Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cbfb3d9d-e0b1-3426-a1c4-2a4ef2390b7e.roa
File:                     cbfb3d9d-e0b1-3426-a1c4-2a4ef2390b7e.roa (raw, json)
Hash identifier:          yugRE9kxxVhfY6UoIYxAKuVtrnnVTWb3V1BPS5Eqm9s=
Subject key identifier:   19:36:02:DF:57:EC:4F:E2:AE:A1:6B:FA:71:65:3D:6D:6A:29:83:73
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F795F20C931A46544F240
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cbfb3d9d-e0b1-3426-a1c4-2a4ef2390b7e.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8082::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:79:5f:20:c9:31:a4:65:44:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=1839dacf-d328-4fd7-81e9-ef57dae6d3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:08:28:12:30:45:53:09:c8:67:d5:ba:e1:
                    27:25:8a:da:37:9d:41:03:58:a4:6f:92:e5:c7:8d:
                    bb:ba:0a:94:a1:7b:f7:f3:15:83:33:a1:bc:ea:75:
                    db:84:a6:f3:ac:27:43:7d:44:7d:92:27:70:06:12:
                    c3:8e:34:c5:bd:6f:63:ef:a1:59:a7:ce:7f:ad:f8:
                    e4:02:1d:9d:eb:32:ad:9c:f1:5f:af:4f:5a:09:fb:
                    c1:8c:e7:99:f5:17:3c:55:08:d8:eb:37:0c:63:12:
                    ed:3a:a1:f8:46:29:ac:ac:7a:08:6c:3b:ee:cf:e9:
                    75:54:40:ad:19:1f:24:16:d4:a5:39:ca:5d:c4:ae:
                    e4:c8:2e:55:30:a6:c2:96:ee:8c:22:52:4b:e3:97:
                    18:6f:2d:d1:df:34:c3:d6:03:81:4e:40:35:c0:bd:
                    52:81:25:cf:04:f1:c1:0b:92:b7:b4:02:be:84:ee:
                    0b:86:10:79:e2:9c:96:20:68:70:12:b4:c1:18:4e:
                    0a:b7:0d:d0:3e:65:f9:74:58:45:7d:c8:05:c8:b2:
                    b6:7c:c9:12:96:6c:dd:1f:50:e6:c8:ea:90:99:fa:
                    cd:85:e1:f2:8d:cc:34:af:23:56:73:94:e4:eb:a2:
                    9c:17:fe:57:16:44:35:48:ae:35:90:9b:cc:85:dc:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:02:DF:57:EC:4F:E2:AE:A1:6B:FA:71:65:3D:6D:6A:29:83:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cbfb3d9d-e0b1-3426-a1c4-2a4ef2390b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8082::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ca:8d:5b:5a:73:8a:3e:50:3e:36:65:6e:20:b7:d2:70:2c:
         48:f2:df:3f:83:8b:a1:8d:99:fe:2b:01:3f:d2:a2:48:12:0a:
         a6:87:64:5b:b9:1b:85:c5:4a:23:2c:98:c1:74:f1:e5:2f:41:
         7d:30:e4:4c:7a:14:e4:38:64:55:89:18:23:7f:8f:49:9d:5d:
         65:44:72:61:ba:6d:7c:40:49:5b:56:16:64:f9:16:c0:5c:4a:
         2f:b9:9e:44:f7:58:1e:0d:00:d5:41:d1:b2:02:78:77:aa:19:
         4f:03:2e:a7:0d:fc:b3:30:61:3e:48:c1:8f:e8:41:1b:83:1c:
         40:6b:cd:77:a4:23:ef:e6:83:dd:7f:b3:9d:d7:08:05:74:fb:
         ea:8f:6a:b6:c3:65:f7:bb:82:a7:77:89:26:2f:a0:3c:3d:c3:
         01:03:57:01:c4:78:45:66:41:08:fc:40:87:7a:39:91:b2:3a:
         36:aa:b7:b2:db:6e:ca:ea:aa:08:bb:0e:40:35:f5:27:9e:1b:
         59:cd:5f:be:d3:9f:f8:5e:8f:c5:57:46:a3:c7:fa:56:88:9c:
         53:3b:c6:00:03:97:6e:99:f3:2a:1d:a8:7c:43:27:a8:1b:ad:
         5a:cf:47:8c:23:c7:2d:07:3e:e7:82:94:4b:8f:cb:0f:19:2a:
         80:ba:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:08:35 2025 by rpki-client