Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8fe3017-133d-30db-b767-c77c65516d45.roa
File:                     a8fe3017-133d-30db-b767-c77c65516d45.roa (raw, json)
Hash identifier:          +jJmOjAZc4q6R3zqJjb0ulJ0qnJZhuGdU/AizTiVbyE=
Subject key identifier:   90:2D:CE:1C:33:09:94:17:A7:FE:EA:55:78:9E:05:7D:FB:E2:80:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2F0E5EC5A35466DF29B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8fe3017-133d-30db-b767-c77c65516d45.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8492::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:f0:e5:ec:5a:35:46:6d:f2:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=fe47b273-0c08-470b-b9c0-d1a1139f4e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:bb:9b:a9:50:ee:b1:83:e5:54:20:e0:d3:
                    63:b5:16:de:79:60:96:bf:5e:56:fc:78:dc:61:1e:
                    0d:9a:86:ef:c5:3b:b5:e6:76:f0:2a:5f:c2:1a:33:
                    b2:4e:c7:43:6a:70:d1:b5:61:fe:13:04:1f:f6:c7:
                    23:ce:13:b8:83:69:a5:9d:45:59:b5:a5:79:f4:6c:
                    6a:e9:26:3e:83:af:67:9f:11:5c:ac:6b:ab:61:d4:
                    ac:dd:b3:73:c7:ad:0d:fd:d7:e7:e8:b5:75:1d:12:
                    be:1b:84:4b:99:e7:24:c9:ea:ad:5c:43:73:d1:b8:
                    04:e3:85:8e:17:be:15:e1:a3:fd:3a:be:3a:3e:79:
                    9b:86:6e:9c:39:e1:85:6f:a3:eb:0d:ee:23:2a:d4:
                    02:86:aa:57:42:d5:6d:bf:b0:55:2a:49:d6:c9:0a:
                    d7:f4:c2:1a:7b:5c:bf:b8:8b:8c:2e:58:1d:aa:e1:
                    bc:82:3e:64:d6:14:76:55:88:06:24:bb:a3:d6:1f:
                    ee:b5:c4:85:c2:ac:c4:1f:eb:10:9e:dd:d1:e3:7a:
                    e5:c0:54:95:c9:99:cb:ba:e9:ef:6b:bc:0b:6b:b6:
                    bf:5c:65:40:46:91:64:47:c3:9c:fd:22:61:05:ed:
                    de:1b:f9:5a:1d:7a:30:a8:bc:8c:20:6c:af:7e:65:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2D:CE:1C:33:09:94:17:A7:FE:EA:55:78:9E:05:7D:FB:E2:80:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8fe3017-133d-30db-b767-c77c65516d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8492::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:ac:06:b7:05:50:ae:17:53:65:37:fa:b3:ac:19:71:2b:
         82:ac:b4:65:4b:02:5e:fc:7d:5a:2e:78:4b:64:38:32:e5:e0:
         89:4f:73:19:41:9a:73:09:b2:52:05:85:c9:e9:1a:d5:00:fb:
         f3:68:33:55:11:cb:5f:2a:d9:42:6b:81:29:6d:8a:c8:23:d0:
         63:27:0d:5e:f6:4f:ea:28:cd:03:cc:f9:50:fc:f4:cf:2e:61:
         3f:75:70:69:60:f3:a2:35:31:1e:18:5c:0e:78:38:95:ba:12:
         80:56:33:a7:6b:e4:8e:34:ad:d3:e5:c6:4b:42:89:92:9e:04:
         f7:85:f7:f4:e3:43:6f:15:d1:db:67:8c:0c:ab:1b:e4:e1:ea:
         0d:e1:02:b2:fc:4e:c3:88:19:c7:7c:74:96:1f:bb:f9:50:69:
         5a:a4:d0:fd:28:78:c2:ac:79:e4:69:61:9b:90:2e:95:79:b7:
         a8:8c:2c:7e:ab:70:63:2e:e3:12:30:33:1e:8d:9f:ef:b3:60:
         a0:7d:34:4a:1d:de:4b:c3:77:f0:10:e8:d5:12:c0:e1:ab:66:
         91:25:2f:0f:d8:60:52:01:f2:14:73:d3:b4:dd:f8:c6:6c:4d:
         f5:34:f6:2b:bf:da:61:24:19:88:59:72:7c:d2:74:bc:70:56:
         76:02:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org