Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9c82bf1-0611-38d2-8762-f94da2166910.roa
File:                     c9c82bf1-0611-38d2-8762-f94da2166910.roa (raw, json)
Hash identifier:          xPJHUecNw/q/tzSvmxn1cmGe0Z0+iuIOPWXlnNymAbc=
Subject key identifier:   29:8F:70:41:7B:E3:CC:1A:7C:6A:67:BB:50:68:21:73:13:61:73:E5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967DAE58E1A1777245B14000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9c82bf1-0611-38d2-8762-f94da2166910.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:84d0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:ae:58:e1:a1:77:72:45:b1:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=ac6fdecb-e389-4efa-86d4-68940a59ce8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:31:4e:84:04:de:e2:fb:fd:e3:cc:ea:ec:
                    7d:73:cd:49:3c:5b:e6:8b:41:98:30:ae:2e:92:67:
                    64:03:e1:77:65:2a:40:05:90:65:ee:15:5e:62:76:
                    83:66:72:d9:24:7f:a5:3c:8c:93:c1:2e:2e:69:6a:
                    38:41:42:7c:85:92:b7:76:68:47:12:90:73:42:18:
                    c8:13:ec:f1:df:8c:6f:c2:95:8f:57:a9:9a:66:b0:
                    f3:ae:3d:60:38:47:05:09:fa:e8:82:6c:e3:99:82:
                    e5:cd:1b:7f:d5:e4:39:4d:1b:9a:76:ac:b8:2e:c6:
                    80:bf:29:4c:ea:32:56:00:4e:a6:b5:35:61:2e:0d:
                    6d:2c:62:31:db:80:98:20:84:05:3d:03:5c:85:a0:
                    17:3d:31:47:48:3c:c7:01:cf:75:4a:1b:fb:1d:6d:
                    00:9a:39:4d:d7:a2:8a:9c:32:e1:d0:ea:44:e5:a1:
                    3f:1c:5f:fe:53:00:13:f5:5c:c0:95:ee:a9:b7:02:
                    c2:ff:92:4b:01:62:cd:7e:f6:f0:f8:cf:14:fc:4b:
                    5b:ff:45:35:60:c5:ef:35:4f:85:c4:90:75:0d:da:
                    94:23:46:2e:9e:5e:80:ce:1d:6b:24:bd:6f:ad:ec:
                    ad:3d:2f:59:4f:64:2f:81:cf:37:4b:26:e3:bf:70:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8F:70:41:7B:E3:CC:1A:7C:6A:67:BB:50:68:21:73:13:61:73:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9c82bf1-0611-38d2-8762-f94da2166910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:9f:10:54:fc:6f:8c:9b:3f:bc:53:45:c4:f1:b0:cb:44:
         3b:b8:10:67:5f:b0:8a:5f:60:88:1a:20:7e:8e:c3:73:aa:0b:
         7b:42:cb:7a:ad:f5:2e:7b:ca:60:cf:22:e5:0b:63:9e:99:e0:
         14:dc:90:f2:4c:1a:31:b0:a9:25:a3:73:b8:86:10:3a:a5:ef:
         cd:4e:5a:d9:8c:23:ac:7b:75:cf:6b:20:b2:54:7a:8f:45:20:
         41:7c:8d:d4:24:ea:30:6b:a4:7e:14:f7:40:6e:79:2e:ba:35:
         7f:b6:65:24:41:9a:2b:c2:0c:66:18:b6:02:56:93:fc:f1:4a:
         34:74:b0:a2:76:57:0e:7f:1b:49:06:de:3d:4f:58:f5:0a:07:
         a6:71:50:6e:c5:76:36:25:6c:3d:6f:c3:21:51:23:37:5e:0a:
         de:bf:3f:3e:23:c9:36:a6:9b:49:53:06:dd:77:92:96:4c:3e:
         63:cb:aa:54:67:ac:09:5d:dd:34:97:4d:c9:f8:56:85:8f:21:
         f3:cb:16:38:87:4c:34:9f:55:3e:37:ec:45:cd:ec:08:33:c7:
         a2:dc:4a:ca:5a:55:e8:88:5a:2f:d2:7a:80:38:b8:52:31:2b:
         bb:02:b3:4a:84:93:c6:a2:19:46:bf:2b:a3:42:7d:63:b7:54:
         6e:71:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org