Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa
File:                     e7bf5759-3e86-30fe-aa5b-842f953c444a.roa (raw, json)
Hash identifier:          gsc1jgFYaXA+pCak0fzDqEvKW0qXedNoyNUo8akP91w=
Subject key identifier:   CA:11:6A:06:47:15:49:1C:75:4E:67:08:28:2F:13:7C:6B:2F:D5:DD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066E295BE2D031986E8F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8312::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6e:29:5b:e2:d0:31:98:6e:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=2c7b9026-5862-4979-a9bb-f49597105938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:85:fb:e6:aa:5f:13:0f:7b:81:ce:17:60:
                    bc:8a:cc:8d:e7:d4:11:80:38:e2:2b:f6:60:47:06:
                    ca:01:cc:9b:9b:f0:02:f0:ab:2b:75:e4:c1:bf:da:
                    47:42:bf:b5:2f:0b:b8:86:bd:8b:d1:f1:91:8e:bb:
                    aa:be:6e:f3:d3:41:db:c7:01:2e:0b:70:a9:05:3a:
                    f6:a5:24:4a:12:73:d5:9c:26:d0:c3:05:e2:7e:0b:
                    e2:4f:2f:2e:48:60:c8:c7:6b:fe:eb:51:14:ad:b0:
                    a1:be:54:3f:22:6d:9b:0d:65:c8:b4:69:c8:e8:3c:
                    07:b6:3f:9d:61:60:04:9a:9e:30:46:39:b0:c0:8a:
                    f5:cd:9d:c5:b1:a6:6d:7b:78:5c:b0:f8:bd:9d:70:
                    d5:47:fa:21:40:e7:e6:6b:a4:ab:19:7e:49:2b:26:
                    bc:c6:58:b3:91:5f:7c:53:2b:d4:c2:b8:bb:a9:33:
                    e4:05:93:a5:6f:36:14:46:d3:c2:ff:92:b9:5e:53:
                    ae:fc:f4:7c:36:30:f6:db:35:4c:bd:8f:e4:77:ae:
                    45:7f:dd:1c:c7:12:82:7b:2b:99:8c:3f:d2:9f:b4:
                    5c:7b:59:23:e6:00:b7:d4:cc:6e:dd:29:f0:11:47:
                    9e:74:0c:8f:44:ee:bb:3d:32:a3:8f:34:56:d4:c8:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:11:6A:06:47:15:49:1C:75:4E:67:08:28:2F:13:7C:6B:2F:D5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8312::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:38:e7:56:9b:74:c8:8c:0f:96:57:8a:c3:0c:57:67:7f:d8:
         6d:82:93:06:25:22:db:a1:81:43:bf:ac:5c:92:e8:dd:08:e4:
         65:ea:b2:e9:bc:2d:db:3f:53:54:08:26:e7:c5:ca:b9:ba:43:
         6e:b7:8c:fa:e1:2b:d5:1f:ea:26:d8:04:68:c4:d0:fd:f5:46:
         93:32:e3:02:69:87:10:75:f6:ab:02:68:e3:a0:fc:bc:02:a2:
         08:56:99:fa:c6:7f:c3:7d:45:9a:85:0d:0c:38:a8:69:1b:9b:
         f1:85:d8:bb:46:52:a6:75:fb:68:75:2b:d7:f0:53:d6:91:7f:
         a4:43:e0:63:2f:fd:5f:12:e7:17:9b:b1:66:62:05:c3:15:e0:
         7e:9d:e3:e7:de:12:f8:02:49:6b:f4:93:8d:23:17:bb:1f:88:
         85:61:86:52:35:7b:10:6d:7b:89:b3:18:ab:c6:18:5f:e7:21:
         ef:09:64:b3:d4:ad:82:40:98:cb:35:d6:22:e9:80:4d:43:f3:
         67:ed:a3:37:61:e9:7c:32:3c:af:00:75:70:0c:a3:1b:b4:6c:
         3a:2a:dd:bc:1a:b2:fb:a5:a9:31:f5:8c:4e:13:c3:c6:98:75:
         c9:ee:6a:c0:86:3a:f2:53:ab:46:c5:bd:60:2e:10:09:70:81:
         bd:c6:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:22 2025 by rpki-client