Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa
File:                     961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa (raw, json)
Hash identifier:          nAEc1k/Pd2jOSeDTsQT4Z7YzxTLMRTkAloBS3RE1xWk=
Subject key identifier:   A1:18:25:C6:15:59:B8:42:4A:A3:C9:8D:14:EF:A6:74:CA:C8:0F:D2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3100D4C21D00D31FDFE80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:80e6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:10:0d:4c:21:d0:0d:31:fd:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=97c9f50f-b407-45b5-a212-7d7188b697ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:4c:6b:09:30:fc:6c:a6:20:1e:29:43:6c:
                    c8:13:65:d2:fd:8e:fc:d7:05:24:55:c6:7c:42:e2:
                    36:24:7b:1e:df:02:61:62:f8:a7:10:ad:22:bb:36:
                    c7:81:d6:be:79:c1:7e:f8:9e:a2:3b:a7:60:f0:fa:
                    99:ec:1b:82:3b:e1:d1:7b:9e:80:82:60:8d:a7:e7:
                    d3:00:60:45:e6:2f:71:89:da:97:f3:45:68:be:aa:
                    68:a4:b9:cc:7b:da:fa:b4:36:93:09:a3:2d:17:69:
                    92:cb:27:0c:c7:d2:71:81:90:fe:7b:5b:4c:f2:4b:
                    6b:51:7e:c1:c4:b3:21:87:fc:67:e1:5f:72:77:54:
                    9c:b2:aa:64:67:04:13:6d:4f:4e:b7:cf:1c:af:56:
                    25:d2:68:85:85:1d:20:71:1b:4a:23:27:fd:4e:f6:
                    58:43:b6:17:1b:b2:f1:b9:03:86:73:22:8d:6e:1a:
                    ef:bf:62:c2:c0:14:3d:32:cc:21:66:88:0e:77:5f:
                    7b:b1:f3:a0:b2:b0:a1:d4:f4:2b:51:71:04:da:b6:
                    de:80:7c:50:90:2f:65:3b:a9:e5:be:1b:2b:00:45:
                    d1:7a:29:27:53:42:e1:ee:6b:9d:55:fd:ab:3e:08:
                    1e:94:98:e6:1e:3b:04:12:8b:78:af:0a:ad:59:3a:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:25:C6:15:59:B8:42:4A:A3:C9:8D:14:EF:A6:74:CA:C8:0F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a6:44:90:bf:94:62:bb:6c:ca:69:ba:3d:61:85:77:f6:ff:
         76:12:06:c7:3f:26:b5:d6:a5:75:ce:74:86:59:eb:70:eb:b5:
         d1:cc:b4:e8:3a:ee:3a:41:fb:ef:65:22:9b:47:09:ec:84:e1:
         2d:70:09:ee:93:da:7a:ce:9f:2a:1b:a5:0e:e8:ad:6c:b3:3b:
         50:85:06:e3:07:bf:84:70:46:6c:68:22:b8:2a:b7:9e:e7:9f:
         eb:4c:0c:c7:60:65:8b:ae:54:66:f3:6f:8f:6e:62:76:61:3e:
         6b:dc:ac:65:ff:01:19:73:2c:ea:9a:13:5a:85:f9:0e:c1:98:
         00:d7:47:71:ac:65:19:d1:09:1b:a0:64:a3:e6:ac:41:98:47:
         6e:50:01:ca:c3:cd:71:cb:18:c6:0c:cb:bf:6c:18:67:a7:b1:
         bf:05:39:28:40:0a:19:8b:60:0d:e9:0a:b7:16:da:5e:2d:ba:
         01:f5:a9:2f:42:52:af:46:77:06:bc:35:9e:5a:47:cc:f6:7c:
         f7:bd:60:d5:a3:4c:3a:92:15:cb:e2:bc:be:aa:71:95:0e:5d:
         15:35:f2:94:24:93:17:12:0f:20:83:5b:e5:ac:91:c1:ff:8e:
         58:2b:f5:9f:24:ed:99:c8:5c:03:53:15:30:f6:15:e0:66:79:
         a2:ca:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:25:08 2024 by rpki-client on console-fra.rpki-client.org