Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cc1bd83e-b3a4-3c75-ae18-4678093cbb55.roa
File:                     cc1bd83e-b3a4-3c75-ae18-4678093cbb55.roa (raw, json)
Hash identifier:          4/r6PAUION3aqqeK9odbOXtvAtKZ9oEyiRW2Cn09P9M=
Subject key identifier:   38:5E:AF:29:F7:E9:69:AE:C3:B0:25:DF:28:DB:6F:33:77:9B:49:CE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D3E107FFE75667D382640
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cc1bd83e-b3a4-3c75-ae18-4678093cbb55.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8142::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:3e:10:7f:fe:75:66:7d:38:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=9b4a65b6-b252-4f20-b88b-731a3cbb88fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:4d:54:f9:5f:77:87:73:c7:32:6e:df:44:
                    57:6a:96:ab:8b:74:ab:04:6a:2d:25:c2:48:19:85:
                    04:d2:d0:29:17:0a:31:bf:d3:38:08:89:96:d2:4c:
                    b2:cf:2e:82:6b:f0:f7:3d:6d:6d:48:09:0a:62:39:
                    ce:01:e1:cb:cc:91:7b:2c:fa:e0:23:20:36:83:ff:
                    30:c9:86:ec:e8:3a:ef:a5:79:87:16:94:7a:5c:d2:
                    87:23:ec:22:74:08:74:15:05:c6:56:19:16:0a:3d:
                    39:dc:04:ac:db:98:9b:da:9f:c4:f1:85:e9:7b:38:
                    1f:bc:7c:2d:e0:10:f5:5c:95:0a:f8:72:37:ba:62:
                    e2:4e:21:6b:b8:1f:88:f5:e0:8e:75:43:2f:46:30:
                    19:8e:5e:ab:72:10:37:08:1e:95:0a:9c:74:87:20:
                    08:35:87:a0:dc:64:e9:30:54:da:49:54:2c:66:07:
                    c6:2c:b2:ee:ea:5b:1c:c4:fc:35:07:e6:cb:e0:57:
                    88:43:b6:08:ac:68:29:4f:37:93:67:cc:37:a7:ff:
                    d3:33:b1:3c:b8:c4:74:f1:72:13:50:d4:ea:56:2e:
                    e9:7c:b5:52:27:86:e0:e1:c4:1c:e0:30:71:ce:03:
                    8a:1c:8e:04:01:9e:6f:ee:c5:34:de:b6:70:90:c1:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5E:AF:29:F7:E9:69:AE:C3:B0:25:DF:28:DB:6F:33:77:9B:49:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cc1bd83e-b3a4-3c75-ae18-4678093cbb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:26:f7:8f:75:e2:14:c2:2d:7b:db:40:43:32:48:eb:4e:08:
         1f:48:78:7e:7b:e4:7f:05:d9:5b:ad:69:8b:b0:59:14:49:1b:
         b1:bc:5b:ba:02:ed:5e:da:e8:5d:09:91:ca:56:36:d7:6a:25:
         8d:2f:9e:1d:17:60:b2:43:76:f9:d3:0f:17:63:58:18:7b:e9:
         c8:ea:5d:67:92:87:c3:ed:d9:65:31:0c:cb:36:81:e2:39:bf:
         95:d1:b0:d4:4a:42:df:5f:ee:61:56:2b:77:9d:b3:93:9c:99:
         c1:2a:1b:21:ef:24:6d:4e:b5:ee:f8:f2:97:d7:bc:ba:b2:86:
         73:4d:39:ae:d0:9f:c7:a4:1b:c0:5b:1d:d8:f7:50:06:23:63:
         5a:4c:9c:d7:11:1a:65:72:c6:59:8b:22:b9:98:21:3b:cb:6e:
         be:8d:9a:0c:d3:fd:29:cf:e4:b5:1d:78:f7:6d:1b:3e:dd:69:
         f0:77:37:28:b9:d7:7c:ac:f0:ae:db:f1:89:f3:c8:c1:da:a9:
         59:58:da:30:1c:dd:c6:81:a1:cb:94:48:09:19:be:ea:c7:eb:
         a8:c2:9b:a5:60:2b:53:e1:2c:87:54:47:61:bc:51:f1:72:84:
         fb:86:6a:13:6a:3d:9f:df:a6:56:7e:3f:86:95:2f:d1:f5:d1:
         9a:59:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org