Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fd74a857-bb91-3011-b454-7e7d51eb98e1.roa
File:                     fd74a857-bb91-3011-b454-7e7d51eb98e1.roa (raw, json)
Hash identifier:          IaHUur4macWQ6Ow1e/nXicyNaOfRJalDA44/c9crZOw=
Subject key identifier:   DE:25:04:D8:A9:23:DB:4F:00:FE:FE:76:00:A2:8F:B2:75:94:2A:B7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839966B1974EEB179843E4E3640
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fd74a857-bb91-3011-b454-7e7d51eb98e1.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a404::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:6b:19:74:ee:b1:79:84:3e:4e:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=e3623956-f129-412c-a7ea-0952d0ec3297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:9b:9d:48:b9:0c:ed:c5:df:ab:a4:a2:73:
                    27:e2:c5:1a:a1:34:c4:04:72:82:49:ff:3c:d4:8e:
                    f3:d2:e4:79:a9:14:31:79:8c:02:de:e2:a3:bd:71:
                    0d:e2:a0:b0:f7:71:2c:9d:80:28:33:5e:b0:2f:ad:
                    ec:91:55:30:e0:32:c7:f8:a2:8f:dd:f3:8f:2e:02:
                    2f:b1:91:fe:2f:24:a1:ea:5b:be:70:18:83:3c:93:
                    e6:db:d8:77:94:7a:4e:d5:1f:64:ac:72:1b:fb:8b:
                    ba:c0:d6:9e:70:f8:6a:36:23:81:90:59:d5:6e:8c:
                    9c:d0:fe:78:1c:8d:cb:32:e1:54:8d:4e:fd:26:77:
                    99:9f:9c:9c:c6:7a:9c:18:69:42:9e:a5:aa:3f:d1:
                    85:c4:9f:ac:aa:6b:99:95:d1:54:e1:b9:e2:2e:cf:
                    5d:eb:ed:aa:57:90:6f:22:c2:72:52:a7:92:3c:d6:
                    46:e5:5f:0e:68:f4:a3:18:7a:3d:3b:4a:ab:9f:f2:
                    1e:af:66:ad:83:87:d6:b0:99:32:4d:bd:66:54:58:
                    31:f1:80:d2:68:a7:72:91:e4:49:4c:6b:63:f7:0e:
                    ec:ba:55:79:7f:46:00:06:92:a2:8e:df:ed:eb:f4:
                    5c:da:5b:37:65:8e:3d:43:eb:f9:30:1a:a9:ae:f3:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:25:04:D8:A9:23:DB:4F:00:FE:FE:76:00:A2:8F:B2:75:94:2A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fd74a857-bb91-3011-b454-7e7d51eb98e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a404::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:7a:3b:b0:c8:b8:a3:88:38:71:52:14:b7:e5:72:9b:42:
         79:be:53:c1:18:e7:2b:1c:a1:76:8d:09:3e:b4:04:87:6c:52:
         d8:cb:79:52:7e:5a:99:d9:d9:29:ed:e0:45:58:9d:6d:4d:bb:
         c1:72:af:8e:ed:c9:82:e1:bb:f1:94:5c:ae:89:fb:d3:3a:d2:
         de:ef:9e:19:c4:68:eb:1e:53:fc:ba:9a:dc:df:cc:ed:d7:22:
         12:48:63:b8:f6:df:5e:b8:98:86:d8:c4:2c:9f:42:31:73:10:
         ec:cd:ca:bc:48:94:e2:71:4c:e8:c5:38:3b:55:ec:6b:1a:64:
         ac:09:67:63:f8:6e:54:a3:01:e5:3a:02:48:bd:35:b3:07:df:
         64:1a:12:d0:a0:64:3d:ca:b2:df:1c:35:1e:10:48:56:b1:30:
         18:20:9d:9f:93:4b:e0:f4:3d:8e:de:8e:45:ff:70:c5:b9:da:
         d1:01:f4:bb:59:99:4c:d6:f8:af:22:70:f2:3a:34:32:47:17:
         57:f7:d9:3f:54:17:bc:2e:4b:4d:98:13:ea:6c:aa:21:93:03:
         3c:f3:71:5a:a5:78:70:de:37:c5:d1:f0:bf:df:22:b0:55:24:
         45:d7:3c:b1:73:6e:7b:70:5b:2f:90:dc:ae:c0:f6:19:84:83:
         f7:36:83:33
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWDmWaxl07rF5hD5ONkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTM2MjM5NTYtZjEyOS00MTJjLWE3ZWEtMDk1MmQwZWMzMjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOmbnUi5DO3F36ukonMn4sUaoTTEBHKCSf88
1I7z0uR5qRQxeYwC3uKjvXEN4qCw93EsnYAoM16wL63skVUw4DLH+KKP3fOPLgIv
sZH+LySh6lu+cBiDPJPm29h3lHpO1R9krHIb+4u6wNaecPhqNiOBkFnVboyc0P54
HI3LMuFUjU79JneZn5ycxnqcGGlCnqWqP9GFxJ+sqmuZldFU4bniLs9d6+2qV5Bv
IsJyUqeSPNZG5V8OaPSjGHo9O0qrn/Ier2atg4fWsJkyTb1mVFgx8YDSaKdykeRJ
TGtj9w7sulV5f0YABpKijt/t6/Rc2ls3ZY49Q+v5MBqprvP0YQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFN4lBNipI9tPAP7+dgCij7J1lCq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZmQ3NGE4NTctYmI5MS0z
MDExLWI0NTQtN2U3ZDUxZWI5OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWkBDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBXHXo7sMi4o4g4cVIUt+Vym0J5vlPBGOcrHKF2jQk+tASHbFLYy3lS
flqZ2dkp7eBFWJ1tTbvBcq+O7cmC4bvxlFyuifvTOtLe754ZxGjrHlP8uprc38zt
1yISSGO49t9euJiG2MQsn0IxcxDszcq8SJTicUzoxTg7VexrGmSsCWdj+G5UowHl
OgJIvTWzB99kGhLQoGQ9yrLfHDUeEEhWsTAYIJ2fk0vg9D2O3o5F/3DFudrRAfS7
WZlM1vivInDyOjQyRxdX99k/VBe8LktNmBPqbKohkwM883FapXhw3jfF0fC/3yKw
VSRF1zyxc257cFsvkNyuwPYZhIP3NoMz
-----END CERTIFICATE-----
Generated at Fri May 10 16:54:48 2024 by rpki-client on console-ams.rpki-client.org