Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dee51eb3-973c-3f44-b946-5dcef78b0eb4.roa
File:                     dee51eb3-973c-3f44-b946-5dcef78b0eb4.roa (raw, json)
Hash identifier:          leQe3qsh6TCAMyM6mAZlAfM82tcJYQX0DSDiZ2sRcZs=
Subject key identifier:   FB:D3:2D:09:49:ED:AD:B1:F4:A9:EE:0B:7A:A0:66:B4:AB:96:AE:83
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA4472D425417B278B9E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dee51eb3-973c-3f44-b946-5dcef78b0eb4.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:816a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a4:47:2d:42:54:17:b2:78:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=49735228-5067-4925-9516-ba207c1b62fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:68:2f:98:b2:a6:74:82:83:8e:37:6c:20:
                    61:ef:af:25:08:54:02:3d:8a:8c:0e:2d:ee:56:94:
                    55:47:e9:69:a9:28:3c:2c:fb:c2:f7:b4:20:ce:37:
                    34:63:ac:c5:07:d8:2b:a7:af:f3:5b:8c:35:a6:24:
                    d8:41:b6:fe:59:19:fe:bd:87:35:2d:98:b5:b7:2b:
                    bd:49:6c:02:b9:2b:62:61:c9:4f:25:fe:40:ac:f4:
                    05:51:f9:d4:6e:7d:a5:62:02:cd:23:7d:cb:1c:3a:
                    3d:39:c0:bb:67:d8:eb:f9:23:22:0e:c4:26:2c:21:
                    6e:a4:d1:e3:4c:9c:8a:ec:05:cd:93:3c:8e:51:31:
                    09:44:73:d8:cf:3f:d7:f4:e4:4d:21:f7:0d:ec:8b:
                    ce:8c:96:78:91:cc:a4:c9:a8:11:fc:1c:30:92:3d:
                    41:90:b4:6a:67:b0:86:d2:41:3a:94:ba:13:e9:f3:
                    6a:71:1e:bb:13:3d:66:04:99:63:d2:a9:76:bc:bf:
                    36:98:bd:8b:eb:49:6f:33:8d:bc:eb:3a:c2:e7:4d:
                    ff:ba:7c:02:3b:9b:16:1f:71:78:03:84:fd:6c:b2:
                    01:de:07:09:17:19:3d:1b:d1:55:8a:31:16:45:45:
                    1f:01:f6:96:ef:9f:fd:c3:6b:27:4e:63:40:f6:58:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D3:2D:09:49:ED:AD:B1:F4:A9:EE:0B:7A:A0:66:B4:AB:96:AE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dee51eb3-973c-3f44-b946-5dcef78b0eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:816a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:74:5d:95:4d:ed:88:3b:ae:df:e6:c4:97:6e:8a:59:63:00:
         7b:fd:3b:d3:f2:4f:8c:83:0c:cd:8a:96:d1:b6:ac:d3:1c:f2:
         45:a6:4b:43:e3:32:d6:50:04:6a:c8:07:16:e0:a1:b2:e7:2c:
         f3:d5:5d:06:2c:30:d8:66:2d:28:cd:d0:f7:e7:b1:ae:94:4d:
         e3:ec:1f:ba:2a:20:56:26:90:45:b3:d9:21:e0:29:6b:f3:a6:
         67:b1:a8:17:d1:6d:8d:e0:63:8d:db:70:86:cd:e7:0d:c3:0e:
         0c:50:40:65:1c:5a:cb:57:0c:7d:5d:4b:5e:dd:04:99:85:3a:
         04:d9:c1:25:ac:a0:aa:85:60:8c:df:84:3c:fe:38:cf:9b:97:
         c9:53:f7:2a:c2:5d:5f:40:0d:cc:32:d5:72:fa:d9:81:78:43:
         0d:55:2d:2e:01:fd:0f:49:5f:40:31:7a:81:08:61:f6:06:82:
         06:3c:45:01:39:9a:fa:59:f4:85:99:65:d3:19:7a:6a:0f:61:
         97:ee:f7:b7:6e:a1:fa:5b:b0:91:e3:16:23:a5:22:be:3d:a7:
         23:e0:72:7a:8e:f8:c5:3b:1d:08:14:53:9c:c9:ce:d4:ae:d0:
         8a:85:ac:44:f8:7b:57:a0:6b:2b:b9:05:d6:9f:c4:2d:a6:ba:
         82:17:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:50:49 2025 by rpki-client