Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa
File:                     f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa (raw, json)
Hash identifier:          wB3Q/1XfY0z7EpTaepnNyv0aw6BJ/8zfbtA/WVts2dY=
Subject key identifier:   0D:5E:94:86:8B:9B:48:9C:E3:EF:CE:E4:81:1C:84:EE:D4:76:76:64
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EEFF97E35B186E3BF180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8079::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ee:ff:97:e3:5b:18:6e:3b:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=4ba09799-c02f-4894-9f4a-71e24dc1beee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:98:f0:ce:a6:0d:fb:80:39:96:eb:01:ec:
                    70:1f:8e:97:5b:f6:86:6a:7b:09:b0:53:4d:9a:65:
                    5b:9b:93:be:d5:08:3b:ec:1d:34:7a:e1:4c:9d:cc:
                    59:48:0e:6d:bb:ee:2c:63:2b:2f:f1:c9:4b:47:87:
                    bd:cc:95:aa:05:0f:c5:93:6f:ae:35:5c:a5:f0:85:
                    54:2f:1c:e9:b3:76:28:f6:7b:60:84:84:02:87:ba:
                    30:1e:62:0f:c5:3d:4a:0a:3f:27:1e:42:c5:51:bb:
                    15:d5:bb:8b:92:92:34:03:5f:4d:06:5e:98:39:6d:
                    db:d7:8e:67:73:ff:b2:6e:c8:a8:1b:02:a5:8f:87:
                    e1:86:e6:aa:ac:f5:fe:64:ec:1d:7a:be:50:f7:c6:
                    90:aa:61:a9:d9:49:3c:83:87:e8:35:e3:c2:fe:80:
                    90:5a:05:82:f1:6c:29:d9:87:e9:c2:1d:91:90:fa:
                    5f:92:90:d8:71:a5:3f:a0:e5:21:a1:19:db:77:dc:
                    29:44:3f:10:19:ab:59:ee:e3:32:b7:06:8f:97:cf:
                    be:2b:54:c8:94:b2:7b:37:d1:1d:8a:5a:f2:cc:17:
                    13:d1:7b:50:82:d3:25:ba:7d:1b:b1:14:a4:ee:37:
                    d5:11:7b:17:e2:91:98:da:33:c0:ba:f5:86:82:6e:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:94:86:8B:9B:48:9C:E3:EF:CE:E4:81:1C:84:EE:D4:76:76:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8079::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bb:f3:a1:76:63:91:75:4d:25:25:86:86:70:6b:59:2b:8e:
         ef:de:ba:62:9d:18:af:35:a5:5c:20:77:e1:e2:19:0a:06:bc:
         f5:d5:44:3f:3d:62:ec:bf:ec:f6:bb:c3:80:9e:18:ea:0e:aa:
         88:a1:49:ef:30:89:c0:bd:bb:d9:d8:9b:4e:28:88:f9:6c:d1:
         84:8c:83:86:1f:cf:15:33:bb:71:24:d2:21:2d:6d:28:1a:53:
         03:a3:92:31:b6:3a:cc:26:b9:92:31:6d:d9:c7:be:97:d4:2e:
         e6:6f:cf:7f:cb:22:fc:c3:09:3f:c1:6b:23:ae:2f:80:57:e4:
         89:c4:67:ba:1a:f7:ee:70:13:28:1d:ca:e5:1a:91:a4:48:9e:
         ab:71:6e:f6:0a:50:98:8a:08:9b:41:4d:27:df:d3:09:8c:b8:
         fe:ee:ad:9d:77:d0:8d:03:e5:ae:0c:5c:3f:4f:8e:7b:41:e1:
         fe:b7:e8:76:e1:f0:36:1e:07:63:10:94:09:55:ef:59:d8:b9:
         f4:2b:c8:88:fd:c2:df:e0:53:91:a0:a7:13:d7:7a:4b:60:45:
         ab:66:04:2a:e5:c8:90:44:dd:ec:39:12:13:b6:b2:a4:99:99:
         b0:45:2d:38:14:50:53:4c:28:be:cf:cf:4c:7d:11:7c:66:b5:
         dc:58:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org