Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8a99de9c-b956-340c-a406-d75e00ddea5c.roa
File:                     8a99de9c-b956-340c-a406-d75e00ddea5c.roa (raw, json)
Hash identifier:          +36ln+jEr5keJ90O1+cRk6B4xnGQPwbuHY22OfbJJXs=
Subject key identifier:   2B:3C:A0:6E:73:68:F5:53:3B:5C:3D:E9:B7:80:92:55:89:1A:9E:18
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E7D9FEAC4D78C76209E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8a99de9c-b956-340c-a406-d75e00ddea5c.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2603:9031:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e7:d9:fe:ac:4d:78:c7:62:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=1d0e09e5-1a05-4d28-b326-64748905a4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:08:7e:d7:cf:e7:ec:64:9a:34:59:33:29:
                    29:82:71:03:6a:0a:03:35:84:d6:e5:9f:76:aa:5e:
                    d2:2d:c3:5c:00:6a:bc:0c:c0:d0:0b:d8:cb:5b:8b:
                    9c:89:14:c2:37:1b:62:05:76:f3:5f:ba:b2:84:87:
                    29:4f:0d:cd:5b:3e:13:6d:b0:bc:f6:23:cf:a6:59:
                    97:4e:b0:96:48:19:1e:06:9d:16:5d:ab:d5:00:9a:
                    79:9d:a2:e6:2c:34:72:c8:5a:89:0a:32:e0:39:7b:
                    21:ae:e3:56:f6:70:71:b5:53:54:4f:66:a6:ec:6b:
                    dc:69:8a:ad:47:f9:e8:c3:02:bc:bc:6b:49:72:90:
                    06:1b:42:13:c7:aa:fd:f1:c2:6c:71:70:6f:bd:8e:
                    f8:6e:d1:f4:71:4c:05:ea:56:31:4f:fb:a8:5b:88:
                    ca:dd:d0:ec:de:15:60:23:6f:4e:d2:eb:a4:ed:61:
                    da:12:8a:3c:2e:b9:9d:d5:24:42:5d:51:a7:90:08:
                    70:b0:a6:ce:d4:be:69:c5:8d:5a:22:24:99:46:5e:
                    e6:88:09:08:75:9b:cf:63:b6:cd:53:1f:12:ed:5e:
                    25:9c:23:7d:04:0c:f4:97:57:a9:d7:09:ce:c4:1b:
                    65:35:9b:20:b6:e4:0a:16:a0:1e:25:be:f2:3d:be:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3C:A0:6E:73:68:F5:53:3B:5C:3D:E9:B7:80:92:55:89:1A:9E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8a99de9c-b956-340c-a406-d75e00ddea5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:a0:77:fd:4e:73:da:40:80:3f:8a:65:32:bc:17:aa:be:
         e4:c6:8b:51:a7:88:eb:0c:6f:b4:cc:1c:95:6c:0e:cf:b9:de:
         2a:62:18:c5:b3:7d:0d:40:60:51:63:f4:3d:43:75:3a:bf:62:
         cd:cf:4b:03:29:46:c6:4e:f3:c9:57:d4:2d:12:aa:c5:4b:e0:
         18:9e:ba:56:7b:9d:e6:c1:0b:a8:21:0e:fc:43:ce:4c:52:2d:
         34:3f:14:08:0c:b0:2e:fb:18:53:60:6d:56:dd:7d:fe:2c:07:
         2a:3b:1b:af:50:64:ab:77:1e:fb:d3:87:8f:36:50:97:18:e3:
         3d:3a:62:b9:4a:c5:51:16:60:99:b7:46:de:00:62:32:f0:ee:
         67:50:a3:4e:8f:12:2f:3d:d1:c5:a7:20:7b:39:a0:47:07:4a:
         29:ca:f8:ff:b8:f6:34:c7:68:29:58:d7:29:a1:76:c4:64:0e:
         b3:0f:88:26:d2:d8:7c:b9:ba:78:7c:da:e0:84:01:c5:ed:a7:
         4e:28:cd:8b:7f:0d:8e:00:f2:3b:d6:0f:43:e4:b2:50:24:85:
         d2:87:f9:d7:19:b3:e0:07:1a:ca:86:ff:b0:7f:88:27:f8:71:
         92:8f:12:20:ba:b9:74:72:13:89:e8:11:85:fd:38:08:07:8b:
         b7:ba:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org