Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c847f86a-13e4-30f1-9ff5-f8ae73991e9a.roa
File:                     c847f86a-13e4-30f1-9ff5-f8ae73991e9a.roa (raw, json)
Hash identifier:          1fKLlwez+i2u97mAqQT2ZYNG6EHqDBfhV1z7aWmEiUE=
Subject key identifier:   DD:85:FB:7E:4C:18:B3:50:E2:19:D3:CB:39:00:A8:02:14:99:DC:6F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967CDBF4F45FBFDE0EF6B6E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c847f86a-13e4-30f1-9ff5-f8ae73991e9a.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8098::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7c:db:f4:f4:5f:bf:de:0e:f6:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=ff5974f4-e5ed-49fc-85b6-3ba9890ec475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:9e:b0:64:8d:3f:76:92:a2:d7:00:c5:d2:
                    f7:c8:03:03:b8:cd:3b:6e:5c:43:b5:f4:82:78:6d:
                    c7:a3:b5:96:7b:d4:25:29:fd:bf:b2:9f:91:89:6c:
                    ae:34:e9:64:bd:b4:e4:aa:33:c7:3d:bf:1f:6f:81:
                    3f:de:c1:dc:7e:87:f2:7f:c4:2a:51:45:86:42:cc:
                    59:46:1b:a1:9b:66:44:d0:e3:72:56:4d:45:34:18:
                    a1:bc:0a:c2:f2:6f:60:b1:ef:88:c1:f3:5d:20:2a:
                    fd:31:4a:44:da:e6:ab:13:c0:fb:31:fb:8c:ca:3d:
                    fd:54:78:a2:c3:40:0d:33:fc:5a:96:41:16:65:52:
                    63:81:a2:27:b6:d6:ed:42:f2:26:e8:9c:6f:38:ca:
                    3c:aa:e2:6b:b3:d5:15:fe:c6:9f:20:99:91:14:1c:
                    99:e7:76:e4:a6:53:c7:6d:cf:fa:9d:7b:db:5c:a4:
                    72:36:90:3f:3f:c0:b0:6f:01:58:29:9b:fc:04:42:
                    98:97:3f:ce:3f:f3:7a:93:ac:de:c8:de:ad:a1:a3:
                    51:e6:d6:0a:ff:2f:62:d0:24:d1:13:48:26:fd:2b:
                    7c:c4:00:a4:3f:fc:92:b7:81:92:13:73:af:4f:48:
                    3d:82:42:44:1f:b2:dc:2b:f1:4c:c8:6c:05:91:ae:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:85:FB:7E:4C:18:B3:50:E2:19:D3:CB:39:00:A8:02:14:99:DC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c847f86a-13e4-30f1-9ff5-f8ae73991e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8098::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:15:01:14:de:02:65:bc:55:45:a0:1b:f8:e4:1e:a9:c0:
         9d:d9:f8:5f:ac:5d:ff:2a:ef:57:c1:62:30:2b:fe:2d:e7:a8:
         d3:0c:9c:ab:bc:58:31:20:cf:21:6d:b5:b0:72:7c:63:0b:7d:
         c7:50:64:0a:29:58:21:53:c8:b3:19:21:81:fc:ce:84:c2:ba:
         b7:09:af:92:53:93:0d:27:3a:28:a9:a4:55:cf:a5:42:fa:f6:
         43:82:39:d9:e3:9c:7b:00:81:cf:d9:3b:b8:c2:2a:b8:62:ac:
         c3:82:1e:90:54:6a:95:75:de:d3:4e:a1:23:3b:a6:b4:a6:c5:
         d8:ec:c4:45:32:0e:8e:de:6a:c2:ad:ad:b8:e1:f2:09:43:68:
         9f:d4:b8:a0:8a:a0:e1:7d:da:fc:59:3c:a2:85:e9:a4:5a:28:
         7c:25:fa:b8:ae:3a:83:b0:27:91:df:79:db:d7:8d:a8:40:c2:
         01:6a:9b:f6:bb:0c:3f:e1:4c:1c:88:d4:83:d8:0b:0c:71:08:
         6f:1d:d7:d2:e2:7c:a4:6a:1b:d5:db:d4:61:c3:9d:3d:f2:8d:
         c2:a9:23:ea:89:79:f2:5b:f0:76:6d:8f:b2:f3:a7:52:5a:2a:
         40:89:67:60:f4:26:d0:4a:50:cc:54:7e:58:20:ea:5c:cc:1e:
         2c:f1:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org