Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7eeca72-ca74-3bcb-9486-ce18f7a09295.roa
File:                     f7eeca72-ca74-3bcb-9486-ce18f7a09295.roa (raw, json)
Hash identifier:          nnFfcfvRPUt/dyuKG/qfJGrB1SZ1UZGET4hNdfqFi+k=
Subject key identifier:   C5:6C:81:F4:D5:35:15:1D:0C:CE:46:41:D0:6A:92:4C:F5:04:CA:B6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2EDA0E9095DB689041F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7eeca72-ca74-3bcb-9486-ce18f7a09295.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8105::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ed:a0:e9:09:5d:b6:89:04:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=298c8e27-2d66-49ff-9b64-fabd816a0f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:1e:2d:9c:88:c7:bd:2e:b6:95:b2:52:f4:
                    50:22:66:d8:7e:44:74:04:d5:ff:53:74:a6:11:f1:
                    80:0b:be:fb:40:67:69:24:9a:aa:1c:b4:9f:0f:9f:
                    f9:6b:80:00:7b:5c:fb:77:71:a0:69:42:42:47:60:
                    3b:94:9c:5a:22:25:f4:1e:63:9f:6d:5b:6f:08:2f:
                    01:6a:f5:aa:92:3d:42:71:13:1e:6e:eb:56:4a:2f:
                    d4:92:88:c6:4b:a4:8c:54:98:f5:b0:2d:5f:7a:40:
                    5a:5a:c6:a7:cb:b7:38:ef:2c:17:15:2b:02:5f:2e:
                    a3:7d:ee:bc:39:6f:8f:40:fc:6b:90:c8:92:55:0a:
                    fd:c9:d5:f0:27:f9:52:5a:8f:e3:a1:d2:bf:20:77:
                    bd:1c:29:5a:92:7a:83:8f:5a:5f:d0:d8:a9:89:c8:
                    27:47:73:66:c4:5c:c9:93:16:8b:de:e8:bc:98:c3:
                    f9:5f:68:c3:20:22:5f:b3:5c:f1:8d:2e:3d:95:4c:
                    01:4a:77:75:4c:b6:7e:c3:42:d7:79:0f:8c:07:d3:
                    2b:65:d3:fb:79:7f:8a:a4:e8:0a:bb:6a:85:41:23:
                    b6:8e:b9:06:39:85:46:bf:ab:f6:76:e9:66:bf:07:
                    fa:4a:78:b5:02:46:e7:62:12:15:92:57:c6:0b:03:
                    c2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6C:81:F4:D5:35:15:1D:0C:CE:46:41:D0:6A:92:4C:F5:04:CA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7eeca72-ca74-3bcb-9486-ce18f7a09295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8105::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:a6:d3:9c:e0:a7:7e:f6:d2:4e:fb:de:94:9b:83:2c:7c:
         0a:33:a8:80:da:55:bb:33:de:a2:b8:2e:cf:a6:95:95:17:1e:
         15:1d:f4:20:fc:a7:41:fc:5c:53:ad:bf:86:e4:76:34:b9:e3:
         7d:4d:8d:83:7f:e6:7a:ee:c8:af:31:50:21:eb:8e:41:c3:52:
         c9:82:94:0f:c4:f7:c1:4d:f1:a2:79:91:31:fe:65:2c:7b:a2:
         90:ac:bf:c5:36:d4:b3:cd:cf:12:a0:50:c3:4e:38:4d:08:99:
         99:5e:fa:f5:29:27:37:47:67:3e:05:fc:59:22:7a:c7:0a:c2:
         8e:89:95:c1:be:54:a6:f1:c1:d8:5b:0d:f9:94:b7:d9:30:2d:
         62:19:18:46:9d:df:3c:d4:1c:20:c2:20:c0:30:64:59:ca:8d:
         72:23:65:24:08:5f:b0:67:11:2d:13:4c:c2:95:19:c9:f2:ad:
         32:84:8d:2b:6c:e4:79:e5:b1:83:35:0d:20:d6:51:ec:61:11:
         84:4a:51:68:5b:ac:ab:2d:f4:2f:66:0d:e0:da:50:9a:3a:78:
         e0:dd:f4:51:d8:e9:03:ea:2f:c9:87:97:f5:f7:cb:24:a2:8e:
         9f:f4:c8:13:45:15:0c:10:22:6b:36:a6:dc:21:cb:a4:66:f0:
         f5:45:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:14 2024 by rpki-client on console-fra.rpki-client.org