Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa
File:                     db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa (raw, json)
Hash identifier:          MzBBUYvwlAn6OkuqMnFdoL/B5hFT3lNt/UdDCZKjyIs=
Subject key identifier:   73:F5:D6:C7:D2:62:E6:84:8F:F2:C5:E8:9C:34:09:BD:31:F5:70:47
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD607204D084076580C3F40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:840e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:07:20:4d:08:40:76:58:0c:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=980cd027-4a19-4c05-a01f-0aa25bae0647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:f6:98:25:64:71:1b:55:ba:41:fd:77:c8:
                    e5:2e:e5:5d:03:cf:57:4b:fc:85:95:da:6f:0c:f3:
                    48:ac:04:c3:da:96:72:e5:1f:36:33:53:58:99:06:
                    21:16:14:78:5b:41:fc:1a:3e:8c:bc:7f:71:4a:56:
                    be:dd:1e:4d:8a:33:13:43:b8:6c:29:56:a9:1f:bd:
                    9f:5e:8f:59:1c:36:53:80:59:a5:28:53:b0:29:35:
                    b5:df:6e:40:d5:1f:a0:c2:95:e2:65:9e:72:be:c9:
                    b5:36:b3:0d:d0:8f:3a:84:64:94:d8:00:74:03:7b:
                    74:91:f8:c8:77:59:8c:24:51:07:71:ba:eb:c8:c8:
                    cc:e0:83:3e:87:20:2a:06:44:9d:16:a9:cf:fd:70:
                    8b:e3:67:99:a4:34:d5:9c:90:0c:81:c6:55:33:59:
                    31:77:19:ed:2d:0a:12:f3:60:fe:74:1a:69:d2:64:
                    34:c1:82:ac:8a:94:71:6b:c0:79:be:ed:95:1c:3c:
                    84:01:10:e9:d8:9b:fa:4d:a2:e4:57:1b:71:d1:9b:
                    3d:5d:a8:ba:1c:f7:37:80:68:7d:4c:71:80:e2:7a:
                    1d:4e:8a:d9:e8:db:8a:49:df:56:a5:98:4c:07:78:
                    53:e2:df:b7:43:19:50:67:ac:13:fe:a6:ad:1c:94:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:D6:C7:D2:62:E6:84:8F:F2:C5:E8:9C:34:09:BD:31:F5:70:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:840e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:69:66:c5:20:42:b7:bd:17:ac:cc:e3:2d:56:30:61:15:
         0b:f8:36:cc:a7:7a:da:85:c0:35:e8:db:fb:32:bf:49:91:ba:
         1a:7d:d2:92:3f:b3:58:53:99:0c:ac:62:bb:fb:4f:f9:3e:c2:
         41:e7:f8:d0:2c:d2:72:55:ce:f6:c8:bf:8e:0d:68:d2:a7:0a:
         4d:99:5c:d4:f7:50:6f:ad:a9:57:fd:ef:29:d6:a5:2e:c6:57:
         b6:8a:5a:0f:1b:e5:bc:a9:3e:31:d6:8a:9f:fd:c6:78:51:27:
         d7:d2:14:d8:0b:fb:15:ce:48:e7:b5:7c:01:b6:d2:da:65:56:
         3d:7e:c0:f0:a6:15:1e:41:f8:0d:85:c2:af:f0:73:31:19:6a:
         ab:c8:1f:bb:5b:ea:3e:47:53:1b:be:70:20:5b:b5:22:09:05:
         86:9c:5e:d8:0a:96:98:f0:8d:6a:b5:8d:49:80:84:46:ba:de:
         0a:4f:54:0e:e0:ab:82:99:d1:df:69:96:5c:ac:c0:68:46:ec:
         c8:df:f7:7f:6f:65:3c:a4:79:28:9d:59:e2:c6:00:72:1c:a2:
         fd:79:2a:a5:7e:ec:1d:10:a6:2d:c0:1e:13:d3:14:9f:79:cc:
         4b:f6:ad:7d:5f:9d:52:be:95:ca:ec:3a:41:16:26:63:35:cd:
         3c:9d:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org