Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5ce2fe4-349b-3203-850d-a9394fb1f09b.roa
File:                     a5ce2fe4-349b-3203-850d-a9394fb1f09b.roa (raw, json)
Hash identifier:          5KucD9YijU57EkUpUMkmGrMGakscuAVDvxRCM/AWuQg=
Subject key identifier:   AA:84:E1:A0:72:61:5D:35:2A:81:FE:D0:93:43:3F:C1:6D:43:CE:0B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EEC73EB1CAC060C64280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5ce2fe4-349b-3203-850d-a9394fb1f09b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8060::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ee:c7:3e:b1:ca:c0:60:c6:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=224ae6b7-f0e4-48d2-ae96-d00e67e30119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:0a:c5:65:ca:29:88:e7:b1:2c:3e:5b:b8:
                    63:05:dc:9b:d4:c9:5e:ae:72:9f:44:93:32:27:ba:
                    38:62:e4:0f:3c:92:84:1b:4f:96:33:74:e0:f6:f3:
                    2f:3f:51:c7:0a:9c:c6:84:c5:6c:75:6d:d4:d1:b1:
                    c4:77:f3:db:bf:77:ec:b8:c6:33:11:61:33:3d:21:
                    fa:53:0b:83:21:ed:61:1e:16:f6:88:cf:14:54:ad:
                    55:b6:1c:44:60:2b:85:23:2b:49:bb:a0:03:7d:c9:
                    04:34:a4:82:64:13:ee:1d:f9:2c:d1:08:6a:81:54:
                    b2:8c:51:9d:a5:42:05:38:4d:79:b0:99:29:38:12:
                    bd:a8:cb:16:b1:f6:6f:a7:34:bd:eb:c8:f1:00:e9:
                    a2:50:3f:1e:c0:0e:07:8d:6e:87:09:96:6c:11:01:
                    53:96:62:d2:9a:a5:23:d9:6b:3a:75:74:6b:4a:58:
                    9a:13:80:01:37:ab:f1:b8:26:11:12:aa:2a:7b:d8:
                    f2:2e:eb:87:8b:67:d6:6d:6e:b2:68:20:5f:17:54:
                    c7:50:cd:f2:63:f9:4c:64:e7:94:7e:35:9e:2c:e5:
                    a1:93:95:67:00:e2:81:eb:c1:93:42:59:ec:13:5b:
                    07:1b:51:07:fe:5c:f6:a8:62:2f:af:0f:de:73:bc:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:84:E1:A0:72:61:5D:35:2A:81:FE:D0:93:43:3F:C1:6D:43:CE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5ce2fe4-349b-3203-850d-a9394fb1f09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8060::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a9:20:56:60:c9:d7:89:4d:cd:78:b2:83:2e:d1:cd:1c:60:
         86:5c:a6:6c:42:5d:74:1a:0c:71:e8:99:86:3b:31:44:e5:0d:
         80:d1:d7:0a:12:16:c0:dc:74:8b:13:a1:5a:fc:6c:0a:5e:8d:
         a5:3b:ae:07:c5:09:91:5a:b7:84:a5:08:62:e1:71:71:a6:20:
         db:66:09:91:0b:a1:f9:09:a3:2f:fa:ee:5c:97:e2:af:35:dc:
         d6:19:72:4f:70:5a:eb:5e:fb:d4:70:37:41:e3:a0:4d:5a:1b:
         69:eb:bf:4c:cc:11:95:29:1b:c3:ad:fb:80:cd:9e:61:27:47:
         9a:b8:4f:d5:5d:99:e0:4b:1b:3d:f0:75:73:a6:23:29:1e:13:
         93:49:ed:c2:a3:07:fe:ee:3d:05:bb:61:dd:1e:65:e7:58:5c:
         2e:40:e6:9c:97:dd:55:5d:57:0b:c3:b7:9f:ce:68:1f:8b:61:
         b0:43:54:33:d1:dc:57:4e:d0:d3:5d:dd:94:28:3f:3d:e6:b3:
         f6:69:d4:17:a7:2c:0c:be:b2:6a:1e:35:09:22:16:d6:3d:24:
         ca:24:16:c4:4f:f4:ad:2d:12:28:7d:04:4c:a2:f3:29:c7:59:
         00:3e:0b:dd:31:81:e6:c9:c6:b3:be:3f:92:06:02:39:0b:fd:
         ed:91:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org