Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa
File:                     44a9403f-17df-3731-bde8-32af09694c52.roa (raw, json)
Hash identifier:          2wpI9Av3F/XvwDp7WWuaR2JaXi/RgqdrdUS+8g7LoDo=
Subject key identifier:   CB:42:45:F2:BA:91:86:B3:6E:5A:10:D4:72:4A:00:61:67:D6:8F:C9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0069B8411A05738B2D7F600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:83ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:9b:84:11:a0:57:38:b2:d7:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f47bcc56-ca52-454f-a5a8-2bbd125e1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:62:63:b3:5f:24:f7:ad:bd:a8:09:79:f6:
                    ae:ca:c1:0f:9f:1e:17:a6:01:96:b4:bf:73:8d:db:
                    38:9f:40:ed:70:ae:01:82:cc:d0:75:e3:88:6a:2f:
                    68:24:55:83:36:63:6b:0d:41:35:7e:50:e9:67:81:
                    52:45:87:7a:49:41:ce:b8:7b:88:8d:4d:d1:26:f8:
                    f1:55:d3:11:6f:b3:ff:a8:11:02:98:04:e9:bf:18:
                    c3:d5:cb:bd:8a:99:8e:96:d6:4c:1c:1d:53:4a:5e:
                    f7:55:31:f1:11:e7:47:4c:37:53:ae:f2:02:71:4f:
                    17:67:8a:a6:cb:a1:a9:ee:b9:3e:b7:0d:de:23:48:
                    b4:8c:5d:49:e0:cb:11:4b:45:58:da:3b:2c:87:01:
                    c5:d1:1a:ba:03:52:48:5d:ed:89:2e:ab:c1:3a:ed:
                    f0:f9:39:30:3c:cb:c7:e7:0b:58:ce:97:a6:ba:a6:
                    12:66:2b:a8:ed:1b:15:ba:b3:17:25:3b:09:22:d0:
                    69:ec:03:87:47:6b:70:6c:e6:fb:63:9e:ee:f4:e6:
                    99:3f:78:e6:3f:8b:72:ee:a0:2b:ea:28:35:06:f1:
                    58:07:e6:be:3d:c2:93:9f:3a:9f:d3:4c:57:de:41:
                    52:76:40:00:85:2a:7b:82:16:72:c4:fa:e8:e9:3f:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:42:45:F2:BA:91:86:B3:6E:5A:10:D4:72:4A:00:61:67:D6:8F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:97:72:cc:63:7c:52:ad:d2:75:d1:a6:c4:31:4c:4d:2d:8d:
         8d:b4:17:c6:7c:6d:46:9a:4c:7c:9f:7c:d3:4d:3a:5e:35:8a:
         6e:e9:79:d6:a1:39:53:27:da:9f:25:53:0c:fb:d0:01:03:6f:
         18:69:c3:a2:89:9c:dc:83:9f:c2:eb:db:12:c0:9e:c0:86:3d:
         a7:33:e4:67:1a:5e:2e:4a:18:d2:25:b0:c1:73:cb:bc:48:4e:
         73:bb:e3:22:57:77:08:c7:70:bf:da:41:cb:ad:58:57:d4:a5:
         1e:3a:b0:b6:58:a2:c1:7f:f5:c2:49:2a:7d:ba:5c:b1:3a:a7:
         d3:ee:e4:83:07:96:ec:30:a7:ff:93:6c:43:8b:36:ec:75:f8:
         5d:8d:56:e5:b2:d2:30:09:4f:68:c3:e0:53:b5:55:31:8d:c1:
         b1:99:60:06:07:17:7f:e6:89:98:4e:8c:fd:3a:77:f8:f8:99:
         e1:c9:9d:db:e0:19:0c:29:f1:03:da:1f:73:27:9b:3c:49:0a:
         bc:b6:38:85:a5:46:26:f5:93:3a:32:e1:1c:af:a9:b0:2d:33:
         c5:67:b2:db:91:dc:c8:c1:83:87:79:7c:64:cc:17:7d:28:e8:
         d8:dc:f1:86:14:85:a5:d6:15:a8:14:c7:9e:78:86:dc:b5:43:
         17:b1:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:45 2025 by rpki-client