Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f9e7c2ff-c8fd-3595-b3f6-d7232d61b7fa.roa
File:                     f9e7c2ff-c8fd-3595-b3f6-d7232d61b7fa.roa (raw, json)
Hash identifier:          cJV6BpHRmnTGPf4Tk0bBOZHFkYD8GJpppvz7/icTNaA=
Subject key identifier:   2C:A8:AB:6C:7B:B2:94:43:45:AD:25:A1:60:99:0A:83:BF:50:3F:7C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F74CCC183AD5EB8133480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f9e7c2ff-c8fd-3595-b3f6-d7232d61b7fa.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:74:cc:c1:83:ad:5e:b8:13:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=5647a534-3eb0-47f7-8cea-0696c9daaf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:c4:b1:91:4b:2b:ae:66:21:8a:eb:42:c6:
                    81:a8:c7:47:a7:f4:13:1f:21:33:36:80:75:a8:04:
                    1e:48:6e:c4:05:ea:82:7e:ea:3d:e7:1c:92:84:8a:
                    f9:9e:4c:f2:c7:65:be:07:52:c9:c4:23:1c:8b:6d:
                    f5:f6:d0:f8:b3:aa:07:44:5c:8e:2f:c5:91:44:e8:
                    7b:ad:79:35:88:80:c1:2d:7c:fc:4a:d7:25:24:c2:
                    e6:6f:b0:73:ee:84:03:ad:0c:8f:4d:df:7c:59:56:
                    ff:61:e6:c3:2a:e9:d6:db:c8:ff:05:f2:ec:bf:1d:
                    aa:49:a4:ed:ce:9b:c4:03:27:53:53:e8:cb:93:e3:
                    2f:6f:61:be:2e:fb:9c:1b:0b:5b:56:db:fd:5f:a7:
                    75:d4:54:94:0c:fb:63:bf:e3:02:3c:af:a2:96:fc:
                    bb:02:1a:91:51:f1:25:ee:c6:cf:be:87:4f:ff:3e:
                    ef:8a:df:e7:65:0c:08:26:30:66:d7:16:3e:1f:90:
                    44:4a:21:49:82:43:63:ef:61:65:09:1a:8b:6c:ff:
                    f8:2e:46:cb:3c:5d:8f:0c:36:29:ab:50:2c:bd:f4:
                    cd:9c:61:fe:93:2e:ba:fc:cf:a5:fe:3a:2d:36:b9:
                    41:12:54:31:e5:54:aa:a8:7f:df:1e:b3:ca:40:7b:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A8:AB:6C:7B:B2:94:43:45:AD:25:A1:60:99:0A:83:BF:50:3F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f9e7c2ff-c8fd-3595-b3f6-d7232d61b7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:2e:22:30:51:a8:fe:58:a4:42:ef:eb:85:65:bf:e7:de:
         38:97:67:b4:64:12:fb:cb:20:40:89:ce:81:9f:26:96:00:8b:
         e3:b1:d9:3d:01:7e:c2:b6:53:df:0f:58:ef:52:96:3b:8e:81:
         fd:7d:6c:b2:d3:e4:17:6e:de:ce:8b:a1:3e:9f:43:b0:dd:7b:
         7b:69:08:e1:e1:32:b1:ae:17:f4:81:3a:e4:a7:61:45:3e:50:
         ef:aa:45:43:ad:72:12:1d:a9:e5:b9:ad:42:8b:b7:76:f4:55:
         28:44:87:f3:38:b1:c8:a1:ff:a9:b1:78:f1:3f:97:fa:49:ee:
         63:15:2a:10:f7:0a:b5:46:09:76:f9:37:9a:33:5f:b2:c9:3a:
         86:3f:92:77:10:e5:cf:fa:81:16:d1:d8:24:4e:c9:dd:42:a3:
         19:fe:d6:76:9a:dd:05:cc:85:f2:e1:a1:c1:97:f1:b8:8e:d4:
         34:6c:63:b8:b9:81:e8:42:43:37:7c:55:ad:49:0c:7b:60:91:
         e4:ef:9a:51:29:28:23:6f:da:42:b3:be:d2:29:61:ef:ae:78:
         65:4c:be:1b:2c:ac:1f:94:4a:d6:3b:20:85:60:70:c0:ac:e2:
         8a:96:6b:4c:d7:9b:2a:14:34:c4:92:be:e6:06:14:c2:71:7c:
         b4:14:0e:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3TMwYOtXrgTNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
NTY0N2E1MzQtM2ViMC00N2Y3LThjZWEtMDY5NmM5ZGFhZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtTEsZFLK65mIYrrQsaBqMdHp/QTHyEzNoB1
qAQeSG7EBeqCfuo95xyShIr5nkzyx2W+B1LJxCMci2319tD4s6oHRFyOL8WRROh7
rXk1iIDBLXz8StclJMLmb7Bz7oQDrQyPTd98WVb/YebDKunW28j/BfLsvx2qSaTt
zpvEAydTU+jLk+Mvb2G+LvucGwtbVtv9X6d11FSUDPtjv+MCPK+ilvy7AhqRUfEl
7sbPvodP/z7vit/nZQwIJjBm1xY+H5BESiFJgkNj72FlCRqLbP/4LkbLPF2PDDYp
q1AsvfTNnGH+ky66/M+l/jotNrlBElQx5VSqqH/fHrPKQHsF1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCyoq2x7spRDRa0loWCZCoO/UD98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjllN2MyZmYtYzhmZC0z
NTk1LWIzZjYtZDcyMzJkNjFiN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJu2LiIwUaj+WKRC7+uFZb/n3jiXZ7RkEvvLIECJzoGfJpYAi+Ox
2T0BfsK2U98PWO9SljuOgf19bLLT5Bdu3s6LoT6fQ7Dde3tpCOHhMrGuF/SBOuSn
YUU+UO+qRUOtchIdqeW5rUKLt3b0VShEh/M4scih/6mxePE/l/pJ7mMVKhD3CrVG
CXb5N5ozX7LJOoY/kncQ5c/6gRbR2CROyd1Coxn+1naa3QXMhfLhocGX8biO1DRs
Y7i5gehCQzd8Va1JDHtgkeTvmlEpKCNv2kKzvtIpYe+ueGVMvhssrB+UStY7IIVg
cMCs4oqWa0zXmyoUNMSSvuYGFMJxfLQUDnM=
-----END CERTIFICATE-----
Generated at Fri Jun 6 18:11:12 2025 by rpki-client