Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa
File:                     dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa (raw, json)
Hash identifier:          dFKpS4cHKr14N4eZU0xSxCFYKcNBcAA0UYPIWKfDeIM=
Subject key identifier:   60:71:12:B6:0C:76:12:C4:93:FD:DC:76:16:F9:C9:B5:22:3B:B5:78
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00697B2AB9498157C0AE480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8268::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:97:b2:ab:94:98:15:7c:0a:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f4d34ead-a32b-4369-9c01-4257f745ebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:01:40:46:23:66:ca:50:da:59:b7:0b:28:
                    15:26:4d:7f:17:df:67:a4:3d:1f:15:e1:f6:7e:98:
                    29:b3:49:ca:bf:91:36:cd:a7:1e:6e:78:1e:83:8a:
                    81:30:94:b2:e6:e8:83:f2:2a:08:bd:be:8b:8c:f0:
                    bc:44:01:20:8f:30:29:93:ab:a8:73:07:80:21:a6:
                    be:f7:c4:af:c2:de:63:95:d7:37:20:84:eb:13:ef:
                    68:c4:f5:ba:d4:9b:69:01:37:2b:df:da:58:ac:f9:
                    20:e9:e9:d8:ec:5d:60:32:08:f7:af:3f:30:8c:a6:
                    6f:c8:db:e1:99:d5:de:42:9e:aa:cd:04:c1:fc:bd:
                    21:85:83:f6:a7:5c:47:ba:28:eb:23:53:9d:bb:06:
                    66:fc:cd:a3:cc:27:37:aa:42:5e:f8:65:cc:7c:b3:
                    9f:05:a4:01:96:d1:d5:82:06:80:51:f7:11:e2:8a:
                    2f:47:13:31:b7:a9:c2:a2:b1:f6:73:ad:2d:33:db:
                    7a:85:a7:03:e5:fb:b5:77:af:46:ba:f2:1f:90:f6:
                    59:2b:6a:81:8c:57:3a:65:c6:00:3c:54:d2:b2:d2:
                    24:8f:52:65:a0:a2:9e:da:8b:b3:98:c3:f0:f8:cf:
                    37:5b:18:67:61:e7:a7:08:39:a5:74:58:92:71:26:
                    22:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:12:B6:0C:76:12:C4:93:FD:DC:76:16:F9:C9:B5:22:3B:B5:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dbecde4a-f954-39d7-a9df-bfd0f9f5b98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8268::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9d:65:a1:d2:f6:a7:29:d8:59:9d:08:2e:1c:28:00:3d:03:
         5c:d4:e9:0a:21:eb:db:79:0f:9c:50:dc:20:eb:af:2f:f9:dd:
         22:d1:f5:6e:c3:64:69:87:04:92:00:1e:2b:de:de:08:73:4a:
         9a:66:b2:ab:31:c7:1d:cf:70:22:1a:d4:eb:de:9b:4b:12:71:
         cf:3b:de:d4:11:32:31:f8:db:4e:c3:08:15:2f:47:d9:6c:bc:
         a3:23:1e:5f:cc:04:cd:5f:34:31:5b:75:e9:4c:0c:0c:44:96:
         d6:a3:6a:7f:2c:68:df:89:a8:f0:39:c2:ac:77:a7:f7:61:a5:
         09:37:44:ab:1a:ca:48:f9:f5:46:bc:90:29:f7:76:c9:93:de:
         2c:0b:cb:77:b4:de:0e:05:96:c2:36:7c:df:51:0a:d9:52:d4:
         ba:92:b9:1f:60:36:64:c9:ff:b6:96:7f:91:fa:b2:cb:94:47:
         fa:78:b9:da:c2:77:d4:48:bb:0b:a6:7b:4c:0e:3d:ac:7b:41:
         05:70:42:56:58:38:df:bf:bb:24:4c:80:77:7d:f2:3e:7c:12:
         4a:ee:1b:7e:a8:2b:a8:e6:2a:08:4d:f8:29:c8:20:c7:0f:e2:
         fc:8a:61:13:40:89:00:c2:d6:b6:fb:d5:94:54:de:82:38:b1:
         95:57:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:28 2025 by rpki-client