Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fce2bea6-d6a8-3a0b-a98d-ed1145264b36.roa
File:                     fce2bea6-d6a8-3a0b-a98d-ed1145264b36.roa (raw, json)
Hash identifier:          sgUomAqpGlbZHyuAtHI1XfABqzuRVTqhz3VO3VTIuO4=
Subject key identifier:   DD:59:69:82:02:64:7A:0C:11:72:75:3E:63:B1:13:93:6B:16:B6:34
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD607E6B6B905E23CC2C4C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fce2bea6-d6a8-3a0b-a98d-ed1145264b36.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8b20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:07:e6:b6:b9:05:e2:3c:c2:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=854f8d10-5ab4-42c0-a888-539437527b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:4d:13:97:ae:9a:b2:4d:5b:fd:e3:05:66:
                    05:0d:07:07:1f:a0:50:0f:79:f4:cb:7c:47:a0:59:
                    f5:31:ab:c0:a3:02:e3:b2:6f:75:33:2b:cf:2e:99:
                    53:a0:fa:6d:96:23:5d:5f:7d:7e:64:1e:84:05:ca:
                    49:90:ba:ac:29:a9:88:fc:2d:56:5a:e9:21:e0:0c:
                    62:d7:38:24:bf:40:fd:a3:79:b2:1a:34:e2:ab:ce:
                    c5:2a:53:5c:fd:b4:61:a8:53:23:64:74:e5:39:c2:
                    2f:d3:ba:db:f3:a1:5a:af:60:86:cf:b7:88:cd:9b:
                    f9:06:f4:f8:ff:ef:52:ff:31:48:8f:08:ee:40:20:
                    d9:9d:7a:cb:7b:b6:ce:e2:9b:1b:cd:e5:57:e8:0a:
                    94:28:f4:89:ed:73:59:9f:aa:dd:84:ef:60:af:33:
                    b5:cf:30:13:5a:22:ee:fa:e7:a1:60:02:a8:4d:49:
                    99:15:16:d3:4b:c0:58:5d:6f:70:7d:db:c1:e3:53:
                    9d:21:76:9b:94:18:1a:ca:af:f9:1d:2d:23:c8:fe:
                    a0:0c:90:63:b9:4f:4f:0c:ab:53:9e:f1:ca:8e:8d:
                    cb:03:0b:90:3a:a9:8a:69:84:3f:46:27:d9:a7:4f:
                    53:7e:8b:ee:be:a8:b8:9e:07:40:07:ea:61:3e:84:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:69:82:02:64:7A:0C:11:72:75:3E:63:B1:13:93:6B:16:B6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fce2bea6-d6a8-3a0b-a98d-ed1145264b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:90:3d:4e:90:1b:61:46:7f:8e:d8:63:1c:e8:db:8a:13:7d:
         bc:4f:9e:c8:ab:df:d1:5a:08:0c:dc:b1:2f:ee:0e:e1:6a:9a:
         47:74:35:3f:8d:02:64:ab:ee:80:94:bb:28:e7:56:0e:4b:90:
         71:67:e9:32:15:49:40:fe:15:4b:ad:30:58:8e:ff:69:f9:d3:
         72:1e:69:49:af:24:9f:4d:27:47:c0:15:38:0f:e4:cc:cb:5b:
         8a:df:ea:d5:e6:69:24:5d:75:9f:2b:f6:6d:18:f2:ac:ee:2f:
         20:71:05:8a:64:a8:cc:bf:26:6f:1c:e9:b0:31:43:dd:55:fd:
         ca:65:cc:1b:f9:8a:1f:f9:94:0c:34:70:f5:13:f4:e4:00:1d:
         9d:55:d4:06:df:b3:78:4e:fe:40:40:11:ed:a8:4d:97:86:22:
         e8:2b:60:3c:ec:39:8b:73:7a:be:63:47:e0:d6:25:a8:68:2d:
         b9:8a:a5:18:49:dc:5f:ac:bb:08:e4:c3:19:d7:11:fb:7f:4b:
         a1:e2:b2:2d:b1:68:66:15:6c:82:33:8a:5d:ac:71:6a:24:a8:
         ff:71:89:35:74:ac:8b:67:38:be:cd:eb:74:51:79:da:fa:fd:
         1a:78:b8:c1:7f:fa:65:ec:2d:d1:3d:c2:24:5c:5e:20:33:42:
         46:af:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org