Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f16e58d4-9150-38a2-b6fa-d9a30d9d7f8c.roa
File:                     f16e58d4-9150-38a2-b6fa-d9a30d9d7f8c.roa (raw, json)
Hash identifier:          K3HV+xbTTD05UhWpI12U0/6angk2GSqyZry3gEX6Msw=
Subject key identifier:   E0:28:4A:B2:41:99:E6:E2:82:E6:7B:2C:12:1E:6B:4B:4F:5A:95:76
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D8E72A805625C690087A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f16e58d4-9150-38a2-b6fa-d9a30d9d7f8c.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8312::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:8e:72:a8:05:62:5c:69:00:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=19f1971a-ce97-4903-9671-1d8afbfbfecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:96:06:91:b3:4e:48:eb:a0:f4:12:f6:7f:
                    99:8d:b3:56:f9:be:7b:ae:74:16:66:9e:d1:d4:7e:
                    87:69:fa:7c:b7:48:49:5c:16:f9:3d:3c:39:96:3a:
                    39:c7:fb:b6:0c:a9:bb:21:02:f5:13:ac:61:d3:76:
                    a8:b1:9a:52:dd:11:86:87:d6:4e:41:f9:16:53:9d:
                    58:48:f1:a7:53:df:ec:95:66:9d:71:c8:33:81:7a:
                    5e:84:40:03:25:ab:23:28:79:6d:c1:3d:31:52:a4:
                    c0:9f:78:9a:da:76:00:f7:99:44:9a:b8:0e:45:aa:
                    14:2d:11:df:93:27:49:4a:77:cb:0d:74:92:14:d3:
                    07:68:cb:1d:a1:22:8e:96:e4:ed:69:0f:42:c1:c3:
                    9a:f4:fa:ab:2a:aa:2d:57:15:66:a2:18:3c:7c:be:
                    d0:35:b8:32:45:2a:66:01:be:a1:f4:0a:87:9a:0e:
                    19:49:f8:74:75:43:9f:9d:d3:a8:db:7d:30:13:78:
                    f8:c4:b2:4c:44:ad:97:45:76:ad:5c:a0:0e:ef:c2:
                    75:52:d5:1a:9a:5c:f4:95:09:90:a0:3d:d3:f1:5c:
                    c7:20:6e:7f:5b:7e:d8:51:75:b0:22:f8:8a:77:3c:
                    b2:4d:38:6c:f7:02:55:c7:05:af:28:b9:1d:d1:58:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:28:4A:B2:41:99:E6:E2:82:E6:7B:2C:12:1E:6B:4B:4F:5A:95:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f16e58d4-9150-38a2-b6fa-d9a30d9d7f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8312::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:86:9e:1f:b2:7f:3a:84:ee:6a:b1:3c:c0:e4:45:19:e6:
         e0:3e:28:e0:c8:ea:09:18:4c:b7:8d:f4:c3:99:a7:68:4d:0c:
         da:b4:c0:c2:2b:32:16:f3:7e:2d:39:36:61:d4:06:fc:a6:7d:
         74:23:e2:97:df:51:73:be:36:0a:9b:a5:f7:13:1c:29:01:c9:
         38:9e:a4:60:c6:20:bc:e8:ad:23:b8:d7:1c:de:2a:de:fb:40:
         cc:0d:38:10:aa:f4:15:85:21:34:1f:5d:2c:c2:0a:4d:a4:bb:
         20:c2:b9:d6:a4:d8:b8:cb:b7:c2:3b:32:57:0f:eb:b6:8b:73:
         31:7b:0b:c7:a0:fc:81:64:9a:4d:c0:83:bd:19:d4:a0:44:f4:
         8b:56:b0:91:7b:f9:16:e1:fa:a6:fb:59:9a:65:3d:f4:3b:8d:
         36:2a:7e:ff:a9:20:33:6b:b3:e7:8a:b5:ae:00:be:f4:4d:7b:
         e1:76:67:b1:67:4d:56:05:e0:ca:38:ad:c4:f4:85:b5:dc:3c:
         d4:a6:e7:72:87:3a:8c:81:a6:7c:6d:0f:17:3e:9b:ec:38:a5:
         83:c2:fc:49:49:97:83:35:fe:ae:c2:fc:37:41:5a:e2:19:48:
         77:c6:da:88:a0:50:b2:40:e7:fa:b5:48:b1:0a:24:12:aa:d7:
         61:39:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org