Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a191383b-b09e-3959-9c44-73a40535b0b3.roa
File:                     a191383b-b09e-3959-9c44-73a40535b0b3.roa (raw, json)
Hash identifier:          vG3a4Q1BSJhSMkne4BNHVDOCw3YejUu+WI4a49EE484=
Subject key identifier:   D6:30:8C:D4:97:8F:64:65:B5:6B:84:82:0A:FD:C6:29:2F:FA:D0:CF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D155399D3BA3099ADE980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a191383b-b09e-3959-9c44-73a40535b0b3.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8104::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:15:53:99:d3:ba:30:99:ad:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=30903066-60c2-4c5f-943c-0ac272f143ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:97:ea:05:42:09:34:be:4f:d9:36:3e:4c:
                    9e:c8:88:4e:d1:ba:20:e7:6b:94:93:42:1e:d8:08:
                    80:0e:ec:ee:07:d7:75:4b:3b:cd:e1:c2:cd:7b:4c:
                    be:80:53:aa:3d:8e:cc:95:fa:73:90:81:c0:ca:b0:
                    15:7f:49:07:81:10:e7:8b:ff:e5:15:c6:0e:1a:24:
                    f3:d1:46:fb:fb:be:06:58:5c:d7:96:57:28:0a:5c:
                    a4:b1:d7:7b:4a:2d:25:ef:b3:a0:03:ec:f8:6d:9c:
                    13:26:ba:f7:d2:91:70:a1:dc:eb:cc:49:c6:8d:a5:
                    9b:10:e4:95:a1:96:f8:9a:f1:ce:7e:1f:06:80:47:
                    f3:f0:fa:29:48:63:df:9b:12:55:40:78:be:4b:22:
                    27:39:2e:4a:0a:06:dc:75:ba:3c:12:8e:2b:d9:47:
                    d7:28:de:a3:8f:14:90:c9:47:ed:89:3b:ba:0e:3c:
                    b5:12:28:22:d3:26:e6:c8:3c:d8:82:1f:1b:e0:a8:
                    0e:b6:20:30:fc:8b:35:74:c8:19:be:f0:f1:2b:0f:
                    74:7c:13:35:8e:f6:dd:95:66:0c:7d:0e:0e:aa:c5:
                    8d:0f:7e:a5:b7:68:55:71:8d:d5:07:bc:8d:6a:b1:
                    7e:7d:11:53:01:f5:d1:13:20:ba:ac:c3:19:9a:25:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:8C:D4:97:8F:64:65:B5:6B:84:82:0A:FD:C6:29:2F:FA:D0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a191383b-b09e-3959-9c44-73a40535b0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:19:37:0b:41:b2:e8:7a:1f:bb:be:04:42:56:8e:31:d3:
         95:06:2e:d0:9f:dc:9c:11:80:b2:47:fd:b8:57:21:81:01:f7:
         90:c0:01:7f:f1:dd:af:d9:63:34:fe:2c:1b:77:95:14:7e:53:
         87:31:f4:43:c8:44:0d:a9:33:18:6d:74:27:55:d7:f0:31:ee:
         38:d0:b6:a4:f6:19:e0:bc:d5:d8:07:ae:70:0a:06:c4:4b:14:
         06:3d:2c:b9:20:31:d4:eb:3c:0c:3d:25:fd:31:05:e2:9e:f1:
         bf:56:43:9e:ab:eb:41:3b:75:fb:e5:34:f3:d9:bb:b6:61:ea:
         2e:59:df:1a:d8:55:94:e9:0d:6a:b7:44:26:e3:cb:33:13:70:
         b6:6e:b1:d0:3b:3e:af:44:68:26:07:36:92:41:69:8d:3e:d5:
         67:c3:32:c0:54:07:f5:2e:96:7f:ce:6e:1a:fc:75:cc:bf:d8:
         b0:a3:d7:fe:79:e9:c1:84:52:de:55:cb:c2:7c:3d:7a:73:cb:
         56:8a:c0:b7:67:ba:64:73:8e:39:7e:bf:b9:a8:3e:d7:5b:d1:
         44:08:dc:c5:f7:28:e9:8e:6b:4d:92:49:3a:40:f2:b1:68:b4:
         4a:f2:b2:6b:35:6a:bd:4f:7a:8e:7b:67:10:66:fa:64:52:c2:
         c7:93:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:34 2024 by rpki-client on console-ams.rpki-client.org