Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a6b8944-f791-3f5d-acdb-3b846825a024.roa
File:                     0a6b8944-f791-3f5d-acdb-3b846825a024.roa (raw, json)
Hash identifier:          ymji/6gZGq0bmKmvdlBWgqVNtv60H9DG2g6Gzy0Hd5k=
Subject key identifier:   4C:48:EA:40:E2:89:C8:6F:55:09:86:91:A8:77:10:99:04:C5:F6:86
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00697D9AD9C11879E50BB40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a6b8944-f791-3f5d-acdb-3b846825a024.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8290::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:97:d9:ad:9c:11:87:9e:50:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=1b2f5a94-bcd6-46f4-820e-8e72904349e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dd:ed:66:f8:63:65:cd:f5:f6:7e:3d:91:1e:
                    95:a0:0c:af:88:25:7e:60:b8:04:0b:9c:64:9f:61:
                    4b:18:e9:6f:b1:0e:6a:21:71:8d:5c:7d:71:c3:83:
                    e2:93:81:04:ea:e5:f1:0d:2e:29:65:aa:0a:a7:d5:
                    a5:45:aa:42:f4:b3:34:49:d6:81:19:1b:f2:51:77:
                    67:86:2d:bf:92:c6:c3:3c:ff:1e:24:d9:5d:9d:38:
                    a6:0b:75:36:38:ef:b3:d5:d6:c1:9f:df:b2:84:b7:
                    ea:08:fa:38:cc:9e:0f:41:b0:83:f2:b9:5f:c4:4a:
                    13:f6:39:83:18:8f:15:f9:a2:22:b0:8c:51:32:72:
                    e3:e0:4e:c1:ed:49:8f:62:91:85:02:e4:9c:52:fd:
                    12:18:61:24:a4:09:7e:53:1e:1e:4d:62:89:d4:1e:
                    a0:d2:3b:a9:7b:d9:f6:6d:ac:00:2e:ee:21:b1:b8:
                    6e:f1:34:08:3c:d3:0c:54:40:9f:87:b7:08:04:83:
                    17:74:2d:e8:20:25:22:54:ca:21:4c:65:09:f0:2b:
                    9e:67:2c:2f:c3:59:61:dd:e4:21:01:9a:6f:cc:6d:
                    47:e9:3e:5e:d1:e9:ca:2e:c3:f4:97:90:e3:65:31:
                    b5:bd:76:78:45:c3:2a:22:a2:3d:bf:c6:e3:89:0e:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:48:EA:40:E2:89:C8:6F:55:09:86:91:A8:77:10:99:04:C5:F6:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a6b8944-f791-3f5d-acdb-3b846825a024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8290::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:40:a9:88:8b:c6:94:a9:19:41:b6:2c:f6:3c:30:95:36:
         2e:c9:a6:78:ed:f6:2d:50:63:38:fd:3f:e3:2b:17:49:9f:b9:
         09:30:9a:6e:a9:05:0e:f1:ec:0a:0d:48:7d:0a:44:b4:ea:b6:
         be:05:a7:e3:fc:e8:ca:fa:1e:71:48:01:3f:5d:40:b1:dd:34:
         21:75:be:65:69:65:c7:81:44:d6:4e:ac:db:b2:71:f8:66:1b:
         4a:ab:08:ea:cd:7b:37:05:81:b1:c5:bb:2b:dd:85:8c:c2:2a:
         c9:bf:23:96:ef:6b:96:24:c9:e4:a5:fb:ae:44:9c:7a:e1:f6:
         26:27:01:6e:fe:c3:4b:87:7d:89:ec:fb:af:a3:82:fb:e2:db:
         bb:12:66:98:a6:93:ed:a6:8f:ca:e9:f1:35:42:ef:14:9b:8b:
         d3:94:84:9e:f8:33:fc:b0:e8:42:25:7c:b4:4e:ee:ed:46:1e:
         dc:27:af:5a:65:00:5f:6b:b8:66:b8:7a:7f:94:a4:8f:a1:21:
         6a:c7:65:08:35:4c:32:f8:a7:49:44:ec:57:e4:54:b6:4f:1f:
         ca:f3:59:4a:c4:f2:30:a5:8f:47:08:a7:56:2c:56:77:51:99:
         75:25:27:db:a1:ac:a9:5e:10:f0:89:17:af:98:81:c7:f7:8b:
         2d:06:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:28 2025 by rpki-client