Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab438a16-e03e-31e8-8d05-ea34d0160c3c.roa
File:                     ab438a16-e03e-31e8-8d05-ea34d0160c3c.roa (raw, json)
Hash identifier:          op0riOwWEF/LPm4MQxSii4jRNL49mE4OJPttbimBKNg=
Subject key identifier:   98:D3:4A:3F:60:A3:F4:45:4A:35:AA:11:A8:99:29:94:29:B7:AC:B1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967C78CB72AEAD7B2523F1E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab438a16-e03e-31e8-8d05-ea34d0160c3c.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:800d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:78:cb:72:ae:ad:7b:25:23:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=661466c0-285a-4650-93c5-2e292fc0a7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:85:2d:93:7b:68:86:7f:52:70:be:70:cb:
                    66:e3:b9:30:58:35:36:ba:ae:fc:90:ac:60:15:12:
                    2c:c9:7f:d1:21:cd:00:2a:30:f0:09:78:a6:de:c5:
                    8f:48:50:9f:28:1f:39:f7:53:a5:ee:6e:54:0a:5a:
                    78:db:f6:ad:a2:57:4e:5a:3c:28:7a:7b:80:e8:48:
                    ab:51:65:d7:62:40:a1:49:17:c6:52:48:6a:6c:05:
                    25:84:91:8d:42:72:de:f8:93:5e:27:b7:f8:08:1a:
                    f8:15:9e:43:ae:f0:72:12:f9:6e:3c:11:71:95:de:
                    9b:63:1e:e3:97:c5:94:25:bb:e1:66:83:31:f0:b1:
                    e0:f1:89:f6:7d:5d:7e:43:61:71:f9:82:8c:1d:74:
                    3d:3a:e1:ff:7c:f1:5a:89:9d:7b:fc:7e:2e:1f:57:
                    2d:8e:4f:3f:9c:df:91:30:f9:a0:90:aa:28:43:cf:
                    f8:3b:f3:34:59:94:62:d7:9f:c9:db:3f:80:e7:06:
                    e9:b3:ed:66:4e:c8:42:12:80:d6:81:7f:de:9b:20:
                    28:aa:fd:38:05:82:d8:34:c0:24:87:cf:c3:a9:4a:
                    00:6b:60:e5:00:18:a2:c0:b0:13:6c:f0:f7:cd:ec:
                    6e:43:9c:f0:38:b2:d8:b6:c6:78:49:41:b6:69:7d:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D3:4A:3F:60:A3:F4:45:4A:35:AA:11:A8:99:29:94:29:B7:AC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab438a16-e03e-31e8-8d05-ea34d0160c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:85:99:65:b1:d4:30:a1:c5:0b:c5:71:f0:03:17:a9:56:06:
         dd:37:54:40:d4:9d:2a:c1:3b:27:3e:22:78:10:5b:81:a2:b2:
         21:06:07:54:20:19:63:aa:d0:35:2b:9b:56:45:34:e6:7d:52:
         f3:6c:cb:fd:41:82:05:3e:66:c0:84:47:45:c5:73:7f:cc:48:
         18:a6:43:88:b8:07:da:98:88:2e:3d:eb:15:bc:99:d3:d1:f5:
         65:c7:f0:5c:5c:55:88:5d:0a:22:eb:f0:f8:88:eb:af:f2:b9:
         cc:b3:a7:9d:d4:be:eb:a8:ba:d9:c5:87:0e:49:17:22:d3:4b:
         d5:33:38:62:eb:f7:f4:8c:73:0e:c6:cb:af:14:89:e6:93:3c:
         97:5a:0e:54:de:f9:4f:69:26:ca:d3:ff:80:fa:51:c8:52:39:
         49:94:2e:31:b4:23:3d:a7:ca:1b:98:82:74:8b:a4:67:99:6a:
         47:e0:f1:bf:80:ab:62:fa:05:dd:1a:4b:2d:c8:41:49:de:17:
         36:5d:6f:e0:14:5e:e0:50:c4:a9:84:31:a1:e6:09:80:76:82:
         12:06:a3:74:20:97:34:89:71:4f:5c:37:23:dc:66:81:eb:c4:
         c9:4b:ca:ed:58:a1:eb:e4:36:ce:b5:eb:46:d7:5a:59:50:0b:
         98:a0:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org