Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98739275-0572-3fb7-81fe-1d41c7be55b1.roa
File:                     98739275-0572-3fb7-81fe-1d41c7be55b1.roa (raw, json)
Hash identifier:          8wZSI6RZAlMxeooc69YQ+Pd1S/hfU5cjItOjDGUowxY=
Subject key identifier:   85:34:72:48:5B:09:4D:C2:D9:5D:16:A5:F5:2F:D6:91:5F:48:43:C5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5ED2D670A68CEF5114900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98739275-0572-3fb7-81fe-1d41c7be55b1.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:84d0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ed:2d:67:0a:68:ce:f5:11:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=470f6e15-1661-4aea-9ca1-e822dea3f6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:3c:46:73:3c:3c:01:e0:d8:93:8a:96:98:
                    1a:1e:1a:46:6b:85:73:c9:78:53:3a:df:39:3e:2c:
                    75:2d:83:19:63:05:a7:1d:00:22:11:fd:49:f9:d3:
                    08:6c:77:b5:11:45:8d:64:9a:55:53:b8:4e:b9:14:
                    55:ea:e1:bd:fa:c0:8b:b4:3e:f4:07:2a:22:a5:6d:
                    eb:f4:93:f0:9a:73:9d:83:58:56:bd:8b:b1:76:f5:
                    cb:90:7e:e9:5b:54:1e:55:85:04:04:30:e2:9b:5f:
                    ec:af:af:ed:18:0b:e9:f7:c2:91:be:1f:a1:8d:05:
                    bc:09:1d:99:4c:22:fa:3d:05:2a:e9:d8:24:76:4b:
                    10:c8:ce:fe:a8:67:a4:a2:b4:d5:5c:be:a0:9c:78:
                    65:9a:45:6a:7e:c8:c2:ec:b5:23:a6:97:83:bc:e4:
                    22:c0:41:42:7d:88:73:36:9e:5f:69:5d:90:a2:fa:
                    92:df:17:72:a1:30:dc:17:a6:bb:75:dc:d3:46:1c:
                    6e:f8:ee:63:86:4d:f2:ca:bf:0d:9f:65:1e:b0:09:
                    cf:26:71:e3:86:14:e2:86:8d:f5:65:93:5f:07:57:
                    a6:d1:13:1b:2f:d7:ae:8e:1d:57:26:80:4c:21:01:
                    61:42:06:31:55:72:6c:b7:b0:ec:3e:f8:07:ae:dd:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:72:48:5B:09:4D:C2:D9:5D:16:A5:F5:2F:D6:91:5F:48:43:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98739275-0572-3fb7-81fe-1d41c7be55b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:6a:f5:d0:1d:4f:ae:59:bb:b3:6e:ff:b3:55:27:71:65:27:
         12:fd:a6:78:e7:fd:ed:ef:2b:c8:e3:4d:a9:ce:8a:ec:0a:8a:
         a2:38:8c:7d:ba:f0:5a:27:9f:ae:79:f8:c2:4a:0b:29:55:91:
         19:ee:1f:c5:94:c6:5d:ad:b6:72:fd:aa:bd:67:3e:76:4d:3f:
         44:c3:36:dc:9e:de:3a:d3:87:97:f2:32:25:e4:29:5b:ef:f9:
         63:6c:86:ef:7c:ef:39:ec:59:46:2d:5b:e7:7d:46:5d:8f:1f:
         b0:2e:58:a1:4a:d8:14:81:d3:63:ac:c8:85:73:88:06:12:48:
         35:23:45:a0:9d:3c:e4:96:f5:c1:84:a9:4d:04:9a:82:28:af:
         3d:f4:22:00:00:ff:73:aa:ae:44:bb:93:5f:38:49:3f:41:95:
         e3:fb:03:05:08:48:e3:0d:a7:f2:5d:b0:bd:4f:5a:6d:52:1d:
         0f:a6:8a:df:24:18:3f:b1:6c:6c:d1:64:a4:c5:d9:12:76:5b:
         86:86:45:a4:a8:97:f5:ef:3f:30:59:42:e5:e2:6c:87:6a:f0:
         4f:be:c5:30:cc:c1:d2:a2:5e:cc:25:3c:f7:48:55:61:e7:8d:
         a2:48:99:60:62:37:61:d7:c8:6d:a6:e7:d7:bf:30:33:b6:b3:
         0d:bd:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org