Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bfb11dcb-2448-3847-af76-78341b0b2817.roa
File:                     bfb11dcb-2448-3847-af76-78341b0b2817.roa (raw, json)
Hash identifier:          dKkFv0l7fXP1d7UHqaMA3PJ+YrMklILR4beIsKJ360g=
Subject key identifier:   FB:A6:A3:C2:A2:D0:F6:C6:46:60:0F:77:FF:5E:2A:27:CD:E8:A2:06
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EB6A6A55F7EDF8EB9C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bfb11dcb-2448-3847-af76-78341b0b2817.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8052::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:eb:6a:6a:55:f7:ed:f8:eb:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=a3a4242d-2b51-4450-b140-1dceb5aa36db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:95:26:16:9a:7a:f1:4b:b7:11:90:80:54:e7:
                    f6:51:ab:c1:9c:db:2a:7c:00:0e:ed:9a:64:2f:a1:
                    39:0e:33:99:92:f0:03:b4:2f:60:47:fc:20:93:99:
                    8e:55:37:78:9e:ac:64:e9:3c:1c:22:7e:c2:49:be:
                    7e:bc:f7:a0:62:82:45:53:10:e9:c1:c1:c2:ad:cb:
                    f4:52:4e:55:3e:11:f6:eb:6e:67:ca:ab:c1:c0:26:
                    43:3a:38:d2:4a:d4:d5:64:de:ca:6f:b7:d2:80:9e:
                    e7:59:3e:ef:9f:37:cc:e3:39:ab:7e:47:3c:75:49:
                    45:5b:2f:5b:2a:c2:46:57:c7:da:69:9a:30:0f:b0:
                    ee:b5:f3:94:39:c2:bb:74:96:54:9c:97:16:20:91:
                    90:91:63:57:7c:3e:92:7f:ad:32:13:c0:a2:14:bf:
                    4c:2d:d5:ab:ab:ac:5e:6e:a7:41:b2:5e:38:15:01:
                    28:45:2d:41:55:20:04:06:c5:ce:95:22:8b:d2:f0:
                    cb:8f:dc:50:b9:62:aa:40:b6:9e:cd:02:33:62:0e:
                    7d:89:f6:a5:62:ab:b3:7a:b4:bf:71:bd:47:07:ff:
                    0d:d4:f6:ca:95:ac:e8:52:cd:d1:fc:e0:0d:22:12:
                    0f:6f:94:04:c5:1b:1b:57:9f:2c:ad:36:cb:b5:ea:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:A3:C2:A2:D0:F6:C6:46:60:0F:77:FF:5E:2A:27:CD:E8:A2:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bfb11dcb-2448-3847-af76-78341b0b2817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8052::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:7d:1f:df:9b:f7:62:01:fe:c6:36:14:87:40:77:13:5d:87:
         dd:98:66:26:17:32:fa:df:c9:cd:68:2c:fe:8e:d8:61:e2:1e:
         63:c0:6b:42:b9:f0:2b:87:fe:d1:40:e4:62:4a:c2:96:98:cc:
         34:f2:05:b5:ac:cb:f1:8f:39:35:35:7f:c9:b5:8a:2a:67:e2:
         67:c7:6b:83:29:08:57:f0:89:5d:49:e6:e7:b8:2c:cd:53:db:
         4e:98:52:63:fa:d2:37:f8:0f:ca:f9:78:9c:97:73:f8:1f:24:
         73:25:6e:2d:4e:9d:f5:ae:c9:dd:50:15:af:46:e1:80:0e:65:
         76:7b:f7:53:31:34:b0:7a:7e:b5:fb:d3:26:b3:f4:1b:4a:14:
         01:fb:0f:86:a9:7e:5f:ef:37:f4:74:98:30:0d:68:97:f9:b1:
         cc:93:ac:7a:ec:13:c8:cf:82:7f:6d:80:8c:56:0b:55:d0:76:
         5c:af:a2:39:fe:cb:bc:ee:cc:33:c5:e3:b0:06:91:e4:ac:44:
         92:63:7e:1f:85:4a:af:af:8f:a7:13:e7:3a:c0:5e:c8:7f:ed:
         f4:63:af:df:d0:a0:c9:97:9e:7c:3f:f3:da:36:05:0f:41:f9:
         52:30:0c:47:21:72:d8:1e:1b:cc:e0:61:99:7f:c1:1f:aa:ba:
         c1:6a:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:25:09 2024 by rpki-client on console-fra.rpki-client.org