Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1fa872ac-fde0-34ac-8b5a-37584c815acb.roa
File:                     1fa872ac-fde0-34ac-8b5a-37584c815acb.roa (raw, json)
Hash identifier:          kd+ff3E/fOLkjzw8kusdh6kMua2Io4hYBo+Fy2B7IOU=
Subject key identifier:   C8:5D:EB:DF:F1:BA:1C:A9:0E:1F:10:E3:8F:30:73:F3:49:47:84:F4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00671D3BBF1671458A3B040
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1fa872ac-fde0-34ac-8b5a-37584c815acb.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80d7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:71:d3:bb:f1:67:14:58:a3:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=1b35b0ab-a7be-43e1-88f6-16c70c8d58d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:a1:6d:5c:ea:50:78:22:58:a6:6a:2c:e6:
                    71:95:04:31:3e:33:2a:1a:f5:86:22:af:bd:1d:7a:
                    c8:23:a3:75:96:2b:3c:29:5e:fc:f5:3c:32:ff:5f:
                    be:be:f5:a9:16:dd:0b:41:70:e1:7f:9c:7e:b6:be:
                    86:46:3c:13:e2:a8:22:cc:27:ec:65:16:42:83:f7:
                    d7:17:00:e7:b1:27:62:8f:1c:16:be:1c:51:08:66:
                    83:51:25:bb:7d:83:b6:9c:05:e0:f5:d3:de:ad:14:
                    68:e8:20:46:b9:8c:7f:9a:ec:f9:41:fc:83:00:66:
                    95:e9:97:3f:9c:89:da:86:86:4c:21:f9:79:c0:e4:
                    7c:ad:85:32:07:60:8d:17:7b:c7:35:af:83:44:74:
                    99:e2:b1:10:9b:78:53:a7:f2:d0:ad:f0:eb:f1:9a:
                    b4:e8:fd:32:c3:3a:6f:47:cb:47:dd:1d:df:c7:e1:
                    70:78:19:3e:78:01:f7:3b:f8:bb:d6:fa:f3:37:17:
                    66:04:ec:3e:5c:c7:51:d6:b4:62:bf:f2:6a:2d:75:
                    4f:91:71:6a:88:db:50:10:02:22:99:48:ec:81:ba:
                    45:30:da:eb:7f:d0:fc:4a:96:76:67:31:8c:0f:30:
                    f4:e1:fa:74:bb:a4:77:bf:cc:6f:8f:ac:69:c4:59:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5D:EB:DF:F1:BA:1C:A9:0E:1F:10:E3:8F:30:73:F3:49:47:84:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1fa872ac-fde0-34ac-8b5a-37584c815acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80d7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e3:98:32:11:59:ac:f8:c5:15:99:13:af:d5:78:36:8e:bf:
         a7:12:88:e7:1d:e1:e7:02:18:65:1b:d3:35:28:94:e6:41:61:
         72:dd:94:3d:3f:a3:3c:0b:d1:a9:89:33:2b:24:0b:b1:24:2c:
         ed:60:46:01:89:69:63:60:53:50:e1:a8:04:26:e8:c5:08:d1:
         b2:68:f7:86:a7:94:81:c1:97:1c:f0:5b:f0:06:d1:37:f3:ef:
         67:3d:b3:51:6d:97:b2:6f:b0:3d:9a:ce:81:69:6a:a0:56:ad:
         67:0d:2b:08:b5:cb:c0:23:ce:cd:27:ce:bb:da:60:89:c5:18:
         b7:08:59:57:7d:8e:3b:53:f0:35:9a:57:94:ed:60:de:15:f7:
         3a:26:22:5b:7a:71:c4:f5:8d:04:59:00:5b:6d:35:4d:0f:ff:
         f3:e8:ea:c2:9e:bf:06:15:78:8c:a0:89:30:25:6d:36:1d:f4:
         fe:ce:4f:af:02:2f:c8:7a:44:d9:23:c3:46:cf:0e:ea:f7:f7:
         62:11:50:97:15:5b:43:f0:52:4f:6b:af:5e:b4:d1:81:f7:ca:
         ae:f4:e1:11:b7:2e:c2:43:47:47:95:65:73:20:73:4d:78:99:
         3c:b6:18:da:1a:37:8e:db:9e:d1:91:fd:dc:98:83:48:6d:cf:
         cf:ee:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:06 2025 by rpki-client