Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa
File:                     d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa (raw, json)
Hash identifier:          kMJGdrOvYIQHufMkuzOqnCjz/zKpMXmIZ538mFUpClQ=
Subject key identifier:   34:02:0A:B8:9A:C6:B6:E4:D6:4D:BC:B5:12:02:C8:51:BB:34:98:86
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006736FB7AB72DF6623C340
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:81d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:73:6f:b7:ab:72:df:66:23:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=e113b4fd-62a7-4716-b6ba-b0a2bdf31d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:4c:30:b8:7d:3b:82:ce:39:46:c5:f3:83:
                    b5:cf:3c:c0:95:4e:c3:35:8b:f9:34:40:17:df:e3:
                    dd:a3:99:5a:70:ca:55:f2:eb:a5:19:f7:6f:cf:51:
                    07:27:9d:14:72:e0:5e:76:0f:6c:4b:32:6a:dd:4a:
                    67:67:65:f5:29:f5:50:5c:f3:29:19:c1:81:f6:5c:
                    63:c4:85:9c:56:9b:91:72:f0:e8:a1:8d:ca:2f:c1:
                    05:a4:65:1c:51:d3:78:30:ba:b0:24:a4:ff:b3:e4:
                    25:df:18:3b:a1:15:77:c8:c1:90:ce:f3:36:05:db:
                    f8:af:f9:44:b9:72:a5:e5:9d:de:10:57:99:ca:2e:
                    1f:32:91:58:a7:5e:d0:50:ff:3e:9e:2c:72:68:78:
                    b1:08:fa:00:53:3c:dd:18:8e:10:70:e0:46:ba:5b:
                    52:ac:9c:7e:ac:bd:1a:fb:d6:29:79:61:4d:3e:df:
                    f6:a0:37:97:c6:23:ad:15:f7:13:ea:81:12:7f:19:
                    e4:4c:12:01:36:2c:a5:8d:cc:0c:8d:a3:f1:9b:1f:
                    f5:23:8b:2d:ba:3a:17:5e:60:43:3d:e9:35:a0:21:
                    66:ed:92:f6:40:fb:ad:ff:a8:5c:00:6b:ab:51:48:
                    45:76:43:64:99:c4:c1:15:88:a2:12:7b:b0:a6:d0:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:02:0A:B8:9A:C6:B6:E4:D6:4D:BC:B5:12:02:C8:51:BB:34:98:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d437abf1-a2bf-322c-a452-2dbfc802d1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:2c:74:f6:bc:33:85:4b:7c:92:bd:2b:e4:b6:ca:7f:8f:
         50:f6:6d:9e:17:59:90:c3:9e:1c:2f:5b:53:c7:7e:56:8b:5b:
         ce:69:54:ed:b6:af:77:6b:53:70:7f:93:a9:93:91:7a:a8:26:
         a9:ba:6f:66:63:59:6f:97:95:da:78:74:e2:36:19:b9:57:48:
         da:12:d0:1d:e2:92:7d:13:7c:ac:cf:fe:03:4b:99:ce:70:1d:
         2e:31:34:1f:da:e5:ba:dd:1f:1d:62:31:f8:14:70:03:56:64:
         ab:25:c3:a6:1c:41:a6:5b:d8:ad:a8:2d:b2:b5:8c:2c:05:c9:
         a6:70:35:75:65:fc:49:8a:18:05:38:a4:61:65:84:07:a1:6e:
         06:c8:09:67:e9:57:33:a9:56:d6:c9:3e:4d:d6:19:9b:95:4f:
         02:a6:92:90:83:3e:d7:7b:3c:94:13:68:fc:01:eb:8c:16:c1:
         df:a2:e9:0e:ae:a3:77:8f:5b:f6:9b:ee:58:b9:cd:a9:ba:e7:
         48:be:e3:a0:84:e5:a7:5b:2c:10:84:87:e6:98:2a:57:67:54:
         d1:b6:fd:d5:c3:07:97:2b:0c:e5:4a:ee:0b:2c:87:6a:85:c4:
         a4:48:48:56:70:4c:d5:d3:c0:58:aa:c6:ac:22:e1:05:7e:7e:
         ab:72:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:48 2025 by rpki-client