Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/77a3c6ca-f9fc-33cb-9f9f-8217edb5bb87.roa
File:                     77a3c6ca-f9fc-33cb-9f9f-8217edb5bb87.roa (raw, json)
Hash identifier:          4WFPwd0qVQPmKM6MssG4ngQR6IgwaBvPHtOIZ43XEy8=
Subject key identifier:   18:1B:C9:55:11:89:5C:15:25:05:83:48:58:77:03:83:59:D1:EA:67
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0067167DF5882327E39A580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/77a3c6ca-f9fc-33cb-9f9f-8217edb5bb87.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:809c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:71:67:df:58:82:32:7e:39:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=b61e94ad-02bc-441c-b2e0-4a4edac7cbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:52:23:41:cb:f9:86:ea:e8:95:ff:09:c6:
                    1e:59:be:39:ff:a1:66:fa:bb:86:fe:b4:ec:f0:d5:
                    82:2a:64:3d:1a:48:da:77:14:b0:26:77:75:6a:ef:
                    2a:55:12:f6:3a:13:34:5d:82:02:d4:26:df:a2:ad:
                    38:cc:22:af:94:3b:8c:00:1b:65:e6:67:93:91:c2:
                    e4:f2:bd:44:de:cf:13:1a:1f:6a:ef:3d:4b:c8:c4:
                    96:c1:3b:c9:9b:f4:ef:eb:fb:eb:d4:37:3b:35:35:
                    1f:34:ec:12:f3:29:3d:d7:06:cc:cc:c2:72:6c:cf:
                    64:63:24:a7:39:52:ff:8f:ef:5c:42:95:d1:20:92:
                    27:18:1b:36:53:b7:59:2b:23:e2:c1:77:8b:ee:4a:
                    ba:e7:58:f7:a3:a5:19:5a:fe:48:29:97:b0:20:74:
                    c3:7f:b8:4e:bb:c2:4b:bf:e8:82:f3:15:51:19:78:
                    5c:09:42:ba:58:20:74:88:13:94:03:dd:ef:40:51:
                    86:85:be:5f:5f:10:1e:b2:59:84:41:30:31:e9:f9:
                    df:f9:59:ab:7a:89:10:0c:d7:0f:0c:d8:38:72:f1:
                    46:e6:da:38:62:a0:d3:81:97:d5:20:f2:34:64:59:
                    c7:54:e6:c9:bc:83:2d:03:90:f5:af:ad:13:f7:88:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:C9:55:11:89:5C:15:25:05:83:48:58:77:03:83:59:D1:EA:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/77a3c6ca-f9fc-33cb-9f9f-8217edb5bb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:809c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:60:72:a3:0e:60:d5:39:f5:0f:28:09:5e:59:e9:43:b8:86:
         99:93:85:8c:bf:9f:43:a8:2b:3f:1f:2d:41:e3:0f:86:09:e0:
         cb:60:13:a0:e4:37:b8:b5:01:ca:4b:9d:1d:ac:fc:db:05:d5:
         39:09:be:5b:c9:36:d2:ac:37:4f:97:00:30:ec:58:7d:75:3a:
         14:49:ff:31:4d:0b:26:c1:8f:79:a9:40:ba:e2:33:06:93:69:
         fc:e6:84:b8:ca:74:b7:75:ac:2b:55:5d:d6:08:bf:43:2e:dc:
         05:e3:72:cb:dd:e2:84:ac:33:9d:e7:05:da:f8:75:8a:35:b5:
         23:48:66:84:6b:4b:9d:4b:69:69:23:22:69:6e:eb:16:d9:de:
         a8:3e:9e:08:a7:49:2f:00:7f:f1:bf:f9:cb:e6:61:52:a7:5e:
         a7:59:06:f5:ff:d2:b9:40:d4:86:f7:92:0f:eb:50:4d:a7:82:
         60:63:03:79:cf:1d:35:ce:2e:84:85:43:82:9a:84:b4:84:b7:
         98:0e:b7:e3:aa:90:3f:96:26:c1:56:80:f9:61:f0:7c:18:31:
         b6:fc:be:50:b0:ac:19:f8:c9:38:53:8d:f7:92:d8:cb:6c:71:
         be:30:af:ed:a6:25:2f:e2:20:fe:be:02:99:02:4b:4c:6f:66:
         bb:5c:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:19:56 2025 by rpki-client