Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa
File:                     cd8e1536-a1c6-3907-b666-b828f100c6cb.roa (raw, json)
Hash identifier:          ZGseFUNWLkFBsPUjy+Jun3KAIuePQJ2J2qMwqAwzDPc=
Subject key identifier:   A5:A0:64:88:10:43:4E:21:48:64:CD:49:8E:71:AA:51:FD:5E:E8:4F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EAE6124E38B287BDA628
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:810e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ea:e6:12:4e:38:b2:87:bd:a6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=b3178c58-d6de-497b-ae22-087086533a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:61:29:f8:a1:1b:52:61:d9:6e:15:6c:fe:
                    d4:01:6a:14:87:10:4c:df:51:9e:37:b8:49:68:c3:
                    19:23:d2:ff:2f:1b:24:cf:b4:dd:3f:fa:0d:22:4e:
                    82:fd:eb:af:04:6b:fe:da:4b:0b:92:ca:b0:c6:3e:
                    e9:68:e3:40:19:6c:f9:9a:d1:eb:cb:6d:d8:83:9f:
                    b4:cb:ef:f3:ae:5d:27:16:f1:42:2a:61:5d:3b:64:
                    90:89:94:43:9e:e7:be:6e:76:6e:d4:54:64:3d:32:
                    1d:f0:be:dd:af:68:36:c1:da:be:c2:4c:16:7b:9d:
                    88:10:e4:59:1e:d2:a3:2c:a2:e3:21:cc:76:30:a9:
                    db:af:21:4c:06:ba:00:f8:6b:7f:33:3d:e5:37:27:
                    29:d9:e5:97:fc:d8:da:92:01:1e:43:0c:5e:5e:8a:
                    8a:60:35:08:41:17:f8:16:d2:72:32:59:62:64:04:
                    40:7e:ae:92:c1:7c:24:69:c6:a9:23:65:a0:d7:ef:
                    30:cf:d8:fc:7a:42:d9:02:a8:de:c2:34:d1:ce:b2:
                    2e:56:68:05:3b:1b:a5:76:0c:3e:8e:45:89:c5:75:
                    4c:ac:ea:aa:a6:42:9d:0f:85:25:ba:dd:f3:48:5e:
                    c1:b7:c5:7d:b8:8e:0c:73:dd:50:33:0b:9d:e4:62:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A0:64:88:10:43:4E:21:48:64:CD:49:8E:71:AA:51:FD:5E:E8:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:810e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:d9:32:f5:65:c4:f4:38:f3:a1:f1:2e:cc:17:43:75:b4:
         18:b5:97:1f:03:63:b0:37:cc:fb:16:7c:da:e0:8d:5b:6d:93:
         d5:dc:fe:36:05:01:a1:11:aa:5f:08:45:a9:04:cd:6e:3a:cf:
         a8:b5:5c:72:5e:0f:f4:26:76:41:8c:93:f4:08:14:94:61:44:
         cd:8b:9f:30:12:2a:04:4e:f1:46:f2:3d:9b:b8:d8:48:e3:16:
         38:a3:58:a1:78:eb:0e:9c:15:63:54:06:16:3f:1f:72:84:ee:
         5a:80:52:b1:5d:a6:a9:84:7d:40:ae:71:a4:64:62:c5:55:15:
         68:8d:c8:ad:6f:23:86:5b:d7:86:26:00:d6:3f:cb:d5:11:90:
         3b:2c:ff:a1:23:08:a7:1d:a0:a4:0a:95:a8:7a:4d:08:7c:74:
         c5:f5:f6:37:94:17:4f:47:29:c3:03:f5:7d:ad:96:22:f8:37:
         8d:ca:da:48:70:66:c0:ed:8c:c6:76:ab:72:a9:28:29:59:58:
         5a:bd:6d:db:f2:37:06:44:e8:07:0b:3e:d4:34:a5:d7:77:67:
         f7:b8:9e:28:51:8e:cd:7f:3f:90:b1:6b:f1:b8:69:ff:68:a3:
         f9:02:5a:17:4b:0d:ed:85:bd:6e:0c:ef:a7:c9:10:7c:e0:ce:
         0e:cf:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org