Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/37e24d35-6d6d-3dc1-840c-1631fda0fe4d.roa
File:                     37e24d35-6d6d-3dc1-840c-1631fda0fe4d.roa (raw, json)
Hash identifier:          8cloKmvWLftrFoKfOl8CUHFHy8FhgTTO3nCh/9gxbKo=
Subject key identifier:   7D:DD:64:34:16:6A:FE:15:D1:F1:39:F5:F4:66:3B:7C:30:F5:A2:9C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F78E8F00E35BFE88B60B0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/37e24d35-6d6d-3dc1-840c-1631fda0fe4d.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:805e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:78:e8:f0:0e:35:bf:e8:8b:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=da6538ad-dbfb-4e20-baf6-f42cfd1998f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:85:4f:d1:c7:75:23:1f:66:06:da:c2:c3:
                    92:b5:ae:8d:92:5e:d2:72:b1:7e:1f:dd:d6:aa:60:
                    5e:99:62:ae:be:ad:03:eb:70:62:3e:1f:7a:e1:e9:
                    7f:00:17:54:af:4e:52:12:b0:70:c9:ef:2f:42:e2:
                    ba:c6:6d:63:3f:fb:1d:04:a9:24:73:b4:be:cb:02:
                    98:68:f5:2e:5a:70:32:dc:79:9e:d0:4e:de:ef:d2:
                    ad:4b:45:a6:ac:91:a0:b1:ff:35:fe:8b:e5:a4:af:
                    3d:55:df:a5:15:c8:1d:e1:34:f7:ba:cd:ce:c5:2c:
                    ec:84:79:1b:a2:7d:83:dc:17:ae:08:ef:71:0b:38:
                    10:1b:3a:97:f2:0f:65:69:56:0b:cd:e0:55:77:95:
                    7f:4a:05:d1:41:50:6c:ff:2a:0e:12:fb:1e:6d:a5:
                    82:c1:9f:b0:99:18:88:41:26:5b:ce:29:69:3b:2b:
                    54:4b:09:29:e1:65:95:48:27:d0:e6:91:0b:03:e6:
                    70:91:97:d4:d7:43:eb:38:4e:5f:b2:80:e4:5f:6a:
                    1a:c6:23:6a:7e:6c:b6:36:af:79:a5:1b:41:2c:c9:
                    0d:51:e2:eb:81:64:21:66:8b:26:c2:61:f4:c1:ce:
                    3c:c4:88:23:a7:d2:a6:d4:de:12:d9:06:5c:e7:51:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DD:64:34:16:6A:FE:15:D1:F1:39:F5:F4:66:3B:7C:30:F5:A2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/37e24d35-6d6d-3dc1-840c-1631fda0fe4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:805e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:2a:39:89:e2:33:b1:1c:09:97:b5:69:af:7f:d2:1a:3c:
         e7:35:bb:5a:54:40:8c:bf:d2:a9:73:75:29:ee:fb:f9:e9:e1:
         66:32:48:38:36:50:fc:1b:45:aa:cc:4c:bb:aa:73:c1:d1:5f:
         18:53:60:dc:44:63:68:0b:4e:95:e2:37:87:ba:14:f1:f5:5f:
         1d:79:bc:b0:01:2d:81:b5:4e:62:c2:88:8e:c9:d6:a2:38:a8:
         70:dc:d1:75:ec:1a:a4:08:6a:bd:98:73:93:47:7c:2d:f6:2f:
         9d:e7:ce:05:2f:4b:d1:09:a0:41:c8:30:9d:ee:36:cf:7f:07:
         90:03:0c:d8:c1:0f:8a:0a:97:76:15:c7:58:44:f6:92:7f:6e:
         c0:13:fd:41:51:ba:81:8b:78:1d:61:9d:ea:f1:a0:6e:96:87:
         ff:86:24:6d:44:9a:c9:34:ec:a5:65:50:ff:5d:47:85:5a:2d:
         89:61:99:20:36:7a:51:d4:12:35:e2:37:37:d9:8d:d2:39:35:
         88:78:84:51:b4:29:5f:43:07:e1:fe:e5:c6:4c:11:ba:40:99:
         a5:03:73:51:dc:02:d9:4a:cd:4a:10:b8:bb:66:98:1f:b4:0d:
         a9:2d:f5:ad:b1:90:2d:5d:a2:90:08:6d:0b:55:d6:b5:13:75:
         95:d7:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:17 2025 by rpki-client