Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28e93e62-e34f-370f-bb28-bac028de168d.roa
File:                     28e93e62-e34f-370f-bb28-bac028de168d.roa (raw, json)
Hash identifier:          OluWc4JRPKxHNGLtFGSmKdEQ17eI9inhroCRKLcppYc=
Subject key identifier:   4E:3C:F9:A6:2A:0D:29:F4:6E:17:8F:02:B6:63:03:F5:A8:DD:1C:34
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066F6A49D4D325C3822E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28e93e62-e34f-370f-bb28-bac028de168d.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6f:6a:49:d4:d3:25:c3:82:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=55465f95-4c64-42c2-a800-27f473601d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d7:e1:a0:b7:be:b0:a8:ad:69:f9:3c:a3:1f:
                    ba:1a:65:d2:2c:2d:40:08:90:a8:d4:49:58:de:ed:
                    87:2b:a1:cc:25:03:53:de:f5:92:b8:ae:b2:23:4d:
                    87:08:09:7d:2d:cd:21:46:70:f9:de:e5:8d:67:67:
                    64:77:86:69:58:14:b8:0f:0f:af:f5:ec:1f:9e:78:
                    15:b3:3b:d3:f3:04:fb:c2:3d:df:9b:3f:96:cb:5d:
                    f9:d5:4e:eb:e4:91:7f:5c:bb:2e:6f:b5:ed:9d:bc:
                    be:7e:c5:bd:3f:5f:fc:6a:77:78:44:f3:04:9a:a2:
                    fb:d2:26:58:09:80:b6:9d:ba:42:dc:8d:65:c0:b3:
                    ca:f0:62:53:d4:76:a8:a4:63:b1:1c:45:de:82:4c:
                    81:86:3c:d5:39:c3:d4:30:6d:cb:c6:b3:2d:6b:7b:
                    c5:79:a9:cd:d0:75:c7:dd:ee:aa:7a:09:b7:ae:d3:
                    f4:c7:a1:31:6a:ce:56:79:11:42:40:c5:dd:44:99:
                    38:9d:56:fa:12:be:31:de:88:31:83:3a:32:cd:ff:
                    21:43:7f:be:8a:c6:41:31:0a:b6:ad:14:72:db:b5:
                    22:11:5e:61:b3:46:d8:d8:37:35:93:ae:c5:fb:5b:
                    8f:c0:67:8a:95:77:30:d3:b1:2a:5b:26:9d:b7:a2:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3C:F9:A6:2A:0D:29:F4:6E:17:8F:02:B6:63:03:F5:A8:DD:1C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28e93e62-e34f-370f-bb28-bac028de168d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9e:e7:95:2c:c8:7e:ae:90:45:17:88:ea:f4:77:ed:2a:e7:
         af:6d:8f:99:50:4d:95:e0:d0:50:da:c0:6e:aa:3f:e2:ba:1d:
         a3:28:2f:90:6a:e2:22:53:d8:a5:ab:8e:3f:17:07:7b:35:6f:
         f5:3f:53:f2:12:43:ea:14:44:fa:53:88:b1:a0:19:66:53:a8:
         e1:e4:59:b6:dc:9f:a4:81:82:91:8b:06:8c:71:b7:68:60:d3:
         dc:6d:6a:e7:96:46:d0:ee:34:1c:5d:12:72:cf:a6:67:0c:9a:
         e9:19:4d:97:38:ba:1c:2e:b3:09:66:aa:b4:43:81:d3:b2:fb:
         68:02:66:c5:2e:73:ad:01:fb:1e:f7:0a:31:76:04:e5:cb:aa:
         0b:6a:c8:d8:e9:b2:c8:18:d9:51:96:8f:10:51:aa:ca:65:be:
         2c:48:7b:93:8d:84:ed:49:3f:c6:0b:c9:86:62:55:a4:42:33:
         25:b1:85:c8:9f:e7:39:aa:e1:aa:5e:50:c0:ea:23:6e:63:77:
         8e:e4:e3:38:ef:f8:45:87:a2:72:44:00:ab:31:41:8a:4d:a9:
         11:23:51:22:7c:31:4e:68:bb:47:bb:95:9c:68:9d:32:bc:35:
         41:6f:8c:2d:cf:6b:c3:5b:fe:44:39:1c:54:01:4b:62:2e:a9:
         ac:ba:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:57 2025 by rpki-client