Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
File:                     d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa (raw, json)
Hash identifier:          82A5WBVRYXE8KHo9aR2Q+Rfsx6h6R/HSkxE2j5c5DY8=
Subject key identifier:   3F:0A:91:6A:38:D9:D0:8F:7E:20:6D:28:31:0E:C6:D8:69:3D:66:BC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858473360A498983256563B7CBA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a40c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a4:98:98:32:56:56:3b:7c:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=6790bf52-60b9-477e-889f-7f3d2599cc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:86:3e:5d:8a:98:6d:cf:0f:c3:37:6c:6f:
                    a8:96:be:a1:e8:33:28:4b:4d:1c:a4:ec:2f:26:f6:
                    50:af:a4:ae:68:8a:6d:b8:d7:d3:f7:a4:e8:c5:9b:
                    e8:aa:12:3d:fc:c8:c1:28:d6:fa:13:26:23:8f:8b:
                    b3:9f:7c:01:98:14:75:25:4a:b2:0b:a8:11:99:cf:
                    f4:4a:75:34:08:a6:f4:cb:2f:ee:2e:58:2e:df:63:
                    8a:46:25:53:c4:56:12:11:07:8b:e5:83:ce:cd:f9:
                    db:25:3e:78:c0:ba:e8:80:17:e3:2f:30:01:37:66:
                    85:36:18:8f:e5:a6:ac:61:af:11:dc:52:09:d9:9c:
                    28:6a:a5:2c:9f:d8:80:98:09:25:c7:ec:d2:87:6a:
                    fa:98:61:8c:99:a5:7e:8d:9d:f5:ad:48:6a:54:40:
                    c1:00:b0:52:a7:09:0e:fe:e8:6f:4b:ce:e8:59:ee:
                    45:84:7f:d2:83:3e:72:0d:13:9a:48:7a:f6:6e:f3:
                    14:f5:61:b8:1f:05:21:14:f8:37:db:57:6b:3a:e2:
                    ca:9c:7e:f9:82:a1:7b:64:3c:5e:b1:61:50:d8:51:
                    86:bd:4e:e3:95:f2:72:3b:49:4b:78:f3:95:ba:dc:
                    86:ca:0a:3f:e9:83:4f:14:91:24:9d:4d:91:0a:bb:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0A:91:6A:38:D9:D0:8F:7E:20:6D:28:31:0E:C6:D8:69:3D:66:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3ceedb7-9aff-343f-9b84-cfb141f266f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:f4:b6:99:a1:9c:22:e6:d4:43:a3:41:7e:1c:77:7e:85:
         d1:50:72:54:e2:96:c9:31:fc:f6:6c:54:69:08:6b:5b:5a:24:
         d7:6c:67:f0:25:7b:a3:e8:3c:cb:a6:e7:2d:7a:39:d5:8e:53:
         a8:03:69:cc:3f:32:5b:d9:6c:2a:35:1f:39:59:ea:59:ce:60:
         ed:46:03:52:47:f2:14:c3:a1:45:e7:d3:e9:63:66:87:1d:e7:
         8c:0d:50:a2:ea:d3:f8:c7:0a:c8:7c:90:e6:b3:8a:0d:17:74:
         bf:07:d2:01:4d:c1:5b:3f:c3:ce:b1:a4:54:09:f0:54:96:5e:
         7d:7d:eb:d5:5c:54:e9:d5:e4:aa:23:d5:4c:05:95:12:b2:4e:
         79:d3:be:32:e3:70:7b:9d:37:4c:98:62:66:db:db:0e:78:71:
         aa:d8:7c:df:e5:4c:7c:67:51:c3:87:ff:7d:5b:a6:47:9d:4e:
         96:2b:2c:9a:10:70:7c:66:ed:e7:26:49:18:91:4e:1e:f3:4e:
         2c:74:bd:1d:14:cc:0e:24:e8:03:0c:fa:8a:ef:9f:a5:91:0e:
         18:5c:09:e1:86:a9:e5:ac:c7:6e:6f:60:b2:8e:aa:cd:db:f2:
         f5:c1:b3:ec:ec:02:be:72:c2:ec:49:8b:a7:81:81:85:11:cc:
         c4:88:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org