Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fbb82c3f-2279-3e40-8ca9-da7624558629.roa
File:                     fbb82c3f-2279-3e40-8ca9-da7624558629.roa (raw, json)
Hash identifier:          PMQ3aQhmw66ED3ds9jfexY4FmBfnNzwp0Zi5m+2hh48=
Subject key identifier:   0D:9F:2F:C9:55:39:A8:3C:3C:24:78:CA:98:B1:7A:5E:23:FA:B2:3D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838EC48810635E13FD68C446C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fbb82c3f-2279-3e40-8ca9-da7624558629.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        2603:9000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:48:81:06:35:e1:3f:d6:8c:44:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=76649cad-8a4f-4b8d-9884-c45023054a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:28:35:35:13:fe:49:34:86:8a:9d:35:b2:
                    51:2a:de:10:b7:87:90:27:56:84:b8:68:f3:b3:dc:
                    d9:49:0f:3a:fa:4e:e4:16:e5:11:49:f3:1e:e9:a1:
                    5f:6a:a7:59:0d:67:ee:fe:79:45:b3:03:ee:12:b8:
                    7c:3c:de:79:bc:71:ac:8e:77:18:f3:32:fe:c1:91:
                    0d:42:4a:6a:bf:b1:1f:dd:98:62:01:fa:4b:35:98:
                    37:fb:3f:32:40:72:2b:3f:86:e8:1a:9b:5e:12:17:
                    0d:35:75:e3:0a:61:a0:a2:70:19:30:52:34:dc:94:
                    6e:f1:9a:63:ce:42:16:6d:0d:5d:af:a9:89:cd:7c:
                    58:8a:47:bb:72:40:17:5b:6a:13:e3:df:e3:ce:fc:
                    5a:ed:d1:62:1f:ac:b6:0e:31:08:e4:d0:fb:17:ac:
                    0e:4d:6b:34:04:98:e1:fd:af:82:3c:a6:c1:b9:83:
                    2d:f9:51:3e:3a:0e:2c:a5:07:96:58:80:ec:71:83:
                    a0:4c:86:cc:60:50:39:ca:9f:cc:b8:af:ae:1f:f4:
                    16:8c:a9:0a:7c:79:ca:e7:55:2c:59:d4:be:78:d9:
                    15:11:1a:8e:96:3c:da:ca:5d:25:3f:fe:c7:5d:af:
                    76:0b:49:a1:f4:86:df:0f:f3:be:7e:d3:45:92:77:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:2F:C9:55:39:A8:3C:3C:24:78:CA:98:B1:7A:5E:23:FA:B2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fbb82c3f-2279-3e40-8ca9-da7624558629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:36:f6:ac:16:95:d3:61:70:b1:c9:be:73:5f:16:c0:da:
         df:be:09:e7:8d:8c:3b:08:f7:39:e5:0d:be:28:95:08:22:07:
         b9:6f:a3:85:d5:06:d5:a7:d0:37:c5:eb:78:f5:09:27:df:d9:
         93:5a:c7:89:7b:07:8b:89:7b:c6:af:81:ba:a6:7f:9c:0a:d9:
         ef:45:83:86:91:ba:c4:69:18:5f:36:ca:0b:ce:a4:1a:4e:f9:
         0f:d7:67:87:7e:39:d6:a5:2a:5b:d4:b7:bb:07:cf:23:12:29:
         99:af:a6:e6:ce:36:ad:28:99:6d:92:7f:9d:75:42:84:dd:4c:
         9d:98:2e:82:eb:fe:73:6a:59:0c:e2:77:8e:e4:45:b9:e1:21:
         0f:9b:e3:94:40:aa:08:24:50:64:0e:22:4f:df:d9:9b:a3:73:
         91:15:70:f1:59:42:1a:ca:8f:13:25:4a:04:bd:28:66:fe:47:
         0d:54:85:96:b8:a9:70:40:03:5c:27:49:d3:e8:72:81:77:35:
         b7:4c:29:35:d1:c5:c1:f8:12:f3:93:da:5b:dd:f2:8c:a6:b9:
         dc:d9:80:b2:55:c5:5d:e6:04:60:d2:42:4c:17:e2:d0:6f:c5:
         81:93:99:c9:0f:0c:62:29:66:c1:93:75:5f:a7:0c:67:dd:61:
         ea:cb:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:09 2024 by rpki-client on console-fra.rpki-client.org