Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab598a67-b850-3ebd-99c0-d176d789e30a.roa
File:                     ab598a67-b850-3ebd-99c0-d176d789e30a.roa (raw, json)
Hash identifier:          G5ijiccLbTjgj9/5hHhO+HuZ7Y2iJe273asaUGzKOcM=
Subject key identifier:   C8:AB:F5:32:F0:88:E1:9B:EC:30:F2:9C:5D:42:38:0C:45:16:36:0C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F73995D6128AAA33C2D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab598a67-b850-3ebd-99c0-d176d789e30a.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:807c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:73:99:5d:61:28:aa:a3:3c:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=9f3d0244-23de-4a73-8ad0-ef3439805463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d1:ac:5b:4d:6f:54:3d:d6:a4:6c:89:4e:6a:
                    2d:de:18:0b:3d:10:41:8a:78:c2:6e:26:aa:6a:d4:
                    14:1f:ce:68:17:80:3f:3e:48:22:a9:95:53:48:a4:
                    97:53:a0:6c:ce:f0:5a:25:f6:3c:5d:6f:ec:1c:bb:
                    e1:06:5e:b4:c1:c4:91:8b:a1:f0:35:26:d1:c3:e1:
                    c0:ed:d9:82:3a:56:33:83:98:c2:92:7f:7a:7d:4a:
                    ff:ae:fe:2f:9e:f5:12:af:d7:02:76:c2:6e:10:16:
                    ea:46:c5:e8:e9:6c:34:88:fc:12:43:54:24:ed:8e:
                    46:65:bf:e3:3e:51:a6:0d:a6:4d:27:1e:10:8f:aa:
                    dd:72:e1:ca:b4:90:25:0c:ed:e8:ab:9d:b1:d5:a6:
                    00:e8:fa:7a:e8:9d:e4:85:f0:9c:68:1a:2a:18:5c:
                    21:4b:f2:6c:2b:cf:53:2d:40:cd:27:c7:2a:d3:09:
                    15:db:df:5c:f6:09:e9:f2:8c:49:69:06:96:74:0b:
                    d9:cb:8a:05:77:ca:c0:84:18:6c:ec:38:22:32:ae:
                    35:f8:cc:1f:76:b5:83:b0:9a:33:22:02:0f:5a:41:
                    ae:27:83:73:b0:b6:35:db:e5:b3:50:22:4c:d8:a5:
                    7a:bf:f0:35:e0:4a:25:b6:f5:ab:d2:0f:c4:9a:2f:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:F5:32:F0:88:E1:9B:EC:30:F2:9C:5D:42:38:0C:45:16:36:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab598a67-b850-3ebd-99c0-d176d789e30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:807c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8c:4c:83:6f:2c:ea:c1:f2:2a:e8:54:e9:96:0f:c7:f6:34:
         62:85:f6:6c:df:e5:87:0e:69:85:35:40:d3:56:09:f0:3f:75:
         6c:43:f1:06:67:c2:aa:e2:b4:7b:3c:8e:0f:30:7c:1f:2a:5b:
         ec:7e:c9:23:64:01:c1:a2:83:d9:07:21:39:55:1f:db:f8:a9:
         d0:68:45:14:2f:95:5a:4b:3c:63:bc:00:b2:d0:19:68:6c:48:
         4a:b3:09:f0:02:ba:a1:ed:f3:6f:52:08:8d:70:04:ad:07:b8:
         e8:e6:f9:23:63:5d:39:be:9e:2a:1d:ba:b1:ec:d3:2a:b3:d1:
         71:03:cd:1c:d2:a2:fc:fe:e0:e5:b5:ab:b0:55:69:b4:cb:af:
         67:dc:a1:04:42:c2:fb:cd:f2:bf:6d:ae:bd:32:72:c4:e8:57:
         1d:7e:de:76:66:96:5c:c1:6c:82:09:53:f3:c8:37:91:91:1c:
         de:06:71:77:eb:b3:e1:64:a7:0d:85:6e:61:ee:b4:13:e4:21:
         d4:e3:5c:2d:3e:92:ae:4a:68:33:9f:e4:f2:b9:e5:c8:d0:e6:
         9c:c5:51:46:58:df:fe:a4:cd:cb:81:77:39:26:d0:80:05:85:
         a7:35:1c:ac:e2:70:91:5e:14:da:a4:6b:e7:cf:cd:ee:f7:82:
         1c:8d:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:04:46 2025 by rpki-client