Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f0d7e6-fbe9-3617-af48-181a3249aee4.roa
File:                     e3f0d7e6-fbe9-3617-af48-181a3249aee4.roa (raw, json)
Hash identifier:          yAaX6BsXpCMLeCrBgVw5H29jwunzWciPvA3Sh+DRvC4=
Subject key identifier:   B7:04:83:DE:46:10:63:30:20:DB:8A:89:49:6F:AD:85:9F:4A:28:3B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F1E5B7C807D8015990F8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f0d7e6-fbe9-3617-af48-181a3249aee4.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:82db::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f1:e5:b7:c8:07:d8:01:59:90:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=837aaa9d-1730-436f-8c57-c7ca7a545402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:ca:a6:ed:0e:3d:18:e9:ed:05:39:49:f0:
                    5f:46:22:b6:9e:25:5c:bb:48:76:fc:1a:f4:a0:11:
                    6d:b0:b1:51:c8:b5:2c:b4:29:5d:b9:eb:38:f6:e3:
                    89:bc:f7:e8:53:85:f6:a0:83:80:e2:ed:e2:21:78:
                    c3:81:01:85:c5:1d:fe:f3:02:d5:2f:f8:ea:7d:73:
                    2b:50:e7:71:82:11:d4:a1:ae:b3:13:16:f8:e6:0f:
                    fc:79:7f:b7:a0:1e:65:89:99:45:68:63:d0:fb:0d:
                    a6:84:19:63:27:8a:d5:11:04:da:6c:ad:bb:62:6a:
                    47:fe:b7:bd:eb:e3:f6:3b:e3:ba:f5:be:5c:27:73:
                    aa:1d:b4:31:11:fe:b7:29:d3:98:37:46:e0:43:90:
                    c2:56:57:a1:5c:e9:86:60:f6:8e:a9:e1:67:f2:66:
                    63:58:7e:78:08:93:0a:19:e5:b7:bd:47:45:f8:28:
                    3f:f2:47:48:f6:8f:f7:9a:ba:cd:25:0d:9f:8c:7f:
                    d1:7d:b7:06:01:35:43:4f:36:68:ce:8b:7c:38:cc:
                    f0:9a:13:c2:3e:9f:5a:b3:5a:a0:90:9c:19:27:80:
                    b0:81:bb:d7:a7:fe:92:a1:ba:af:4a:0b:e3:10:c4:
                    f6:ba:80:26:9b:53:91:cb:c5:d7:b9:6e:a0:ab:e7:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:04:83:DE:46:10:63:30:20:DB:8A:89:49:6F:AD:85:9F:4A:28:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e3f0d7e6-fbe9-3617-af48-181a3249aee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:82db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:1f:10:fd:f1:e8:b6:05:ef:06:c7:66:08:e6:62:61:e0:
         15:2b:8b:d4:2b:2a:4e:64:0c:11:08:0f:62:8b:ed:d0:ec:6c:
         c4:54:c7:df:37:db:8c:ae:44:15:80:62:ba:6b:52:34:31:3f:
         57:ab:c9:e6:93:bb:d7:c3:84:60:a4:49:ed:53:cb:22:dd:dc:
         e8:8e:b3:24:7e:66:5b:59:3d:a7:a6:82:a8:e8:2d:6d:16:7b:
         31:71:e0:3e:5e:9f:29:99:9d:2d:e9:88:67:24:55:64:e0:4d:
         2a:47:80:d7:61:02:92:c0:d7:7c:db:cf:6b:23:a3:64:ec:82:
         65:01:b9:50:0f:4d:32:8d:07:76:92:54:af:92:56:9c:38:1c:
         fb:8e:bd:c9:1e:54:e3:ac:e8:e4:f5:69:df:18:28:4e:76:bd:
         6a:f9:9f:8c:59:b0:40:cb:0e:bd:85:18:c1:da:d7:88:ae:ee:
         78:c2:30:7e:70:12:44:66:a3:1e:14:54:49:86:92:bf:3f:07:
         81:20:c0:1e:19:7c:c8:dc:d2:ff:b7:4b:18:d8:2a:ef:05:85:
         cf:6c:e6:17:7e:f5:f4:9f:ee:55:2e:b0:97:d1:7d:e2:06:dd:
         4b:36:7e:5c:33:3f:c8:30:33:c3:0c:8b:59:0f:88:de:49:a4:
         36:db:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org