Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2ab3d2a-3068-3352-b612-b602920c48ac.roa
File:                     a2ab3d2a-3068-3352-b612-b602920c48ac.roa (raw, json)
Hash identifier:          N2cXDvgEuyX3+lA6VvtUI6qLNXMKY4Qd21APlb4dtyw=
Subject key identifier:   25:89:CD:50:05:21:CB:BB:4D:9F:C1:0C:9B:A4:5B:9E:5D:CF:95:15
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F73BDE91E6AB02579480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2ab3d2a-3068-3352-b612-b602920c48ac.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:81a7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f7:3b:de:91:e6:ab:02:57:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=736eb9dc-966c-4e89-980c-179c9a7ed9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:73:4e:9b:f5:2d:81:c0:89:03:59:92:5c:
                    b0:62:fa:db:78:e8:8b:f2:66:69:8f:85:08:72:1d:
                    d6:87:67:f7:71:45:d4:9c:66:6b:01:88:b7:43:1d:
                    d4:6e:87:a2:ab:69:56:2c:e9:c6:5e:4a:03:50:55:
                    3f:e5:7e:b0:6e:ef:f4:56:05:4d:4c:6f:9f:0b:74:
                    03:d6:32:e8:af:07:32:6c:37:4c:46:03:27:2a:b0:
                    ad:81:71:05:60:ba:33:54:70:75:d1:4b:28:41:6f:
                    25:0a:7d:3a:54:1b:4e:bd:61:9a:03:41:70:21:c1:
                    83:cd:00:24:94:d0:7d:5e:5e:6a:cc:96:49:0a:a6:
                    e4:14:10:47:d4:55:2e:c6:21:3c:c1:de:bd:c0:d7:
                    aa:e2:c2:53:d3:fe:47:fc:f2:75:8f:52:e6:67:a8:
                    28:9c:54:95:77:d2:c1:b0:b7:78:f5:bb:62:c6:ce:
                    ee:6c:55:df:31:22:94:a7:e1:8a:4e:ce:28:04:82:
                    2e:f4:52:ea:19:a3:f4:1b:26:59:5f:ed:b2:8e:2d:
                    12:cf:86:9d:98:13:48:23:cc:85:1e:f6:d5:02:6e:
                    34:74:c1:e8:e1:23:0c:40:ce:75:78:03:80:b2:26:
                    92:69:dd:4b:6b:1b:2b:6b:f1:69:1e:28:be:e7:91:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:89:CD:50:05:21:CB:BB:4D:9F:C1:0C:9B:A4:5B:9E:5D:CF:95:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2ab3d2a-3068-3352-b612-b602920c48ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:59:05:ec:c9:0a:2c:1b:15:77:76:de:7b:98:9b:38:39:
         7b:7e:7f:79:76:64:86:c2:19:86:fc:2d:ed:94:38:f5:12:db:
         01:ad:36:98:50:32:1b:ee:35:23:ff:a9:7a:c5:f0:11:8d:af:
         7d:77:f4:a6:58:e5:63:42:e7:e6:0f:1b:1c:f4:fe:78:b3:57:
         ae:a9:82:ad:6f:4c:fa:1a:40:d8:5e:8e:4b:8b:10:bc:63:55:
         0a:d1:97:51:6d:a0:44:24:ec:02:ab:e6:1b:b5:c6:6a:07:69:
         4c:63:e2:8c:25:2c:f2:f3:cb:33:fc:11:8b:84:2f:71:ea:1d:
         7f:a1:13:72:4a:28:59:e2:0a:a8:5f:2a:e2:60:c3:6e:a8:39:
         f8:c1:e1:b1:0c:35:9c:37:0f:7f:eb:9e:c9:33:45:ee:29:51:
         09:b0:08:ff:d1:34:44:63:c7:6d:7a:c2:a4:8a:19:48:a0:af:
         c8:41:3e:21:6b:4b:a9:46:bd:79:0e:82:4e:f0:10:01:05:07:
         c6:f3:62:39:3a:b6:6f:3c:4e:71:ff:5c:c7:64:17:45:ad:93:
         0d:c7:b0:24:bd:c9:24:9b:ad:fc:c4:a8:14:74:13:b9:75:27:
         41:b0:f3:ad:7c:a9:ac:aa:fa:40:af:74:8a:f4:da:0b:3f:e4:
         a4:75:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:29:19 2024 by rpki-client on console-fra.rpki-client.org