Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
File:                     8f4129be-42f4-3968-aff2-2e4ca695144b.roa (raw, json)
Hash identifier:          hpIXXKp0vy+Yt8TnrXdWEj6ZMpkiFHCrPci4Cwij7u0=
Subject key identifier:   AC:AD:86:F2:81:EF:21:05:0A:28:6F:7C:83:8B:AD:79:D0:F2:CC:62
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC30F769C1D4619744E5580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80b6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:0f:76:9c:1d:46:19:74:4e:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=4cf86f47-096a-4217-9e70-6b810c177e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:31:57:1f:c3:1b:52:4e:19:c7:eb:5a:64:bb:
                    2e:b5:9c:16:16:7d:2c:d3:9b:a4:29:f8:ca:1a:42:
                    9f:41:9f:7d:88:54:85:35:2b:01:c8:65:78:21:fb:
                    02:8c:b5:c7:f1:37:fa:12:13:1e:b5:4c:ad:6e:ac:
                    b9:54:b8:3c:5a:df:b6:e0:b6:2a:ba:a2:98:52:f1:
                    6f:a3:ec:8b:11:79:16:18:b6:e6:a3:dc:81:2f:1f:
                    9f:ad:6c:d4:a1:64:09:f7:ab:a2:86:01:a2:3e:41:
                    a6:2f:2c:a0:94:76:2c:02:ac:69:c7:6b:32:a9:ba:
                    8b:af:94:91:39:9e:cf:a0:03:7f:f3:d5:60:6a:9f:
                    5e:9c:ea:df:88:e2:c3:a6:78:13:8b:51:f6:38:f1:
                    9a:67:5f:8b:03:58:83:ce:5c:d9:df:06:d2:99:13:
                    f8:1a:32:06:22:b9:0a:7c:db:81:c5:59:8a:0a:e4:
                    54:f7:0b:a4:de:f7:2a:9e:d8:b3:c4:ac:55:1c:86:
                    2a:e5:6d:79:13:ce:00:ca:d8:ca:e7:84:27:16:f0:
                    88:1a:55:d9:a8:dc:97:cc:ca:fa:85:e7:9f:da:7a:
                    c1:7f:82:c3:c0:c7:5d:f3:01:38:b1:11:15:93:09:
                    81:b3:4f:ee:53:fb:00:39:65:4e:c2:6c:6b:b9:20:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:86:F2:81:EF:21:05:0A:28:6F:7C:83:8B:AD:79:D0:F2:CC:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:38:22:13:77:74:18:c8:b5:80:69:8c:fa:25:02:69:7d:
         09:89:fa:77:26:b4:e4:e7:92:64:bb:76:1b:4a:44:fd:58:8a:
         74:19:bf:d9:f2:08:05:0f:b3:c6:aa:cc:5c:e1:81:37:90:47:
         4d:74:c1:f2:05:db:37:88:69:45:ca:73:21:72:b0:1f:11:9c:
         37:7b:65:fc:ec:df:e6:39:25:80:8a:f1:87:83:e3:c5:03:7b:
         23:30:23:c0:8c:84:36:14:3a:22:48:3b:6e:a4:a9:a9:7c:16:
         46:ef:b9:cb:68:90:09:12:6a:21:d4:64:8a:fd:56:60:0c:69:
         78:ed:5f:03:ea:1a:f9:f1:3e:0f:9f:52:3a:07:8a:90:f0:d8:
         6f:0d:b3:dd:d0:57:f2:f6:ae:a1:9a:af:f4:e1:0c:a9:3a:2f:
         f5:c9:78:b4:0e:40:6e:4a:5a:30:ac:48:97:5e:fd:dc:4b:d0:
         9d:f6:9d:39:c2:58:3d:ca:92:d0:6e:5b:f6:cb:ad:2f:4d:86:
         1e:90:80:35:e6:c2:e7:b6:6f:75:91:5e:64:b7:ee:0b:50:57:
         b9:9e:4c:01:b8:26:48:40:b5:71:a1:6f:c1:c1:f5:ce:55:45:
         4e:9c:d0:26:b4:f1:fb:e7:b7:02:8f:aa:4f:ab:4b:2b:3b:ca:
         7b:1f:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:04:28 2024 by rpki-client on console-ams.rpki-client.org