Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9442762-2355-390a-8e22-d93b7628e1f3.roa
File:                     c9442762-2355-390a-8e22-d93b7628e1f3.roa (raw, json)
Hash identifier:          Lz/dJW/siNDGRhs8NlKIeXZwBR4BS521Ug/3wWyyHgM=
Subject key identifier:   BB:EB:30:33:1C:53:CA:99:DF:9C:12:39:3B:FC:FC:59:F3:B9:9B:0B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00690C5762B098AAC987100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9442762-2355-390a-8e22-d93b7628e1f3.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2603:9006::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:90:c5:76:2b:09:8a:ac:98:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=49047649-57d5-4978-878b-3527da6c787d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:15:dd:cd:52:94:88:b4:9e:e3:8e:97:b8:
                    f5:0e:f1:97:e2:a6:d9:40:a4:0b:18:19:cc:37:56:
                    2c:70:e3:75:84:ef:5c:5c:00:42:ca:f8:22:dd:4d:
                    42:1b:0f:65:5c:6e:5f:22:28:e4:f9:d5:9f:50:4f:
                    f8:45:1b:63:1b:16:66:3b:e9:fb:55:62:19:9e:74:
                    a9:57:30:74:d6:ca:31:d2:e3:7b:83:11:95:2a:06:
                    60:f8:68:ff:5a:7f:91:fa:7c:d9:d4:a1:2e:47:9f:
                    1f:43:73:d1:00:f7:20:75:3d:cf:a8:f7:3c:1b:de:
                    03:ff:b0:59:a3:99:17:9c:bc:fa:61:ba:40:a9:6e:
                    d7:47:67:d7:fc:f8:c2:39:3f:04:9d:85:b6:cf:03:
                    68:5b:fc:83:c0:e7:e3:54:38:b7:d5:53:83:b5:b1:
                    56:3c:6e:0f:5e:75:5a:05:b6:c5:d6:d3:03:f0:3a:
                    c5:3d:e8:39:e3:cb:a7:65:72:22:44:0e:8b:83:97:
                    d3:09:31:87:0d:c6:bc:42:c6:1d:ca:6e:54:3f:32:
                    59:3b:b6:c1:48:c7:5f:12:df:a9:6b:80:35:c8:75:
                    f6:e5:7d:b6:b3:d5:ce:42:9a:09:a1:b5:91:b5:de:
                    1f:29:a4:1b:03:5f:ad:47:68:94:51:c0:d6:7a:1f:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EB:30:33:1C:53:CA:99:DF:9C:12:39:3B:FC:FC:59:F3:B9:9B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c9442762-2355-390a-8e22-d93b7628e1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9006::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:80:1e:66:af:e0:2d:75:ae:86:a6:f8:55:d5:5b:3a:34:
         7d:c2:ab:a8:b8:61:51:5c:de:19:4d:09:7a:15:54:d4:fe:6f:
         4f:64:01:ca:00:07:0e:0c:1d:56:41:a4:40:ce:c2:7d:48:ed:
         31:2e:27:d1:3c:7f:af:c1:fa:54:16:e6:5c:b3:b9:d5:df:4f:
         69:d2:5b:94:8a:14:fd:57:76:5e:08:f4:9c:9e:3d:e9:ac:89:
         0b:e5:65:ef:98:81:7e:63:cc:43:94:f2:73:ce:bd:46:d9:38:
         5e:c9:3f:af:c4:03:52:63:0e:61:0f:fa:7d:dc:a3:e0:4b:36:
         92:9b:48:df:11:e0:7b:ac:a7:1f:35:dc:6d:bf:14:f6:41:1a:
         ad:bd:37:c5:ca:d4:0f:fa:fa:2a:a1:5d:1d:75:d8:7c:6b:06:
         7c:e1:4d:99:0f:d6:0f:c3:26:63:cc:36:47:08:55:a4:be:9d:
         fb:cd:32:3d:4b:9b:3f:e5:09:15:cf:36:80:14:14:d6:9f:c6:
         74:6c:2b:b2:74:e8:4f:8e:4b:e4:d1:ff:48:d5:f8:a8:b1:fa:
         35:83:bd:0b:4f:45:01:64:aa:89:97:4c:a5:a9:ea:f9:d1:20:
         8d:59:c9:65:01:13:89:19:62:96:d4:a5:b3:46:5d:d3:6c:76:
         74:99:c6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:20 2025 by rpki-client