Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c9a0f49-2c5f-39af-9d08-3ecb8df5725f.roa
File:                     9c9a0f49-2c5f-39af-9d08-3ecb8df5725f.roa (raw, json)
Hash identifier:          bGfqtvVTk0NhVBco08olFr8nR/QnphAPb2jwmqCP6ZM=
Subject key identifier:   CB:54:46:01:55:29:2A:88:C1:17:20:3B:C6:8B:BC:8E:B1:0E:32:35
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D551FFA1CB13161BE4C50
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c9a0f49-2c5f-39af-9d08-3ecb8df5725f.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:817d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:55:1f:fa:1c:b1:31:61:be:4c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=ee9b58f2-e482-4ece-b634-79107350d1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:aa:ba:8e:47:a6:8a:5e:a8:e7:33:e6:d1:
                    cd:f6:ae:92:6a:0a:13:57:fd:4f:3b:8d:0f:c9:51:
                    ce:22:fb:f5:98:34:98:57:a5:dc:f4:67:a3:91:5d:
                    aa:de:aa:ce:45:d6:b6:7b:94:56:b4:ab:8d:b1:bd:
                    69:67:e4:39:e5:c9:ac:40:4f:ba:0a:26:d6:05:10:
                    cf:a3:f6:7a:2c:50:39:3b:da:f6:79:30:c3:5b:78:
                    66:42:61:64:aa:65:28:78:83:a8:06:e7:4b:1c:c1:
                    e6:19:3f:1d:da:d1:89:28:05:31:3c:34:c0:f4:88:
                    fd:95:e7:c8:2b:cb:25:f7:9e:d0:ff:19:a5:3c:21:
                    78:b4:55:9a:de:b7:b7:1f:ea:84:f4:95:80:b9:8f:
                    3e:6f:84:19:42:1e:64:34:73:96:12:85:94:5d:80:
                    07:c1:c1:20:33:0e:ba:b8:7a:a4:d2:44:ea:20:b1:
                    ea:30:21:a8:d5:d4:8e:b5:39:f6:63:63:17:55:a1:
                    6e:e9:22:b9:ec:25:ae:23:6a:38:1f:fa:cd:1a:5f:
                    9e:96:43:5d:5f:a3:86:a4:5a:bb:d8:53:0d:79:31:
                    cd:25:b7:f7:32:11:03:f3:93:13:65:4c:97:4f:d6:
                    10:69:ba:eb:13:05:5e:07:47:1d:86:c7:12:a6:18:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:54:46:01:55:29:2A:88:C1:17:20:3B:C6:8B:BC:8E:B1:0E:32:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c9a0f49-2c5f-39af-9d08-3ecb8df5725f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:817d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:a3:a9:8f:8c:7e:7a:be:f1:51:4b:53:bd:2d:e3:52:d0:
         6a:27:54:68:17:8b:8f:a1:ea:2a:fc:44:fd:da:b0:3a:ac:4b:
         76:6a:df:0e:5f:a0:ed:17:b1:67:53:6c:98:5e:14:be:50:24:
         51:c1:dc:2b:df:ce:2c:2d:39:c8:35:d7:db:5f:44:d7:0f:31:
         1a:b8:e4:d1:2f:98:50:c2:9e:9e:7d:8f:11:e9:9b:61:18:d4:
         46:5a:6e:25:d8:4b:b1:f0:8f:6f:cf:83:24:c6:e8:7e:99:43:
         1d:e8:24:3f:d5:c7:0a:6e:3f:f5:83:eb:c6:7a:77:f3:04:7b:
         78:50:bb:be:d1:e2:8c:a4:6a:cd:f3:f3:5b:9c:dd:0e:90:fc:
         92:85:f2:79:39:b6:d1:f8:5f:67:d7:07:e7:f7:7e:70:5b:16:
         e2:99:72:85:87:1f:5d:fd:5a:56:42:8f:c7:c4:79:bd:f0:ea:
         73:53:6a:e0:fb:5e:8c:26:ec:5f:38:3a:be:45:79:bf:b4:42:
         c9:5e:43:ab:b1:1c:71:a0:90:11:d6:96:ee:5c:90:fd:ac:8d:
         90:ab:65:2b:72:f5:08:fc:7c:e9:dd:a7:b0:a5:35:a3:d1:74:
         b3:ee:d5:a2:5c:5b:69:8b:c7:3b:d7:78:bd:61:14:b4:79:4b:
         c9:ce:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:12 2024 by rpki-client on console-fra.rpki-client.org