Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9442762-2355-390a-8e22-d93b7628e1f3.roa
File:                     c9442762-2355-390a-8e22-d93b7628e1f3.roa (raw, json)
Hash identifier:          qKBjj0cRPVD6b+Ei+VDCno4TTmLIGN16pm9mbOiBAOY=
Subject key identifier:   76:3D:97:0E:4D:CB:94:78:A1:14:A7:4C:24:2D:DB:40:C2:32:2D:08
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FE88FE3A33A9E8817300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9442762-2355-390a-8e22-d93b7628e1f3.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2603:9006::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fe:88:fe:3a:33:a9:e8:81:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=de2f8256-05ad-4db5-bee6-17a295b18f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:8e:c6:5d:58:b4:d1:4f:76:6e:0f:88:97:
                    fd:53:46:a9:99:92:1a:4a:97:68:cb:00:26:a6:0c:
                    8a:0a:d1:56:9c:c8:47:42:c7:25:a5:6d:17:53:99:
                    03:a1:55:8d:b5:bd:dc:52:98:5d:d8:c1:58:6c:5c:
                    55:9f:e2:6b:4a:91:77:23:ac:c3:d8:fa:bb:a4:a7:
                    d8:b5:e3:f3:d9:15:25:cb:3b:a0:b5:08:cb:d5:b0:
                    b1:aa:6c:37:cd:48:24:a9:b2:e6:58:1a:b8:11:fd:
                    b1:ea:8f:ef:84:10:16:2d:f5:2b:c8:b8:ab:1f:45:
                    11:5c:15:cc:4f:d6:52:61:57:18:a2:63:cc:3d:3c:
                    c1:a7:22:7b:9e:a1:18:be:80:fc:8d:3e:16:04:a8:
                    6c:71:e0:cc:61:7e:e2:e1:fe:04:88:16:dd:25:aa:
                    11:59:72:d4:7e:d7:67:42:fe:bd:40:34:c9:b1:1e:
                    8d:be:ae:c9:04:4a:2e:ab:25:69:f8:da:db:46:59:
                    81:6c:d5:19:c6:66:2c:0d:b1:fc:75:40:b6:50:29:
                    36:03:5f:c9:4c:f3:19:43:4f:c0:f5:a7:3b:17:9f:
                    1f:1b:1e:28:f7:5c:b5:3c:1a:55:93:a7:76:e3:b0:
                    5a:77:11:fa:ca:8f:64:ad:c9:40:de:4b:36:3b:b2:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3D:97:0E:4D:CB:94:78:A1:14:A7:4C:24:2D:DB:40:C2:32:2D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9442762-2355-390a-8e22-d93b7628e1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9006::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:62:65:5d:b4:b8:1e:05:02:70:d0:30:00:6a:27:4f:ec:
         67:bc:d2:66:da:b1:b6:d0:fd:5e:71:d3:2f:cc:8b:bf:0f:41:
         d9:ec:6e:0a:0b:c9:67:df:b9:da:7c:3a:d6:fb:5c:71:7b:3b:
         4a:0d:3a:ff:b1:9b:cd:36:e6:41:f3:7d:3f:64:d9:dc:6b:c2:
         cc:4f:79:58:28:d5:f3:45:ef:3c:3c:de:7e:92:ab:dd:aa:b5:
         39:49:a7:b4:9a:a0:8f:13:e5:17:d0:7b:6a:72:8c:51:fd:3c:
         d9:fc:fe:ff:aa:1c:50:28:84:aa:6c:5a:37:4b:e3:3b:c4:a0:
         60:e9:54:97:cd:98:96:c2:50:a1:69:11:d6:2f:63:d7:95:5f:
         d5:6d:c2:ab:56:db:57:88:5c:dc:9c:fc:57:22:bd:53:46:eb:
         d5:59:6d:9d:7b:3c:1b:28:ea:f3:ed:16:3a:f7:33:46:d4:24:
         28:53:d1:5b:ef:c5:fe:89:5a:e1:e1:5b:34:82:9b:68:6b:0c:
         ca:6c:9b:13:dc:34:f6:de:1a:82:4b:eb:3b:93:76:c9:50:4e:
         3d:b1:76:2b:3b:cc:3b:1f:69:29:ba:50:5b:e3:3c:76:e0:a8:
         89:1e:13:dc:55:b3:f3:60:56:cc:24:03:19:9d:3a:33:0d:3a:
         c9:46:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org