Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ae96fd47-37c1-3200-9c26-c9b565044610.roa
File:                     ae96fd47-37c1-3200-9c26-c9b565044610.roa (raw, json)
Hash identifier:          Li3NVRk6SJjWY57LfdumLOQxYbwnftdNsTKN3sz8dDE=
Subject key identifier:   BD:70:D8:18:E3:07:B3:E2:4C:5D:AA:BE:91:D5:50:CE:48:5C:27:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967C9EF0D933750C09E38210
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ae96fd47-37c1-3200-9c26-c9b565044610.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8043::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:9e:f0:d9:33:75:0c:09:e3:82:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=13a146aa-c9da-4793-877e-414d60e275fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:da:c1:fc:62:4c:47:e0:af:ce:cb:0a:50:
                    88:1b:c3:01:8f:94:a3:df:92:c6:8f:14:02:60:60:
                    9a:ee:10:01:a6:11:54:95:d0:4f:75:7a:d3:7f:fb:
                    f3:85:a2:ed:a8:46:a6:14:a4:f1:d2:17:d4:dd:0b:
                    8c:94:ab:5d:00:a0:c6:71:b5:ee:8e:8c:26:52:15:
                    f8:ad:62:3c:57:80:f0:53:24:df:ad:4d:fe:61:55:
                    ab:73:04:af:60:6c:ef:56:74:13:27:bc:ba:35:6a:
                    2c:92:89:d7:43:6c:e9:a8:0c:b5:fd:67:ab:34:b8:
                    f7:ea:69:bd:62:a1:c7:11:b5:fe:5d:37:75:f8:c4:
                    b0:c4:72:94:e3:f6:fb:55:42:60:e0:b1:be:bd:86:
                    b7:dc:71:49:fb:a3:9d:c4:d3:d8:38:18:6e:8a:4b:
                    00:41:70:79:48:ae:74:67:91:d7:c8:e8:7e:87:22:
                    2b:09:3d:1e:de:06:e3:80:a0:ff:c1:fc:58:7b:f9:
                    2c:05:95:5c:f5:1f:cf:f9:05:4e:62:89:fb:92:70:
                    ff:b9:65:c1:81:ba:c3:5e:3e:7d:46:b5:89:50:64:
                    d1:2b:f0:89:04:1d:c0:96:b3:21:23:e2:fc:75:78:
                    02:c6:48:7a:c7:f6:75:9b:87:5d:f3:aa:45:d0:f3:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:70:D8:18:E3:07:B3:E2:4C:5D:AA:BE:91:D5:50:CE:48:5C:27:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ae96fd47-37c1-3200-9c26-c9b565044610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8043::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:db:a4:90:e9:1a:16:47:77:34:7a:40:6b:4e:5f:8c:52:b6:
         30:6f:56:c0:a1:09:5c:1d:db:b2:a7:b6:3c:27:45:0b:c9:ee:
         c4:e6:01:69:31:eb:e1:d9:dc:19:f2:0f:73:29:88:7c:31:53:
         84:7a:d6:c5:a0:05:33:0d:f3:04:5a:25:bd:27:33:57:3b:b0:
         5f:1a:3b:cb:59:aa:2e:11:3e:80:3c:4f:94:42:b4:ac:dc:d4:
         fe:90:06:f5:3b:2a:15:0e:62:18:f1:b7:06:c4:d2:c5:71:f2:
         5f:ca:3e:fb:d2:0d:c1:a2:44:50:27:d6:47:15:ee:77:b7:a2:
         89:74:4b:db:20:82:61:88:de:25:6a:e9:34:9e:b9:54:d8:89:
         86:e9:be:76:09:b9:2b:bd:49:a2:ee:34:2e:ef:04:74:63:3d:
         9b:a4:05:4b:8f:b4:01:14:94:ed:95:ad:9a:91:6f:3a:97:51:
         41:30:c3:12:67:42:80:50:19:3a:a7:0e:83:e6:4b:12:69:4a:
         3a:f4:52:71:d0:63:aa:e5:39:e9:c9:80:b9:a7:0d:63:89:08:
         3c:c2:9a:de:91:b1:5f:c5:c8:28:5a:51:b3:6f:0c:44:0a:4b:
         e0:d3:86:2d:00:14:d5:3e:ba:cc:bf:f6:41:40:cf:f2:4a:96:
         67:17:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:07 2024 by rpki-client on console-fra.rpki-client.org