Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f572a8c0-8fab-303a-a4b5-b3da28ba8b18.roa
File:                     f572a8c0-8fab-303a-a4b5-b3da28ba8b18.roa (raw, json)
Hash identifier:          mZkv0+2Mficd5ZLU7kJQedRi15vvrp3S9ZtK53NMzQ4=
Subject key identifier:   86:A2:4C:9E:D9:58:3B:85:34:20:FD:7A:70:10:00:C7:F0:41:1A:56
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D6E92F79DA19A3AD096C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f572a8c0-8fab-303a-a4b5-b3da28ba8b18.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:8212::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:6e:92:f7:9d:a1:9a:3a:d0:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=ca74362e-b19c-4ab8-ac63-60031cf29fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:ce:ac:1d:d7:c4:92:4f:8c:f5:aa:2e:43:
                    d5:a0:af:42:12:a6:ec:49:33:2f:51:82:d9:93:9d:
                    98:62:aa:24:29:41:40:56:9a:6a:a0:34:d9:3b:3c:
                    93:a1:bb:3d:2d:ba:05:4b:af:92:38:9a:9a:f8:e6:
                    85:66:d9:e4:4a:3e:18:16:83:db:9d:c0:d8:b2:8a:
                    c4:67:e8:63:d9:c5:9c:f3:26:5f:f9:02:03:18:7f:
                    a4:19:8a:ab:23:73:f3:65:ee:eb:24:f4:62:e4:0b:
                    04:3a:d2:3c:f9:83:6f:94:1d:2c:2f:cd:ed:ba:b4:
                    ff:e6:b2:7f:f6:bd:23:95:c8:d7:3c:b2:a4:7b:80:
                    04:50:99:ef:33:92:0c:88:ee:94:5b:77:60:e1:7f:
                    54:c9:5e:a4:26:ba:96:de:c7:29:58:7b:52:67:e0:
                    ca:6c:dc:b0:c1:6c:2b:b6:b7:73:66:12:e5:6f:c7:
                    13:2b:7d:3c:a2:d6:d5:53:39:e7:5a:6f:87:e7:a3:
                    e3:3a:16:6e:e5:11:76:9d:0c:2f:82:b7:91:31:2d:
                    df:7f:47:30:8b:52:8e:22:08:fa:57:c3:db:59:7c:
                    c6:78:11:6d:ec:5d:87:6e:16:d1:9b:df:22:af:ea:
                    ff:8b:c5:d0:aa:0f:9c:af:a5:80:39:9f:dc:66:59:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:4C:9E:D9:58:3B:85:34:20:FD:7A:70:10:00:C7:F0:41:1A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f572a8c0-8fab-303a-a4b5-b3da28ba8b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8212::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:c1:f0:b3:88:82:9a:0c:8c:9e:e5:bc:9c:89:c0:b8:87:
         66:2b:0f:1d:89:51:de:0f:4f:d8:14:f1:0b:6f:10:89:19:f3:
         b5:d5:13:e0:6e:e6:8a:61:9f:81:78:15:fa:d5:f5:4c:f1:aa:
         c4:53:31:9c:31:04:dc:81:50:d0:e7:d9:50:d8:95:24:8b:04:
         0c:a1:91:74:69:01:c1:c3:7e:d1:5f:d1:9a:aa:3b:cb:b2:d3:
         65:9e:fc:03:96:ed:e0:24:a4:8e:52:37:f4:37:63:06:7d:f7:
         e9:3b:b9:d3:56:5c:2d:6c:93:d3:79:98:69:74:a0:85:00:a8:
         9c:ee:57:4b:ef:a9:72:7a:96:1c:5e:f9:6b:0f:4b:75:4e:0f:
         62:8f:26:49:fe:66:f0:14:94:8c:5e:0a:e0:7f:16:16:08:e2:
         65:0c:69:5f:ef:84:44:0b:4f:79:d5:4c:a5:fe:d6:82:96:ba:
         41:ce:68:bc:bf:87:61:e7:2d:46:78:e6:a1:b7:fd:79:d8:dc:
         2b:fc:51:ec:67:f7:60:3d:7b:73:e5:cb:bd:7c:f0:97:08:7d:
         4f:11:26:5f:53:12:66:f1:10:f8:a6:4b:89:0c:3c:26:a4:8d:
         46:73:ca:1e:55:ba:21:0a:33:8d:12:eb:b8:53:cd:af:d9:8b:
         35:ec:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org