Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa
File:                     d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa (raw, json)
Hash identifier:          sTT9MRl3jvdJdS4yHzXfhiAX00nIFSZnncuNZReAwfk=
Subject key identifier:   1B:B9:4A:66:70:A4:EF:C0:AA:17:9E:91:51:F6:F6:A9:21:90:10:F5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7BC20FE0C96453BD0AB0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:81d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7b:c2:0f:e0:c9:64:53:bd:0a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=ac83f869-0e9c-453e-afa0-2e9f2d95432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:51:a7:61:29:a7:9d:a2:df:be:66:ed:b3:
                    03:32:34:ed:3f:7c:51:fe:bc:0b:df:62:a7:d5:25:
                    ff:5e:ce:c8:6c:7a:1f:2f:65:0b:c8:9e:0c:66:0b:
                    a2:49:bf:17:94:35:b0:b6:ce:a3:0a:c7:d5:75:e1:
                    e5:9a:c5:4b:42:27:fc:d3:94:41:83:d8:45:b4:9b:
                    63:b1:a5:38:2f:5b:87:47:ab:c0:88:1d:88:e2:68:
                    67:81:b1:6b:1b:f9:2d:83:ce:9d:4f:fc:d4:9a:e3:
                    34:c2:bd:f8:77:13:1d:f2:b8:24:00:7d:0d:44:79:
                    0f:ad:b1:ee:1f:1c:b8:66:a6:09:6b:13:3a:b5:d3:
                    66:07:b3:d8:5b:2e:16:25:9d:07:45:1a:03:32:65:
                    ca:a1:c5:2d:e8:79:4e:80:20:01:87:bd:1e:f7:ee:
                    c2:a8:c2:43:d7:05:4f:b5:90:72:3a:2d:ef:0e:58:
                    5e:a1:52:cc:9f:42:9f:6a:a8:9b:87:0e:c9:92:bb:
                    84:9a:9d:75:2f:9e:f8:e0:bc:a2:aa:de:6c:20:40:
                    1d:4e:c0:fd:c8:1c:d3:40:67:d8:e5:90:87:f5:91:
                    98:d7:48:65:2c:53:3f:e9:15:4a:ad:65:63:d3:7b:
                    a3:b3:fd:c0:ee:90:7d:55:68:97:f5:e2:f5:81:99:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B9:4A:66:70:A4:EF:C0:AA:17:9E:91:51:F6:F6:A9:21:90:10:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:27:85:68:98:84:22:de:fa:f6:18:a0:c9:2a:43:a3:5f:71:
         01:3e:65:a5:d1:03:f9:f2:f4:15:ff:06:02:36:63:d9:f4:49:
         f0:fa:5c:f0:05:d5:62:a3:93:01:cf:d6:a2:3d:27:2e:3d:68:
         da:da:01:c5:e9:ee:47:51:86:8d:16:82:13:66:f0:13:06:2d:
         06:c1:62:80:05:06:c2:d4:3b:88:18:4d:d0:4b:e0:58:5f:be:
         99:20:de:8d:11:8b:8a:cf:e4:61:82:6f:f6:ed:ea:12:c3:fe:
         87:29:bc:b2:a1:61:42:87:46:15:50:6b:9b:6f:a9:04:ab:81:
         e7:cd:1b:8a:1f:7d:5b:59:a4:e3:e6:23:e9:5c:fb:c2:7d:c6:
         fc:ac:4b:3f:46:37:9d:77:3b:38:46:db:7e:43:7e:ef:53:25:
         84:2c:a6:13:7c:0b:6d:30:a1:fa:ca:1a:2b:c4:9c:02:36:7f:
         11:f3:4f:70:90:c3:03:03:38:27:a3:97:f8:0f:f9:2c:e3:1f:
         b3:38:8d:b1:49:37:3e:ef:92:cf:7a:a0:e3:c2:1b:50:70:f5:
         53:da:eb:cb:8c:d0:a8:ce:b3:3d:93:d3:10:5f:61:09:f3:6c:
         fe:91:70:8f:1f:85:2e:00:99:cf:cc:f4:b7:eb:68:1b:92:f8:
         2d:7b:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:01:49 2025 by rpki-client