Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/03d65397-af7b-3970-b366-5b6e80c6b336.roa
File:                     03d65397-af7b-3970-b366-5b6e80c6b336.roa (raw, json)
Hash identifier:          CcT+R0ILCXu7ziU8ZZeFNFj7miT4kZZhDQ2Bei8LRF0=
Subject key identifier:   68:70:CC:13:6A:7C:05:D9:56:78:21:93:98:CF:1F:91:BF:A9:CA:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066AD2FBA3E47DD68F5080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/03d65397-af7b-3970-b366-5b6e80c6b336.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6a:d2:fb:a3:e4:7d:d6:8f:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=7458a7ea-d118-43c0-9060-0b28839d719f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:59:1b:45:ab:e1:e4:56:53:20:e2:a3:83:
                    58:73:b2:1f:92:f6:25:cd:10:18:38:08:0b:75:cb:
                    6b:fe:07:81:94:15:a7:d6:6a:fa:d5:62:9a:b0:e2:
                    3e:08:a6:86:8f:89:c3:e7:99:8d:f6:30:3f:e3:4c:
                    ab:f5:34:63:69:8d:c9:c9:8e:35:21:a7:85:d1:30:
                    9f:a2:05:43:f7:2b:e8:06:4d:cc:e5:6a:cb:ba:c4:
                    27:34:ab:9a:fe:0f:c9:b7:39:cb:a9:b1:ae:91:64:
                    42:31:77:7a:47:fe:a6:0b:1c:35:6c:01:46:c6:df:
                    d8:48:98:f2:a6:40:1d:4f:1f:dc:46:26:15:75:3b:
                    72:b7:cc:6a:a9:3c:41:69:d0:8b:88:a2:24:49:a7:
                    ba:d1:49:f0:df:b7:8e:b3:91:55:72:8f:eb:08:6a:
                    76:12:9d:04:54:85:50:7a:1f:75:14:32:fd:99:ef:
                    f3:a9:88:c6:91:9f:a8:1d:b1:97:28:63:7f:a5:b9:
                    03:48:69:1c:2d:f0:33:7d:f7:e7:3d:ed:85:4d:9d:
                    5a:4c:02:35:ad:56:cc:8d:d3:28:c7:67:31:dc:5e:
                    48:98:60:00:cd:b2:87:cb:fb:34:e7:b3:8c:f9:f8:
                    1e:f1:65:7c:8d:dc:f5:29:74:cc:bf:d4:1f:32:d4:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:70:CC:13:6A:7C:05:D9:56:78:21:93:98:CF:1F:91:BF:A9:CA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/03d65397-af7b-3970-b366-5b6e80c6b336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:95:91:3a:8e:64:3c:4b:2f:9e:6a:bb:b4:63:f3:71:8d:74:
         c5:69:92:d3:a4:51:d7:76:0a:01:25:c4:e6:ab:e7:c3:15:fc:
         2b:f0:5a:c7:b7:03:61:5e:cd:57:a1:75:87:08:2f:96:2e:f7:
         9c:0c:70:14:06:7b:7a:5a:b6:10:76:e2:8d:db:f0:ab:43:20:
         59:69:99:55:7d:3d:fa:d3:70:8b:9d:66:fb:71:67:ed:b4:2a:
         35:5f:1b:d3:6d:9b:9e:82:c2:13:8b:9c:32:12:d8:2c:2c:26:
         17:4d:bd:a3:34:1a:1a:aa:2f:0c:e2:13:b7:e5:6d:30:62:e1:
         ad:3c:92:16:8b:0e:7f:bb:e0:cc:8f:c7:e7:45:56:f7:60:ce:
         ad:df:78:1e:4b:d9:9b:58:b5:88:2d:9a:96:2b:89:eb:55:46:
         0f:a4:28:92:f4:38:6a:d1:bc:da:d4:a7:ea:74:9f:68:9a:23:
         d4:49:5f:10:40:62:d7:49:ec:83:bc:d3:8b:05:55:9a:1b:85:
         10:a5:9b:bf:67:81:e8:a4:ab:61:4b:ed:d3:f0:09:c7:9f:98:
         a5:ce:1c:07:c9:5a:a4:e1:16:ef:9c:92:0d:c6:81:dc:89:89:
         84:dc:01:1b:1c:4f:59:15:34:f4:6c:84:8e:fb:5c:cc:a1:98:
         a6:4b:8c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:09 2025 by rpki-client