Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/968165e5-88c3-3387-a5d8-ab18559ba120.roa
File:                     968165e5-88c3-3387-a5d8-ab18559ba120.roa (raw, json)
Hash identifier:          75c4o112g37xuducTUcC5jnI5uIu3aH9KbvDhQWP2Fo=
Subject key identifier:   20:32:4A:6F:20:AA:D6:20:E4:83:84:BC:2D:4D:77:64:60:D1:6D:AC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EEB9BAC963EDDF8EFE00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/968165e5-88c3-3387-a5d8-ab18559ba120.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:817b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ee:b9:ba:c9:63:ed:df:8e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=865f5628-c1af-4e6b-8006-fdad9c48a4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:6b:9b:c8:e1:e3:44:9e:b5:9e:3f:e7:71:
                    f7:0e:51:b8:cf:67:b2:15:ea:15:7d:3f:6d:4e:7f:
                    03:69:ad:a9:25:ba:45:6c:50:b4:78:a9:35:42:94:
                    28:6c:23:8a:71:10:57:08:dc:59:95:29:e2:bb:be:
                    93:db:cf:f0:c6:5c:d6:4c:71:40:90:81:85:ee:6d:
                    f0:be:15:d2:ad:3c:bd:b3:2d:d7:2e:12:82:10:ac:
                    4b:80:a3:48:97:b2:54:1e:4e:fa:76:00:fe:96:52:
                    b2:6e:d1:74:71:f4:ab:b9:0c:ec:dd:07:75:c9:08:
                    80:08:27:e9:44:7d:9b:12:28:5c:5d:e4:07:ca:b6:
                    df:80:7d:5e:7c:f4:52:92:75:ab:ae:73:a9:a6:2f:
                    ed:f9:0b:28:08:4c:76:80:1a:b5:5c:65:f5:60:5f:
                    54:43:ff:7b:48:a0:fe:fe:a9:40:2f:7f:af:52:ad:
                    67:35:1a:de:11:82:6a:38:ab:c1:97:5a:ed:b7:2b:
                    7f:df:4a:28:5f:39:94:f9:20:b6:9e:39:a7:0e:aa:
                    f1:4f:39:d9:31:36:85:47:e5:05:59:1c:83:24:d1:
                    bf:bd:1e:a6:68:10:a4:ee:40:c6:e3:7e:1b:49:ad:
                    b7:09:a4:78:04:c1:4a:c9:4f:e8:cf:89:35:ea:ad:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:32:4A:6F:20:AA:D6:20:E4:83:84:BC:2D:4D:77:64:60:D1:6D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/968165e5-88c3-3387-a5d8-ab18559ba120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:817b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:fb:4c:f9:ae:3b:f6:6a:b6:a7:96:92:7f:6e:9b:35:45:
         29:59:78:f8:b1:86:b6:61:e9:55:85:13:6c:76:64:69:99:bc:
         8d:4f:de:de:11:4b:d8:dd:98:39:8f:0d:d2:a8:ef:46:a7:fc:
         47:3a:ee:8e:e5:a1:50:6c:5e:6b:d6:ee:c7:5a:f6:2c:64:8a:
         e7:b7:0f:54:b2:0d:1a:fb:15:1b:e1:81:b6:06:87:d2:71:14:
         e5:94:b8:bf:93:fd:52:5e:d2:51:ad:e4:2d:e5:eb:d9:05:1e:
         d6:40:f3:98:63:9c:0a:8b:1f:9e:64:9d:0b:b7:d4:e3:94:17:
         b3:15:2c:f6:97:47:68:6e:42:64:ed:cb:19:b1:61:11:eb:52:
         e4:b2:de:12:ab:53:c7:d4:25:bc:60:e2:13:c9:9a:59:01:28:
         bb:fe:4c:8c:a1:14:dd:f9:91:2f:e8:6e:35:89:ec:9f:54:2d:
         08:ea:30:53:26:51:62:0d:7d:98:f8:62:ef:03:0e:0f:60:f5:
         32:1a:f9:fc:78:d2:59:7f:5b:de:7b:12:4a:f2:95:67:b6:4c:
         2d:1e:cb:99:a7:6d:43:d4:4e:d3:f4:8e:43:bc:fc:10:d8:01:
         6e:8c:c6:0e:c0:86:95:1a:39:cc:2d:fa:3a:eb:21:b9:ec:ea:
         83:d6:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:16 2024 by rpki-client on console-fra.rpki-client.org