Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f45347-ec44-3392-937c-b20e662d31d4.roa
File:                     d9f45347-ec44-3392-937c-b20e662d31d4.roa (raw, json)
Hash identifier:          NPBUvwER9qWZtOQt05TBEKI+K/Hof9PJzZFihr1ojFg=
Subject key identifier:   85:B3:0D:83:98:5F:4B:46:E9:8A:6A:41:64:2C:EA:00:B1:A3:7F:8B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC31808FC6EADA9C38BCD30
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f45347-ec44-3392-937c-b20e662d31d4.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8b40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:18:08:fc:6e:ad:a9:c3:8b:cd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=4b882b93-9440-4f66-9452-4d020db8c641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:fa:38:89:73:76:32:ea:59:c8:71:ae:3a:
                    b7:70:c0:9d:e4:af:05:d3:df:5c:5d:1e:ab:2e:c9:
                    fd:34:ce:13:af:c0:50:32:d4:44:25:42:d4:41:ea:
                    78:45:7c:98:77:94:7f:47:e8:06:44:09:c8:f5:10:
                    9c:da:5a:e9:f5:18:32:23:17:75:83:30:10:61:e4:
                    b2:d2:fc:2d:05:d0:30:75:f5:f6:96:2c:1d:0a:80:
                    68:cf:c1:20:66:49:34:85:bd:9f:55:a5:f2:d2:50:
                    23:9f:b5:45:61:0f:b4:a4:24:ef:30:8c:6b:65:58:
                    50:43:2e:69:5e:e2:4a:28:74:f7:89:ef:4b:68:74:
                    81:c8:4e:2d:26:2b:19:12:ab:79:4f:85:dc:ac:bb:
                    ce:56:b0:86:d2:aa:13:d1:e1:3f:49:fb:d2:12:b0:
                    f1:3f:af:84:d3:6f:14:45:fa:b5:6b:86:73:fa:0e:
                    5a:b2:73:0e:68:2d:00:6e:b0:21:96:f1:22:0b:94:
                    1b:36:40:7b:86:2c:e6:ff:59:45:f1:25:28:0e:7a:
                    9b:94:a4:a1:f6:34:cb:ba:a9:75:ab:23:35:68:ef:
                    e5:d9:3d:d8:64:fc:3f:5b:f8:c8:e1:f6:fc:3c:c7:
                    98:75:d7:ee:54:ff:7d:4c:82:5f:30:10:e3:56:a9:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B3:0D:83:98:5F:4B:46:E9:8A:6A:41:64:2C:EA:00:B1:A3:7F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f45347-ec44-3392-937c-b20e662d31d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:c2:ef:4a:46:11:02:4b:1a:56:12:9e:b1:6c:69:54:4c:
         04:c9:20:a9:99:fd:1c:39:37:da:d2:24:fe:8e:4f:53:62:f0:
         24:b0:87:ac:2f:14:18:5d:30:43:ea:4b:ef:2c:c7:b5:f2:1c:
         44:f6:c3:2c:25:00:a6:e3:b7:b3:cd:ab:18:dd:10:6e:91:1b:
         3b:6b:64:2b:f6:0a:a5:2a:b0:aa:06:a9:01:d4:47:e4:54:ce:
         4d:42:a2:fe:40:6d:a7:97:52:08:09:75:1f:5c:59:2b:5e:ba:
         d6:51:a4:b9:a1:65:24:85:e5:aa:e5:ec:98:74:5e:86:68:c0:
         c4:67:00:fa:9a:1d:e9:27:01:44:3c:33:ed:39:ec:27:26:a1:
         5d:d9:52:90:3a:75:e5:be:e9:40:39:6b:aa:f9:88:85:6b:c9:
         45:5f:c9:ff:ac:4b:a0:0b:c5:73:86:5e:e2:bc:5f:b4:65:9d:
         5d:ef:53:83:cb:c0:6f:64:e2:36:32:a8:04:a1:10:38:ee:c1:
         2f:fd:a2:50:58:4d:d0:f7:ef:a2:a7:aa:68:aa:2c:34:2f:53:
         56:b3:45:60:6f:da:2e:2d:0c:19:9f:e8:a8:82:80:7e:13:74:
         2a:3a:4c:49:9e:83:41:2b:20:7e:ad:e3:a0:ee:35:7a:bc:86:
         38:c2:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:08 2024 by rpki-client on console-fra.rpki-client.org