Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa
File:                     df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa (raw, json)
Hash identifier:          mXsTbCaxRTDuGCPYmKI1PSodKkK4gPXq0eVmFTIc9Zk=
Subject key identifier:   97:E6:8B:2B:D3:AF:4D:D9:25:E0:7E:E2:6C:7C:E9:F2:0D:71:E0:6D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC317702A0A303D10725280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:83eb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:17:70:2a:0a:30:3d:10:72:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=30d39c1f-69a7-47eb-bc52-7f09376a4dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:5f:94:20:f1:e8:99:1a:62:e2:19:09:b3:
                    73:31:1d:5a:bf:87:75:5c:86:7e:86:52:fe:b7:b4:
                    6b:3e:f6:6d:3f:9f:5a:fa:25:b8:c0:18:3a:f9:d2:
                    c5:50:13:ae:e9:2e:fc:2a:ff:92:23:9f:2f:82:2d:
                    8e:05:4b:dd:a2:77:8f:fd:d6:6f:ad:d4:eb:0f:60:
                    a6:85:21:5e:71:3e:7f:ce:c8:63:12:e8:17:e3:85:
                    75:19:8e:40:7b:a0:8b:1b:48:3f:6e:2e:f8:56:36:
                    ee:c3:34:55:99:67:59:52:d1:66:4e:97:5e:2d:4c:
                    bc:5a:33:a1:37:2d:58:cd:02:76:9a:fe:5b:ec:36:
                    d7:ae:e6:4f:a6:d1:75:75:29:90:77:d1:5e:b2:62:
                    5c:40:45:88:35:70:4e:7d:a4:0a:17:70:7b:81:89:
                    28:f8:87:2d:a6:cf:66:d1:fa:17:91:21:7a:3d:42:
                    3e:0f:6c:37:48:6a:60:50:f7:9d:22:78:9e:26:49:
                    25:be:5a:99:3c:67:f2:e2:f2:e8:50:e6:96:cb:6a:
                    0e:c0:f3:d5:ea:1a:9d:64:1d:4c:1b:55:e8:46:23:
                    2d:68:96:cb:21:65:a7:9e:39:fb:dd:88:7e:2a:ad:
                    27:30:b4:69:60:12:c7:91:3c:dc:52:e5:f1:6f:74:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:8B:2B:D3:AF:4D:D9:25:E0:7E:E2:6C:7C:E9:F2:0D:71:E0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:f1:2b:06:9a:b1:bc:c9:b2:e8:96:e9:1b:03:a3:b3:10:
         2a:21:b8:6d:e6:b1:7b:34:71:4f:e1:b0:26:66:ad:24:b2:d3:
         e2:56:4f:cb:ca:14:84:65:7a:78:9a:a0:11:ba:1e:b2:28:b1:
         5e:21:c2:ff:d8:0e:f1:70:fd:d3:2e:d1:8e:f5:3f:dc:42:b5:
         b5:37:3b:fa:d5:1a:74:eb:1d:95:db:e2:7e:45:89:00:14:ef:
         ef:9a:d3:5f:75:94:de:a8:e7:4c:1a:87:c8:d2:2a:ba:e9:9f:
         46:3f:93:9d:1c:63:69:8a:f9:3c:8c:04:b0:86:fa:04:60:2a:
         47:7f:74:22:05:f1:13:6e:47:61:c0:05:02:82:fe:3b:36:79:
         90:18:cd:55:da:ee:d7:e1:7f:07:e5:65:12:7f:b7:40:ff:37:
         d3:9b:2b:28:1c:b9:7b:ab:af:08:54:0d:33:ea:ae:21:76:47:
         44:3b:93:40:64:9f:91:46:ab:b6:00:ad:39:d0:22:c4:38:cc:
         cc:fc:19:3b:27:74:04:03:8b:30:16:a0:46:9f:a7:6f:c4:86:
         1a:a9:46:b1:87:19:75:70:c2:d4:45:5c:97:d4:4c:07:79:a5:
         66:48:6d:26:d4:e3:80:d9:55:51:3e:13:07:b3:c2:15:6c:44:
         8c:db:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:34 2024 by rpki-client on console-ams.rpki-client.org