Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e4484cb1-8cb8-35ff-a1d4-6595ee2f1532.roa
File:                     e4484cb1-8cb8-35ff-a1d4-6595ee2f1532.roa (raw, json)
Hash identifier:          F3i7GD8ZRKCF1RLp81qXFY2rZgOE5V/uSzsrS9lTWNQ=
Subject key identifier:   72:65:9B:F4:69:28:B2:DB:48:72:92:DA:1E:31:78:D0:F4:5A:F9:26
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967DE3BBCC660BE7F0032040
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e4484cb1-8cb8-35ff-a1d4-6595ee2f1532.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8b69::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:e3:bb:cc:66:0b:e7:f0:03:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=765dadd8-38f3-47db-81f2-e162a7653535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:46:e0:e7:2e:4a:b1:e4:c2:4b:c5:26:4f:
                    e2:bf:6a:07:12:03:88:25:a6:ae:6a:23:24:39:4e:
                    2d:41:64:34:cc:7c:a7:e9:5e:01:6b:62:7d:ae:53:
                    4f:da:2e:b0:45:88:09:52:e8:73:1c:92:68:7c:67:
                    60:ea:ba:91:83:29:53:a5:e1:57:08:c8:e2:f5:25:
                    17:72:f9:c4:1f:3f:46:34:05:8b:a8:60:0c:ea:6c:
                    4a:e6:f3:34:a8:55:f3:66:3c:11:7d:09:a3:8b:25:
                    2e:24:2b:b1:f2:d4:46:97:99:08:c5:c3:58:ad:f0:
                    16:a5:59:c2:cc:3b:dd:f4:bb:8a:3c:a1:f4:91:b0:
                    4a:9b:f8:eb:b3:f8:3b:09:38:93:a4:73:a8:5f:c1:
                    92:7d:8e:21:ec:14:6c:59:c3:d4:60:2d:66:4b:bd:
                    4f:b0:7d:66:d4:d5:f6:85:ad:97:a0:4f:1c:0a:07:
                    fc:89:03:78:d8:90:17:51:5b:1f:48:92:cc:3a:55:
                    ba:ae:69:f6:fd:19:1e:32:ec:eb:12:96:d5:a6:01:
                    fa:e9:e1:d8:9b:e4:6c:09:aa:05:a3:10:04:c7:57:
                    84:45:e7:8a:65:6e:c2:e3:bd:a9:2b:dc:df:9a:ca:
                    8c:d4:12:18:55:82:5e:fd:7c:18:1d:1f:95:9b:7a:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:9B:F4:69:28:B2:DB:48:72:92:DA:1E:31:78:D0:F4:5A:F9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e4484cb1-8cb8-35ff-a1d4-6595ee2f1532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cd:60:40:6b:44:85:cc:a0:87:45:7f:58:3c:e8:e2:d6:dd:
         43:85:dd:24:f3:6a:60:58:29:5d:c1:7e:fb:58:83:13:84:38:
         54:2e:9d:17:b7:c0:74:cb:10:7d:00:0d:4d:43:16:2a:5e:cf:
         f2:6f:de:cf:d4:16:9a:10:94:37:a3:62:d7:b4:2f:ec:18:e0:
         d4:27:5e:4a:94:ae:95:14:ed:b6:37:8c:e9:d7:92:4f:13:70:
         7f:27:e1:7d:fb:1f:af:d9:98:43:e5:89:23:1c:6a:07:1d:2f:
         57:76:12:9b:ab:59:0e:13:4e:1a:2e:18:9c:ec:c4:60:a9:ed:
         55:22:97:a5:6a:71:06:cf:1d:de:1f:97:91:5b:ec:3b:01:6e:
         09:e9:b9:dd:72:e4:48:b8:6b:cd:d7:15:75:9d:f2:b2:91:c3:
         0d:55:dd:c3:ce:56:8c:90:71:78:7c:c4:d2:a0:76:11:84:6a:
         f1:3c:e9:19:ad:ae:01:12:16:9b:91:41:b8:a5:ba:29:37:43:
         e1:8f:1d:47:c3:69:4b:b0:17:dc:d5:f0:5b:66:b8:53:7c:44:
         d9:5d:1b:e1:b4:be:31:03:72:e0:96:9e:66:ad:38:78:cb:57:
         d3:4a:ae:01:1b:5f:00:02:c8:5c:54:d6:e1:cb:e2:aa:bb:db:
         ae:80:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org