Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bd986f4-1034-3893-b581-d633dd7492f8.roa
File:                     1bd986f4-1034-3893-b581-d633dd7492f8.roa (raw, json)
Hash identifier:          7fv0I96qLTEhP2q5/JZv5kC/VxsfxUtPNGFK6YTre7I=
Subject key identifier:   BE:58:90:6A:E7:79:8B:11:FD:06:25:C1:03:18:96:0E:EA:AF:02:EA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066C2E83682889CA407B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bd986f4-1034-3893-b581-d633dd7492f8.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6c:2e:83:68:28:89:ca:40:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=d240d2ee-5e06-48bd-af72-f0fc78a88001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:53:53:df:8c:95:58:b9:46:ec:29:3f:41:
                    e2:73:c0:ad:91:35:cc:33:08:b3:2d:da:33:1f:6c:
                    b9:e1:c6:48:39:f2:13:ad:b0:4f:ea:ca:e5:20:55:
                    db:bf:e2:cb:a0:cb:7f:57:ef:28:36:93:65:51:87:
                    d0:3c:da:e6:85:d4:f4:05:b5:d4:73:0d:e0:50:38:
                    08:f5:7b:f6:4d:8e:47:7c:93:09:23:3c:ad:ea:09:
                    73:93:8f:b1:a9:9b:d6:a6:56:49:9f:12:0c:40:f6:
                    ce:6e:bf:0c:f4:3c:6c:d0:b0:38:03:81:5f:39:a8:
                    de:10:16:d7:73:57:7c:85:5b:73:fd:fa:1b:87:fe:
                    80:09:51:da:9b:c8:32:db:eb:c9:03:67:46:e7:40:
                    8a:bb:6d:d3:43:cd:d6:17:c4:f0:ea:8a:81:f0:b9:
                    12:8f:4d:4d:4a:ab:3c:4a:b0:83:a7:b4:5d:4e:23:
                    99:57:b8:11:3e:de:fe:d3:10:29:6d:0c:d7:df:5a:
                    ae:44:d3:ea:e4:07:b1:2b:cb:a1:b8:69:d7:81:12:
                    f0:25:58:9b:5a:88:32:de:f3:43:d2:35:d3:9b:a1:
                    a8:31:64:f0:72:32:c3:11:8d:75:f3:0b:21:7d:0d:
                    65:53:46:17:50:c8:f5:9d:fe:48:ba:f2:83:fb:f2:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:90:6A:E7:79:8B:11:FD:06:25:C1:03:18:96:0E:EA:AF:02:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1bd986f4-1034-3893-b581-d633dd7492f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:13:a4:bd:93:7b:65:06:e1:30:bf:24:c9:bb:50:7d:3f:a5:
         8f:84:4d:96:ba:9f:6e:a4:a3:73:c9:ae:de:2c:25:9a:35:46:
         75:e2:9c:32:87:05:c4:8e:d4:61:cf:e5:88:da:55:e4:de:5f:
         c2:d9:80:0b:f4:19:dd:62:0b:8e:60:65:a7:14:31:b0:87:36:
         37:ec:5c:15:1c:4f:d0:15:14:ba:de:dc:4c:e1:5a:d5:81:2e:
         81:cd:01:b2:d9:c3:57:0c:3a:20:41:d3:63:d9:b1:20:9a:84:
         c2:01:3b:4c:48:a7:70:d4:90:01:ef:65:3d:bd:5e:53:15:f9:
         25:7b:ea:22:ff:ba:00:ba:4e:b3:a5:97:fd:98:d3:7d:b0:94:
         41:7a:89:22:c5:a0:3b:17:f6:60:3a:0a:25:1a:14:32:13:2b:
         23:5a:6c:1f:d2:8b:4c:ed:41:2a:e3:01:2d:f1:62:08:84:15:
         fb:f0:b6:fa:e4:78:f7:35:4b:71:4d:e2:ce:08:ca:2c:34:4f:
         f9:24:db:15:c7:e6:54:0b:5c:9c:4f:4e:8f:6f:53:af:42:d8:
         f4:4c:c5:71:75:c4:fe:cf:3e:ed:bd:1a:29:51:6d:16:62:4c:
         a8:2d:d2:83:9b:da:e2:fd:c2:d4:98:39:be:f2:ab:8a:f2:b4:
         e8:55:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:10 2025 by rpki-client