e:07:19:fa:b8:36:15:7d:79:
                    33:a4:a1:4a:fb:60:7a:c3:e0:2c:45:a2:b6:54:ca:
                    fa:94:e3:6a:47:08:fb:8a:1b:9b:8e:a8:ae:3a:b9:
                    11:a6:4d:8d:1f:e1:53:c7:c3:d3:ef:5b:2d:f5:34:
                    1f:f7:41:a0:2a:81:c1:f4:94:20:af:27:bc:7d:2e:
                    e4:95:07:c9:e6:11:7b:d9:54:26:7f:12:a8:df:10:
                    80:6f:af:35:07:6c:f8:d2:45:ce:2f:f6:97:0b:0d:
                    6d:96:10:54:f0:0b:09:53:f0:37:43:ce:e3:1d:4e:
                    98:82:69:5e:70:6e:4f:45:97:86:79:cd:bd:d9:1c:
                    6f:a0:52:48:d5:cc:91:a9:09:03:d2:81:0e:c7:f7:
                    76:9c:7e:a7:e8:d5:43:a6:58:45:89:5d:39:a0:70:
                    3a:0b:cb:72:a8:55:cb:b7:6d:15:d5:dc:29:50:28:
                    f1:b1:f5:8b:cb:bf:b7:f7:56:ea:cc:fc:bd:e5:e9:
                    13:59:77:e6:6b:0a:76:b3:06:21:d8:37:23:42:1a:
                    c0:1e:c7:a2:d9:da:da:2d:9e:38:c2:fd:18:44:8b:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:60:7E:45:39:5D:46:75:60:94:88:AE:5D:C1:AE:A9:87:67:CC:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8713678f-16ee-3f95-b6d1-bc60ade86873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:42:76:95:fc:00:50:e2:64:7d:64:17:33:8a:8c:39:78:
         95:67:d8:bd:45:bb:ad:57:2d:18:15:2c:98:5d:c0:46:b0:7b:
         22:bc:d6:78:93:50:ef:6e:cf:48:bb:6e:35:dc:c9:c0:9e:dc:
         eb:6b:d1:e4:c7:7c:c4:74:0d:aa:b0:b9:8a:8e:99:61:0b:69:
         8f:c2:ff:85:68:18:06:d3:ac:34:f0:e8:53:4f:1d:15:45:a3:
         a5:d7:79:c3:40:3a:e7:02:93:cd:ac:f0:12:9b:aa:f5:fb:47:
         9a:93:fe:71:a9:0e:df:5e:73:21:53:65:db:f1:76:64:6a:2e:
         18:0d:24:c5:56:a3:c5:94:58:98:c2:6a:82:74:c3:63:1e:ae:
         74:60:db:e3:7b:56:ce:6c:5b:de:19:d5:d6:7c:be:31:e2:0c:
         c7:f7:78:5e:8b:c1:a7:e9:d6:fc:f4:a2:c1:20:f2:99:e7:cd:
         f0:dc:43:94:84:99:29:79:58:d6:78:50:b7:fb:68:30:bf:18:
         a7:11:30:a5:03:50:05:c3:9e:d7:49:a0:3e:3d:16:1c:9d:00:
         c3:ed:2d:2a:82:01:53:dd:a8:8c:2c:45:67:15:62:f3:3e:16:
         29:c2:ea:0f:d4:28:7f:8a:91:7d:df:af:2c:39:a4:e6:e3:b8:
         dd:2f:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:06 2024 by rpki-client on console-fra.rpki-client.org