Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c148998d-c073-38c1-a2ae-00295a839c57.roa
File:                     c148998d-c073-38c1-a2ae-00295a839c57.roa (raw, json)
Hash identifier:          bHuIAGjhVQiAiXZKuDMPwr1irdHTx7MKsOqYP1AMDCI=
Subject key identifier:   DF:04:66:B2:EB:FE:3E:A9:FB:84:33:73:74:70:9A:7C:0D:41:1D:69
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967C989719363AF6D6339C60
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c148998d-c073-38c1-a2ae-00295a839c57.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8039::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:98:97:19:36:3a:f6:d6:33:9c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=f3fcfe9b-341e-410e-89d5-2d9e06e828ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:54:3a:60:fa:f3:b4:d9:07:d2:1b:c6:b5:
                    d1:2f:94:b2:04:c9:70:85:08:07:9a:7a:4d:ae:ae:
                    1d:91:c0:23:43:05:99:df:eb:cf:fd:c9:87:79:dc:
                    26:39:86:38:79:8b:89:05:52:57:1f:89:0b:29:de:
                    1c:20:40:6f:3b:e8:e0:a2:42:5d:fe:0f:0b:03:fa:
                    0c:df:14:59:1c:48:12:d8:b5:9c:7e:d2:d9:5e:37:
                    d2:f3:b1:a7:0e:08:30:bb:5f:35:07:58:71:59:93:
                    6d:a3:7e:59:3d:36:df:ec:0e:fa:c9:a1:75:85:41:
                    eb:f8:55:98:a8:fa:8e:2f:24:2f:a7:38:74:a8:45:
                    32:9f:65:5d:23:79:47:56:f8:b2:6e:94:95:f7:01:
                    e0:71:14:1a:96:8e:02:d0:f6:aa:d4:aa:d4:33:1f:
                    06:57:24:64:b5:a6:9d:64:bc:54:38:a1:c8:fe:e5:
                    0a:1b:cb:74:b6:d1:41:0f:53:16:00:66:0b:48:c4:
                    ea:05:73:da:5c:bc:87:65:08:a0:29:e7:b9:b9:2e:
                    0c:48:58:a4:02:e2:60:72:5a:62:f4:90:d5:55:b4:
                    a6:35:1b:ba:0b:88:28:85:bf:0c:79:c2:db:b3:54:
                    a4:83:34:bc:39:b9:c1:7e:aa:33:29:96:35:f4:d7:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:04:66:B2:EB:FE:3E:A9:FB:84:33:73:74:70:9A:7C:0D:41:1D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c148998d-c073-38c1-a2ae-00295a839c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8039::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:09:ea:39:82:4b:93:25:b0:26:05:bb:38:c7:25:2f:7f:50:
         16:88:ab:48:cf:cc:05:20:8c:61:91:d6:0b:c8:5f:b3:52:2f:
         1a:b6:cb:12:b1:3b:c6:4f:af:bf:a1:c1:a7:d7:9b:9b:4d:4c:
         2f:bd:bd:2e:eb:2e:d1:79:7d:6c:c4:9e:6e:3c:a5:23:fe:5f:
         7c:a0:6f:28:06:53:27:0c:79:c0:8f:1d:94:2b:91:dc:95:7e:
         5c:cd:91:bb:5b:c1:8b:d5:6d:3f:44:7b:96:28:d2:c4:88:17:
         88:81:03:45:57:db:d5:88:98:60:5a:60:f6:f5:c0:57:ea:95:
         eb:e8:d3:2f:85:ed:f0:fc:83:f1:f4:df:8e:cc:35:7f:ef:d2:
         cd:84:ee:34:8a:84:79:49:1f:b0:f4:48:e7:62:b9:9e:93:e7:
         10:40:5d:7d:01:54:46:1b:64:25:9c:d5:56:b6:f3:c6:67:01:
         b8:1f:dd:1e:9d:a1:38:dd:19:0f:1d:f1:b1:d6:02:cb:82:76:
         97:13:b6:71:62:5d:83:fa:df:d3:08:13:52:fe:a2:93:bc:3c:
         94:07:d4:5a:b5:97:6d:4d:9b:f5:ce:93:3e:aa:5a:49:7d:7a:
         eb:41:56:a8:a2:c7:3a:cd:df:71:ae:c8:a6:46:c3:c0:20:c2:
         ad:f1:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:17 2024 by rpki-client on console-fra.rpki-client.org