Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa
File:                     c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa (raw, json)
Hash identifier:          bBnkMpc+mwn00Kj0RA4C45Y9ygGuvdRVUixxhSadoNo=
Subject key identifier:   8E:C4:17:C8:93:2F:51:68:8C:ED:73:CA:09:CC:C7:FF:54:DE:26:6E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00692BFC7A9BFC7F291B9C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2603:9031:70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:92:bf:c7:a9:bf:c7:f2:91:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=fe44984a-4070-4526-a794-a8b8562eb687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:2c:b2:cb:8a:cb:f5:f3:f5:2e:d4:14:e7:
                    7c:c8:a8:19:b3:a2:30:fe:80:ff:b8:d6:c4:61:c8:
                    a7:6c:64:55:51:0c:86:9a:a5:ac:00:13:a9:1d:80:
                    23:31:d7:3d:8c:e3:73:a3:26:a1:f4:56:c6:0e:06:
                    0c:4c:06:46:b9:77:26:1a:86:25:c6:44:8e:10:c3:
                    f8:0f:06:84:d0:d9:8c:51:c9:93:5c:52:2a:5a:0a:
                    9b:58:f3:71:df:13:66:d1:f7:8a:08:9d:6a:36:b6:
                    6b:62:6c:e6:8a:61:36:db:c0:88:f2:35:22:89:19:
                    23:7e:72:e1:f9:c2:bc:fb:3f:3a:0d:b2:a0:88:d7:
                    b9:93:ec:33:75:26:74:9b:60:eb:1f:7c:9a:ac:eb:
                    a3:86:aa:f7:0d:f2:cd:71:a3:32:21:95:64:fa:9b:
                    c5:f9:8f:e6:7f:c5:25:9f:c8:57:2e:0b:36:25:b6:
                    60:60:a7:50:e0:6c:fb:92:01:dc:db:76:69:3f:15:
                    68:3a:59:66:70:6f:32:bb:b3:7e:23:3a:4f:47:13:
                    3f:8e:98:41:00:d0:f7:55:88:dc:21:d0:76:4e:23:
                    56:e6:47:8f:45:b8:7d:95:77:04:7d:cd:63:d2:d9:
                    fb:e4:41:70:2c:79:30:7d:2a:78:68:29:33:ce:fc:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C4:17:C8:93:2F:51:68:8C:ED:73:CA:09:CC:C7:FF:54:DE:26:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8cc8432-cddb-3d13-80f7-5b2235ab4ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:31:e3:58:ff:98:f1:70:ac:f1:22:1b:cf:05:19:0a:1a:f8:
         6d:dd:90:d1:e6:f4:52:70:4f:2b:8f:1a:2a:ee:e0:65:0e:45:
         f2:57:aa:55:07:a4:d2:61:ed:2e:57:62:c9:a6:11:7f:ac:db:
         03:44:ca:8a:3b:54:23:d6:0c:bd:df:f5:d9:2a:9e:23:c7:69:
         a9:d0:4a:ab:6d:ef:4e:e8:98:2a:dc:b5:e1:9b:04:e7:84:7d:
         06:ed:3c:56:4d:58:af:f1:ce:e1:54:d0:43:71:20:95:a8:9d:
         34:39:d0:a7:4f:37:49:04:86:a5:15:f2:8b:85:8a:5f:57:13:
         6d:0d:08:a1:fa:64:f5:db:79:ea:9b:06:8c:f3:86:0a:c7:96:
         c8:87:82:10:be:d9:d5:cc:e1:6d:ad:d5:ca:80:f4:5f:7b:bd:
         f5:fe:bb:78:a6:3a:d3:2d:3e:78:a0:f4:d7:38:d6:73:a6:3e:
         8d:b1:6d:3a:65:07:99:41:23:42:70:c9:5a:05:69:7f:44:51:
         eb:e2:c9:1a:3a:40:80:d2:a2:fb:23:43:5f:c3:01:f5:cd:14:
         db:e6:d8:fa:42:be:7f:7a:44:0a:24:2e:4a:cb:d2:a3:5e:f8:
         ee:37:e8:e3:be:c3:21:85:2b:a1:61:6b:36:20:03:89:c8:5a:
         8a:95:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:43 2025 by rpki-client