Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa
File:                     cd8e1536-a1c6-3907-b666-b828f100c6cb.roa (raw, json)
Hash identifier:          N3HHH47r6Be2Xr6nUcCX9YFwHbEIgfv4HFUnF6xwAHE=
Subject key identifier:   02:A5:CB:C3:F6:6B:ED:BF:0D:0F:55:CC:9D:81:5C:12:B7:A6:49:4F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EDB3DA817BCE511E7580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:810e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ed:b3:da:81:7b:ce:51:1e:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=1b464566-5a1e-43e8-b56e-53da77f60ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:d2:1f:d4:54:06:50:90:8b:de:29:5a:1c:
                    fe:3d:dd:de:47:f9:41:e0:8a:5b:0f:d0:f4:65:ca:
                    bf:b3:cd:69:9b:af:b5:b8:68:1d:85:50:4a:36:27:
                    9d:5c:e0:43:aa:f7:95:a1:ec:b2:48:5a:2e:91:1c:
                    95:01:53:27:0b:d9:49:81:7b:de:d7:68:6e:ad:a3:
                    aa:f5:73:c2:7f:ae:5a:5c:08:c0:df:9e:20:44:40:
                    d6:a2:55:0b:53:51:f8:f1:d6:84:eb:3a:e9:9c:da:
                    e3:69:77:15:4d:0f:7b:e5:c6:bf:cf:92:76:68:39:
                    de:b7:a3:7a:04:fa:a0:bf:dd:20:c7:81:ae:fd:8f:
                    a2:81:3d:fd:19:cf:fb:c8:2f:af:b6:58:1c:0c:81:
                    2f:43:2e:3f:2f:f2:df:ba:1a:aa:ea:35:28:e7:41:
                    d5:11:3e:4c:e5:9a:c0:9e:2a:f3:55:b0:1d:db:8f:
                    d2:f0:1e:3c:7f:c8:29:53:cb:c0:33:2a:38:7c:17:
                    83:a3:70:d7:19:1f:f4:79:e3:18:1d:50:75:c1:1c:
                    ba:3e:0e:1f:ce:48:f8:14:4a:b0:33:f8:f9:df:77:
                    2d:00:48:18:49:00:e9:62:f2:71:bf:25:55:ac:1d:
                    cb:3b:f2:e2:77:17:3e:fb:74:9a:e3:3c:8f:88:f3:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A5:CB:C3:F6:6B:ED:BF:0D:0F:55:CC:9D:81:5C:12:B7:A6:49:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd8e1536-a1c6-3907-b666-b828f100c6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:810e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:65:eb:26:19:59:dd:e5:70:a2:db:ae:ad:ac:fb:eb:52:
         1b:ed:11:f1:43:62:d8:1d:27:b4:df:e8:fd:7f:44:27:6e:e1:
         71:20:bc:7a:d5:3c:ec:46:77:b1:98:9d:bb:3d:dd:8c:34:05:
         45:e2:d5:f2:8c:d5:32:2a:ee:88:0e:df:16:73:6e:36:ee:34:
         74:b9:1e:1c:15:89:e0:c7:61:b3:c1:6d:f8:23:e2:62:97:2b:
         9f:58:32:93:b8:1e:83:6f:ba:8e:23:16:d8:97:14:78:cf:1a:
         52:33:98:7c:17:ff:d3:63:0b:2a:9a:0d:e7:73:b3:b3:0f:b1:
         e7:06:38:37:88:05:e0:c4:f2:85:74:1e:39:64:d9:16:06:3b:
         cb:9c:fa:91:16:0e:ad:82:53:34:c4:f6:71:5f:70:a9:ee:22:
         eb:9b:a9:a1:fd:5f:bb:46:61:a0:c7:28:64:27:05:ae:d7:0f:
         20:e9:ad:c0:54:f6:43:34:d5:3e:e4:54:15:2d:50:2e:88:99:
         d4:f8:c1:8a:02:08:eb:6d:f9:d7:43:dc:2a:77:8c:55:1c:b2:
         9b:0a:e4:48:49:14:f2:f9:1e:c3:97:66:ec:0f:f4:94:bc:fd:
         4d:53:17:77:2f:98:ed:ea:fd:86:1e:c8:ad:a2:9d:34:2e:99:
         b9:46:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org