Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbbb7f14-17be-343e-80ad-0bd3988c94d7.roa
File:                     bbbb7f14-17be-343e-80ad-0bd3988c94d7.roa (raw, json)
Hash identifier:          fMy9g1W7qlIxDXrKciNiS2te9JIIqDt9AMGnRBLx/AY=
Subject key identifier:   92:38:C2:89:87:0C:CE:DE:71:17:CC:15:48:06:AB:01:A9:E8:A4:BC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD60778A5612D40D3F5B600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbbb7f14-17be-343e-80ad-0bd3988c94d7.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:857c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:07:78:a5:61:2d:40:d3:f5:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=fc09e6f2-935f-4a93-bae8-e5110cc03c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:fe:d8:2a:52:da:72:cf:da:35:e1:fa:0d:
                    6a:df:93:e7:68:d4:59:a0:4c:d6:53:2b:8e:cb:d8:
                    95:c8:3a:2e:e7:a8:03:bb:da:02:97:68:e7:af:55:
                    43:11:54:99:f9:fe:30:d3:5f:b5:11:f4:5e:06:6a:
                    21:cb:61:d6:40:2e:9d:90:16:08:d2:10:e7:61:ff:
                    00:dc:46:ab:67:74:fb:c7:07:61:33:29:43:36:da:
                    d6:ff:85:2e:ea:bf:55:8d:7a:c4:c6:ad:da:06:26:
                    41:6f:2a:f2:9d:0d:9e:c5:94:38:1d:31:25:ab:b4:
                    bf:1c:5c:a0:7c:22:39:02:14:e4:2c:88:20:24:28:
                    1c:01:c9:7b:27:91:ef:79:db:86:70:41:1b:64:32:
                    94:91:83:ba:1a:8f:0b:35:03:fb:c9:78:2b:15:c0:
                    56:6a:c2:d6:68:e3:da:05:0f:34:cf:d3:15:c9:c5:
                    99:29:ce:c0:1f:03:95:1e:f7:b0:a3:bb:95:c7:02:
                    98:5f:44:44:22:b7:a2:b1:97:65:38:82:8c:3f:ce:
                    5f:43:d6:28:43:8b:89:e4:b9:9b:73:2c:11:da:1e:
                    8a:fa:73:41:39:27:9e:49:a2:3f:ee:77:8a:ad:7e:
                    1a:ec:c0:37:3b:00:f1:1a:06:59:97:a4:2a:e8:82:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:38:C2:89:87:0C:CE:DE:71:17:CC:15:48:06:AB:01:A9:E8:A4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbbb7f14-17be-343e-80ad-0bd3988c94d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:857c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:18:38:91:71:f6:e9:39:c4:87:6c:53:1e:4c:64:37:c8:
         ed:ae:c0:8e:d2:47:c9:73:f0:39:d0:a5:0f:2f:d6:10:41:46:
         d7:d7:ce:7f:ac:c9:39:96:d1:04:17:56:6d:81:07:55:1d:ed:
         98:75:5c:8c:80:b4:b3:8d:7d:44:89:09:87:3b:da:4e:7d:67:
         ca:8c:19:2c:0a:b3:ed:f9:75:79:6b:fe:54:66:d0:31:fc:b9:
         05:d6:bb:c9:22:67:86:99:00:40:c1:75:3f:37:9b:2f:66:80:
         d5:10:aa:56:56:11:6a:11:b1:b4:b0:40:c5:a8:40:b6:8f:a4:
         b5:e8:e7:1d:e1:ef:a8:93:97:0e:be:61:56:28:9a:e9:f8:92:
         95:1a:60:16:be:5a:d5:52:02:fd:66:c6:f8:4a:16:1b:ef:c9:
         d0:57:ea:1b:b0:3c:c1:b4:ea:cb:2b:99:6c:49:a4:20:00:84:
         8a:ec:20:ef:ac:54:1f:72:b7:9d:1b:5c:be:39:6f:2e:88:26:
         ef:dc:e5:66:c4:96:57:a5:ad:a8:ea:18:1d:2e:67:d5:53:39:
         86:b2:09:ff:1f:47:6f:14:b0:a9:97:18:64:ce:b9:f4:b6:0c:
         90:26:ec:b1:1b:8c:83:9d:1c:c3:f1:b0:74:3f:4a:79:8a:b6:
         70:c9:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org