Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa
File:                     9033ce29-1a6c-3772-a526-84a80ca45e6d.roa (raw, json)
Hash identifier:          qox0aYUpRGfBsaJJ+d4SeBn2EQgQ09tVsKxJ38JhftA=
Subject key identifier:   71:72:03:99:BA:C6:10:A9:39:DD:90:77:F5:F7:4D:23:7A:94:AA:4B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC314A62C1A09248AAFDFE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:14:a6:2c:1a:09:24:8a:af:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=bef89169-4b44-46cf-8752-0a9fc70a3d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:ba:53:4e:05:94:cf:0c:59:87:c8:1d:6b:
                    c4:d2:ae:24:96:3e:b2:5c:24:e9:db:5e:13:a5:9f:
                    b8:a7:69:a7:6c:d1:ec:70:fb:cd:69:d9:8d:4e:f8:
                    b5:f8:3a:35:a9:90:96:86:1a:28:c8:f9:78:7f:7d:
                    d1:31:fe:ee:3a:6a:77:8f:ed:04:59:db:ea:60:29:
                    bc:6a:da:85:7e:c9:59:4f:f2:10:2a:20:44:54:44:
                    a0:b1:f3:79:83:bd:4c:e1:0b:e5:1b:17:c7:50:0c:
                    44:b8:49:7d:a0:46:5a:77:5d:b3:3f:63:a5:90:8b:
                    e4:cc:f7:6b:1b:06:42:57:9e:c6:e8:dd:e1:40:ea:
                    f4:e6:c3:f8:12:0c:58:70:4a:1e:f9:41:5e:ec:98:
                    47:62:97:d9:8c:a4:81:ea:d1:80:79:72:ac:96:0e:
                    8b:92:39:63:44:15:90:b0:c8:34:ce:cd:ec:1f:e6:
                    26:2f:71:6c:4c:40:09:bb:a0:70:1e:98:7e:b2:06:
                    c1:9d:41:90:58:ce:d8:64:f2:a3:33:65:7c:75:79:
                    16:43:ce:1d:d1:b7:34:95:99:df:a7:28:c6:0d:33:
                    3e:db:31:dc:25:a8:74:a0:e4:42:7b:0a:dc:da:14:
                    d7:9b:55:bf:74:c0:99:1f:d9:d9:24:8a:20:48:a0:
                    72:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:72:03:99:BA:C6:10:A9:39:DD:90:77:F5:F7:4D:23:7A:94:AA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9033ce29-1a6c-3772-a526-84a80ca45e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:05:27:21:71:7a:ca:21:c9:c8:0b:67:35:da:44:28:7a:
         8e:e0:95:47:42:2d:d7:77:d2:94:f2:21:db:a4:7d:25:e6:52:
         4e:a1:54:b1:8f:89:63:ae:ce:cb:81:e8:5a:2a:bd:01:66:71:
         1d:1b:e3:35:9a:78:56:4c:d0:0d:fb:f4:b0:6b:83:02:a0:61:
         3c:0a:72:89:0e:e4:31:7b:f2:31:ce:0f:a5:a1:7e:7d:db:6b:
         ed:47:c3:1c:5a:10:07:5f:dc:6e:08:ad:da:a7:ed:3b:07:77:
         fa:9e:4b:50:21:e2:48:f9:b0:15:64:d2:b9:91:0d:71:fc:e2:
         eb:33:a4:b9:22:c4:06:51:02:04:cf:ac:9f:51:c1:a8:9b:44:
         23:36:99:6a:4c:31:9a:4a:3f:91:7e:95:c3:4f:93:53:5a:c1:
         ea:b0:48:55:d0:2e:bd:1f:c5:7b:90:d8:dc:8b:6b:25:a8:df:
         1e:83:3d:de:2a:4d:75:31:c2:3d:0f:20:8e:ab:95:f7:d4:26:
         38:8d:6f:d1:93:bb:a6:f1:8c:4b:61:78:07:c1:8d:5c:b4:c6:
         46:13:73:72:8a:22:21:32:6f:9f:37:6e:fb:05:14:17:7e:3a:
         7c:16:a5:ce:26:7c:99:8b:e2:2c:e2:92:39:cd:ba:98:5e:34:
         6c:57:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:33 2024 by rpki-client on console-ams.rpki-client.org