Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa
File:                     9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa (raw, json)
Hash identifier:          0+8Td/Q9kBDNauBu2SpMfUSDoA/1XfVf5jhwSOKHCHE=
Subject key identifier:   A8:F3:F2:09:68:38:4F:67:AF:29:73:92:52:52:D8:B0:E0:52:3B:D0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EF4255126190954D6180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:81f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ef:42:55:12:61:90:95:4d:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=f142b0cf-f0f0-4554-9418-d42ccdaf8384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:56:e3:e1:14:00:5b:6b:15:61:5f:47:a5:
                    47:71:0a:9b:9c:18:39:77:15:eb:67:f6:85:b2:b1:
                    9b:ca:01:07:8d:b7:b0:5a:f1:09:66:3c:3c:92:51:
                    b3:21:1d:bb:65:f4:4f:11:38:6f:71:49:b6:5b:3e:
                    79:43:1c:16:0f:f9:ef:31:0c:16:5c:4b:a9:ce:24:
                    1f:7d:d1:40:4b:1e:fb:6e:1c:4e:19:d1:de:49:90:
                    f9:f3:30:9c:ee:d9:af:4e:49:82:b2:a4:b8:f9:0b:
                    a9:05:3b:ba:d8:23:0f:e2:d5:65:eb:d0:51:80:e6:
                    66:86:fd:dc:9d:6f:65:12:0e:75:36:fe:01:e2:bf:
                    3b:41:f6:e5:33:6f:f0:58:61:27:4a:f0:41:b0:b4:
                    8a:03:37:49:6a:15:5f:87:1a:2d:2a:b3:45:af:62:
                    c8:3e:eb:a4:78:ac:32:f9:e8:8b:17:85:63:1c:ea:
                    06:fa:ee:43:46:7f:3e:3c:18:7a:07:ef:2d:44:12:
                    27:d6:b4:d9:96:25:22:ce:17:ca:4a:b8:15:2d:81:
                    da:29:7e:78:44:41:50:f9:69:66:9c:db:d2:bc:a5:
                    9b:a9:48:8e:5c:72:01:04:e2:81:d7:89:f1:c6:48:
                    cc:10:12:e3:50:bc:52:4b:37:c2:de:7f:1d:e4:4a:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:F2:09:68:38:4F:67:AF:29:73:92:52:52:D8:B0:E0:52:3B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:22:11:dc:05:6e:a4:00:7c:3e:6f:41:1f:5d:d9:42:83:8c:
         61:b2:47:7d:a8:86:ab:12:a5:36:26:4f:ac:45:71:d5:5f:9b:
         4f:e7:11:98:84:3f:1a:a7:9e:d0:14:2b:b8:5d:c4:1e:fa:38:
         07:34:16:f7:44:1a:51:ac:27:6e:ae:f2:b0:65:1b:ab:63:ae:
         24:fc:80:2c:26:f3:ed:31:d8:7a:9a:0b:84:38:7a:d4:1e:48:
         2d:f3:7f:48:7f:40:d7:ff:61:17:be:08:eb:a0:4c:ff:34:28:
         4a:48:29:27:d0:99:8a:e9:43:96:5e:50:2e:c3:c4:c8:65:fa:
         be:91:54:d3:31:de:4f:38:69:de:85:f3:f1:52:c1:4e:af:9f:
         93:62:ba:ea:f4:0c:38:d8:0e:a3:d3:a8:58:e4:05:19:e8:04:
         16:d3:25:9c:25:48:60:ef:85:6a:18:39:b1:67:36:9d:45:60:
         e3:d6:31:e0:21:42:c8:86:52:93:82:95:d9:c8:1d:04:6b:47:
         98:18:72:22:0e:d3:96:ca:79:05:67:30:f2:c9:e4:d3:10:a4:
         2d:9a:a9:a4:a3:37:a3:f9:9f:59:fa:ac:11:bf:1c:90:a5:9b:
         20:01:f9:cd:70:39:2c:99:97:95:4c:03:a3:e7:f1:11:38:b6:
         9f:47:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:12 2024 by rpki-client on console-fra.rpki-client.org