Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa
File:                     f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa (raw, json)
Hash identifier:          1eokqB8L1SpgwfdhmAsO+3OKiDXa3uYldZc2WWwXQjI=
Subject key identifier:   78:9D:56:E5:77:3E:0A:AA:BA:E1:1B:90:72:E7:D4:72:9A:59:7F:65
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7944941D0576F5D4BA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8079::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:79:44:94:1d:05:76:f5:d4:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=ad8cfb93-edb4-4446-9812-ad29c652673d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:8d:34:eb:f8:d2:90:9a:bc:ad:69:c0:34:
                    4d:09:d1:34:4f:89:f6:2c:88:1e:0e:67:55:b1:91:
                    28:0a:3f:28:ab:cb:b8:81:b2:29:3e:c1:4c:b9:ae:
                    8a:44:8c:cc:65:08:c5:46:36:06:f9:b6:93:37:cd:
                    a7:6b:24:91:a7:59:78:80:9e:cf:7a:ff:5c:c6:c7:
                    5a:ac:ba:66:e6:95:32:3b:9d:35:73:ef:ad:d4:4e:
                    07:82:f1:21:c0:94:db:c3:26:96:61:6c:32:e3:24:
                    5b:1a:04:51:25:d1:a1:b2:36:21:86:bc:4e:9f:3f:
                    4b:50:e4:a5:ad:e0:81:4b:36:0c:a4:72:af:c4:88:
                    be:5d:40:19:21:db:b7:47:54:81:bb:fb:4b:5d:c7:
                    00:64:95:d3:bf:16:92:f0:68:ef:a4:a5:7b:ba:99:
                    e3:54:cf:9d:f9:e3:f1:76:9a:60:4b:d5:c1:85:af:
                    02:e8:35:38:a3:5a:1a:30:f0:cf:5e:e0:06:75:bf:
                    65:e2:05:05:29:f2:14:78:2e:8a:89:81:ea:c1:a7:
                    5a:45:d9:c5:f1:61:22:88:3f:e2:6e:78:8c:2e:f4:
                    06:3b:8e:32:37:02:43:40:1c:d6:15:65:1b:43:ac:
                    4d:41:ac:78:b8:c1:f9:87:5a:49:3c:a9:88:c2:c5:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:56:E5:77:3E:0A:AA:BA:E1:1B:90:72:E7:D4:72:9A:59:7F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8079::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:c5:1f:6c:a5:4c:a0:a4:9a:12:2c:37:9e:f2:a5:b3:dd:
         ac:ae:bd:5c:80:bf:ab:be:99:da:84:4e:5a:cd:47:fc:a6:bc:
         d1:8c:b9:03:33:7b:16:6a:93:8e:c9:35:e1:7a:74:90:5e:65:
         ea:2d:ad:32:bc:d4:3a:c0:fa:fa:f7:30:df:f8:96:59:49:7c:
         6d:bc:91:fd:f4:84:9b:27:81:54:98:2f:8a:7e:fa:3d:07:b3:
         c1:f7:30:0b:ce:9c:c1:90:73:cb:7d:06:db:65:07:88:6a:0d:
         d9:e5:73:97:5c:9b:e7:9a:a6:c8:64:4f:92:67:28:28:6a:c0:
         e6:a3:52:e7:41:0c:fc:0c:1d:6c:95:1b:fa:e1:cd:4e:4d:9b:
         61:5b:4f:0e:d8:5c:63:be:d2:8b:6c:78:12:d2:06:d8:42:d2:
         5a:c3:3c:62:64:a7:a1:d7:6c:0d:04:0e:00:1d:24:ad:c8:b5:
         ee:49:b9:f5:06:00:71:07:b0:5f:d4:57:e2:1f:4a:44:d2:73:
         94:16:6e:c3:66:fd:df:51:74:13:63:18:da:56:87:9b:d8:0d:
         62:a7:c5:d8:5a:ab:b1:86:fc:50:67:f3:1f:22:7e:f8:e2:72:
         56:c9:08:b8:63:65:c4:75:66:05:3e:52:28:10:61:15:9b:3e:
         98:db:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:09:27 2025 by rpki-client