Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa
File:                     e7bf5759-3e86-30fe-aa5b-842f953c444a.roa (raw, json)
Hash identifier:          TOcNHet2hcNFPY+4gRr2xbvN+zMEBJNL6xAUt4CKvTk=
Subject key identifier:   28:31:E1:4A:61:14:32:81:BD:AE:9A:67:5A:7E:A6:84:0D:13:A9:18
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EC902A361616C2209588
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8312::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ec:90:2a:36:16:16:c2:20:95:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=892a56f9-123f-472f-a3b3-191337dda0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:66:dd:ea:3d:e8:47:bc:91:41:60:96:c0:
                    11:c9:70:5f:2f:e3:1b:af:3d:2c:94:aa:b0:09:75:
                    4f:7a:08:b0:47:91:d6:e1:8f:6a:a3:aa:d7:b9:9b:
                    1b:f1:d9:70:6f:ad:e8:13:3c:a9:55:00:2b:1d:8f:
                    a8:a2:ff:ad:c0:60:04:b7:b1:cf:00:7a:09:65:09:
                    c7:ea:9e:70:53:f4:ed:7f:70:8f:fb:18:ca:ac:62:
                    da:26:1c:48:76:38:d1:9a:6a:23:00:97:28:40:e4:
                    41:ec:f2:12:33:72:93:10:56:29:32:0e:8f:38:d1:
                    67:5f:4b:8d:bd:3d:34:ca:fc:7b:1a:ff:eb:d1:7a:
                    22:af:9a:5e:b2:eb:8f:18:7c:7d:2b:f5:8b:c6:f0:
                    62:e0:98:ea:21:7b:ca:6d:e4:49:64:5c:8f:2d:de:
                    dc:22:b9:2d:44:78:44:5d:bd:e5:0b:b5:48:8b:f1:
                    fd:6e:5a:52:27:14:60:16:3f:5a:95:8c:66:d0:59:
                    ab:85:ba:48:9a:ae:31:e5:c9:96:99:dc:df:01:05:
                    ef:e1:25:39:14:42:12:e5:2c:51:fd:9e:85:76:be:
                    71:9d:23:ae:03:39:3a:3f:35:ca:1f:b3:c8:ac:3f:
                    59:07:3e:7b:bf:65:75:53:f8:5b:43:99:f1:f9:c7:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:31:E1:4A:61:14:32:81:BD:AE:9A:67:5A:7E:A6:84:0D:13:A9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8312::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:3a:02:92:74:9b:f8:db:9b:1c:d6:5c:ee:cd:f8:9f:77:
         64:1d:59:a8:7c:92:b4:1b:e3:0f:ec:32:b3:75:fb:37:df:a9:
         62:c3:0a:68:14:3a:96:60:a5:39:b3:f3:99:80:28:bc:be:1a:
         4f:91:a7:33:60:5b:fa:e3:52:07:5e:25:b3:a7:64:f7:88:53:
         8e:e3:54:16:c2:bb:c6:21:e7:6d:d0:12:70:75:e6:a8:9f:40:
         6f:46:13:a6:53:cd:d9:db:fc:55:94:2d:3d:30:9b:43:14:87:
         10:46:86:9e:16:e3:67:51:0c:7c:db:62:df:95:d0:c9:f3:06:
         7d:69:2b:6d:b0:59:b3:ef:15:21:68:c4:6d:8c:e7:02:43:18:
         d8:c5:f8:fc:7f:e3:11:79:17:0e:fa:fc:5f:3b:5d:72:32:54:
         af:b7:88:76:60:6f:90:1f:b2:0d:b7:61:2d:4e:17:dc:ff:3e:
         55:75:e0:4a:ee:c0:7f:2d:62:77:02:d5:ed:1b:e1:5b:cd:60:
         ce:50:ac:05:ed:c8:ff:41:2e:14:7c:7c:da:6d:e2:3e:db:42:
         3a:b7:16:64:01:b6:aa:d7:93:53:55:a1:a5:40:78:de:91:d8:
         af:29:fe:fa:4e:26:98:c4:4b:fe:4b:dd:10:ed:46:e2:c5:e6:
         1b:7a:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org