Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e32abc06-d404-3727-92cf-8df4279ef99a.roa
File:                     e32abc06-d404-3727-92cf-8df4279ef99a.roa (raw, json)
Hash identifier:          vxOzgnR73GfnaddDlFKhvjBFGuTi8SdhJ38n0jevpuQ=
Subject key identifier:   E5:1A:F2:9D:F2:7F:E7:EF:2B:1F:36:2F:DB:A3:7B:5D:C2:3E:E8:27
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EA96643E2C8EE8229D20
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e32abc06-d404-3727-92cf-8df4279ef99a.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:80ef::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ea:96:64:3e:2c:8e:e8:22:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=c5bfd3b2-2b97-4fca-a21b-6d11d3cf9bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:f0:ef:15:a1:70:50:a0:a8:d3:99:c9:2a:
                    96:8e:61:c9:28:f2:d4:b5:c2:79:e1:ac:22:d7:98:
                    a4:2c:d4:cb:11:d7:98:2f:b3:ed:d2:c9:c6:46:cb:
                    f0:55:9a:09:92:33:c3:cc:a5:48:af:11:9b:8c:0b:
                    84:49:f7:d7:f4:c7:3b:42:0b:c0:a7:4d:9c:ca:6b:
                    02:62:0d:e7:f9:0a:db:b8:66:f5:26:5f:d0:d3:19:
                    32:1f:c2:32:c4:6a:f1:55:ee:38:17:ad:ad:76:7d:
                    de:97:07:2d:c0:7d:9b:9b:6b:fa:05:a4:bc:21:f1:
                    b9:e2:a2:30:65:b0:f9:94:49:d9:7a:94:bb:c7:a2:
                    5c:51:2d:c3:c1:db:3a:95:d7:4d:e8:f4:3b:4b:14:
                    02:44:ce:d8:b5:c6:9f:51:72:d9:14:6a:c6:66:c3:
                    ea:e9:2b:ef:df:bf:d4:16:a5:79:7c:b4:e5:12:5a:
                    a7:c4:73:0c:15:8d:f6:aa:d0:02:90:63:45:30:f7:
                    6c:e6:67:ce:a8:3d:93:6a:c5:fd:70:0c:f2:1b:de:
                    5b:ed:a5:91:1f:52:36:38:8f:87:d2:52:2e:2a:8e:
                    9f:61:6f:ac:54:1e:31:dc:b9:60:11:90:2b:25:8c:
                    ee:17:9f:18:b7:10:1b:68:2e:c0:17:bc:fe:df:9c:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1A:F2:9D:F2:7F:E7:EF:2B:1F:36:2F:DB:A3:7B:5D:C2:3E:E8:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e32abc06-d404-3727-92cf-8df4279ef99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d2:f4:85:c3:71:30:c9:b3:d2:f9:26:cc:d2:a8:54:51:97:
         27:a9:ab:59:be:2f:12:6d:8f:e0:2a:f1:46:60:dc:54:7f:b7:
         0c:43:9a:a4:25:42:3f:8b:36:71:51:63:57:76:95:fb:81:84:
         f0:51:aa:1e:a9:41:55:0e:e3:6f:2c:1c:26:0c:33:6f:2a:22:
         06:d4:9b:04:d5:76:c5:41:d0:43:7b:f0:78:b6:a7:32:ca:89:
         fd:50:95:28:fa:55:73:04:42:51:c5:2b:2e:12:db:e1:09:90:
         0c:6d:5b:34:94:fd:9c:5b:cb:01:12:d9:e9:8a:a9:60:81:e6:
         5b:bb:e5:06:10:a2:80:dd:f0:a7:19:2f:87:48:0f:bf:74:bb:
         8e:60:48:a1:d3:92:3a:ed:e0:c4:a8:7e:24:ca:bd:01:83:aa:
         cc:07:d4:d6:b0:a8:c7:10:b8:67:23:4d:3d:16:46:a6:3a:e3:
         9f:21:8a:56:05:12:6d:c8:31:5d:ae:d6:c9:40:99:a8:ce:e7:
         74:ab:a2:ec:c8:2a:e4:52:38:ef:77:bd:93:6a:8f:8e:20:58:
         25:e6:a2:63:da:47:f3:2f:af:83:d1:b7:5e:60:a4:90:77:8d:
         12:85:6c:e9:86:99:ac:a4:d2:51:41:ef:61:8f:3d:d4:c4:8e:
         e0:66:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org