Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6ea95309-b82c-32a0-8f61-69a5267eefcf.roa
File:                     6ea95309-b82c-32a0-8f61-69a5267eefcf.roa (raw, json)
Hash identifier:          ykFhZ78WvX/RkHsWaPMUkrS1VsofZ0zMUHC13jA0BfM=
Subject key identifier:   0D:ED:53:D1:22:74:14:44:FD:75:38:A3:9E:11:F9:BB:22:38:F7:16
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00694883AC4CE27E6574980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6ea95309-b82c-32a0-8f61-69a5267eefcf.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:94:88:3a:c4:ce:27:e6:57:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=98de5811-9454-4b8e-9fe4-8ecc397a11df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:46:c8:5a:70:01:a3:0f:db:30:c8:3e:d2:24:
                    01:07:59:c5:e7:5f:16:af:87:2f:a9:17:19:b5:58:
                    8c:2a:41:34:47:ef:ce:1d:aa:a6:ef:15:06:25:30:
                    a5:ad:69:62:39:a7:32:57:c3:ee:31:e6:a1:eb:0d:
                    bb:76:c5:65:61:8a:5a:cb:ba:12:a7:43:66:a9:e4:
                    d2:30:16:1c:d8:ff:54:33:19:dc:56:21:c5:08:a1:
                    19:5a:12:93:97:e5:06:c1:c6:0e:68:d8:b0:f0:e4:
                    f1:57:af:34:05:37:af:c1:ec:20:8e:36:2a:59:6b:
                    c2:ba:93:40:bd:6d:16:21:b7:1c:81:f4:8a:bf:12:
                    06:fb:18:43:51:51:2c:01:7a:b3:e0:cf:bf:59:7a:
                    54:16:2d:2f:8c:a4:11:cf:15:19:b3:b1:a1:86:ac:
                    39:02:82:2b:71:43:2b:65:bb:5f:6c:af:88:6a:27:
                    59:81:d0:74:1a:d6:af:17:61:4f:3e:c8:c2:c3:ba:
                    2e:4d:4c:38:0e:72:5a:d7:4a:04:12:59:36:fb:13:
                    e7:ad:33:0b:05:48:c4:54:60:d9:2a:69:6a:f0:f3:
                    af:9a:5f:2f:69:d8:c7:16:8c:bb:ab:c6:d1:e1:48:
                    d6:cb:03:1f:af:ba:27:be:77:50:d0:70:12:d2:41:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:ED:53:D1:22:74:14:44:FD:75:38:A3:9E:11:F9:BB:22:38:F7:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6ea95309-b82c-32a0-8f61-69a5267eefcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:13:43:45:17:d5:9a:72:bd:c8:28:f7:d7:ca:08:74:02:01:
         ea:dd:ba:78:14:4b:4f:d7:24:ac:95:43:19:99:89:3d:be:9b:
         2e:b7:2e:94:da:5c:96:dd:19:9d:0c:b4:2f:96:b7:0a:3d:e1:
         d0:f7:93:ee:07:7f:ac:ba:6a:cd:7f:01:ec:c0:07:7d:45:9a:
         0c:ad:39:0d:04:67:3a:02:8a:e6:45:0a:0c:5c:5c:29:19:a4:
         3e:ea:33:db:a1:82:53:da:5c:1e:ba:45:18:60:eb:78:6e:e8:
         fd:2b:1f:65:bc:eb:9b:19:b1:63:73:fc:d8:c0:71:a6:7d:9d:
         d0:2b:c1:9a:9d:93:c5:71:17:c1:ec:51:6e:e7:ba:15:79:88:
         13:7a:88:6a:fc:4b:74:95:b2:c0:f7:15:c4:d3:b5:0b:81:e7:
         19:e8:48:6f:9d:17:6b:6e:a6:9f:79:e5:f3:f0:d0:7d:9f:7f:
         ec:b7:57:06:20:53:70:e0:25:8c:83:da:c8:23:89:5e:16:c1:
         b5:01:ae:45:75:5e:e7:b7:2a:d2:04:e0:b4:68:d2:3f:61:60:
         f2:2b:f8:8d:0f:25:0d:df:3a:77:01:79:8b:cf:8f:d6:bc:d8:
         74:6e:7d:97:77:0c:f5:3e:a8:ef:75:c2:a3:07:65:fb:3f:82:
         63:56:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:24 2025 by rpki-client