Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f964624d-cd2e-34ae-8c9a-68dee8deadec.roa
File:                     f964624d-cd2e-34ae-8c9a-68dee8deadec.roa (raw, json)
Hash identifier:          8AwxmL+aRfkNaJCXuEo75l4V8xUKHidPw0EgiTXYYm8=
Subject key identifier:   EB:F6:B8:F3:80:0A:75:08:A5:7C:68:E2:DB:91:20:D5:BA:F2:4C:AD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E79BB5B7E46129E3A880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f964624d-cd2e-34ae-8c9a-68dee8deadec.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2603:9009::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e7:9b:b5:b7:e4:61:29:e3:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=e8c799c3-5530-4289-82c5-e5c654ab5570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:52:2b:f9:02:cb:aa:03:6a:70:85:a2:ce:
                    4d:ce:8b:f6:54:bd:0d:27:ea:34:37:2e:19:51:43:
                    3f:eb:f6:5d:1a:73:12:f1:f9:2e:10:ed:8b:7b:20:
                    d9:6a:77:ac:6f:10:f2:a8:0e:07:89:e2:55:62:67:
                    0e:db:b9:fa:28:9d:f2:87:7b:9c:02:2c:1f:0d:d2:
                    2d:b7:40:8b:c7:fa:88:ef:8d:45:e6:9b:8c:54:45:
                    79:0c:e7:5d:40:ee:37:5e:3f:c9:e4:8a:1e:7e:9a:
                    23:7d:f9:d9:61:eb:c4:d3:32:4b:b0:c1:28:32:60:
                    1f:09:12:d6:4b:d8:86:cb:79:16:fc:e1:b6:e2:00:
                    c6:10:8c:b2:0e:c9:22:1e:4c:e3:61:09:3d:9f:97:
                    60:1b:f4:27:bb:d3:bc:25:6d:d7:64:de:cd:38:73:
                    38:68:d3:2f:1d:9f:f6:91:2a:5b:a7:3c:df:09:bd:
                    bc:80:a5:1e:2d:b7:94:b6:8b:12:1c:27:12:f8:94:
                    9e:6b:eb:6e:ca:e4:8e:49:d8:4a:7a:0b:95:da:0b:
                    dd:99:a9:81:cb:ac:90:44:73:47:dd:90:e3:d8:92:
                    1a:33:b7:61:6c:f0:82:ad:5a:f5:a2:95:29:e9:8a:
                    54:e9:22:da:13:2d:d8:67:d0:d6:f4:12:a5:08:65:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F6:B8:F3:80:0A:75:08:A5:7C:68:E2:DB:91:20:D5:BA:F2:4C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f964624d-cd2e-34ae-8c9a-68dee8deadec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9009::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:e2:45:30:d4:a0:4c:e6:e9:9b:b8:07:32:eb:b8:f7:0f:
         f7:5a:ec:a9:07:7b:d7:39:16:12:50:40:fa:b4:eb:bd:4f:f3:
         b5:86:7e:0d:88:1f:3d:f4:f4:a3:21:56:a8:25:a4:9a:88:30:
         b5:d0:ca:1c:4e:75:99:17:7e:45:68:c1:00:35:b5:6b:94:1d:
         40:d0:ca:1f:48:e9:5b:5c:7f:db:90:5e:ac:6f:35:52:5a:cb:
         ac:3f:f4:ff:e4:23:69:c2:42:49:ca:4f:dd:d0:f4:35:f2:b1:
         e0:ba:02:eb:d6:34:1b:f3:77:b8:f2:4e:d8:ff:48:4a:e8:07:
         a7:62:fe:98:e0:84:73:22:67:6f:4a:ab:9d:2b:22:57:91:4f:
         c1:ab:fe:f6:21:cc:ff:63:67:ef:ba:c8:1b:6e:75:c8:22:c4:
         15:38:e7:af:02:cb:98:fa:f2:06:10:d1:2c:49:99:3d:fc:69:
         9a:fc:9e:4d:f6:39:9c:a7:4a:dd:68:f0:6b:05:a0:6f:06:0c:
         17:33:52:0e:73:3f:5d:8a:51:f0:39:ed:7b:f4:dc:cc:6c:06:
         fc:99:71:28:e0:e2:bc:7d:9f:06:0e:c5:a5:00:22:4f:c1:16:
         84:72:4f:87:ad:b0:6b:23:7e:54:71:76:81:37:2a:e6:6b:43:
         9d:1d:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:18 2024 by rpki-client on console-fra.rpki-client.org