Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa
File:                     ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa (raw, json)
Hash identifier:          lwGWVqbUb3TFoSt5pCIzRmAwFf+EktbU/LPW5jNGYxk=
Subject key identifier:   20:92:C2:0E:1A:F9:40:5C:0A:AA:92:50:48:59:66:EF:00:FB:8D:23
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0069B8F70E2DB6A706E9E40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:842a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:9b:8f:70:e2:db:6a:70:6e:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=12cd077b-d526-4872-8c17-b9c3b6e3453b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c0:33:75:70:0d:d4:ba:38:94:db:ab:47:b1:
                    06:cb:47:78:66:f5:ad:a3:d7:24:56:69:73:e1:71:
                    03:be:4a:a5:78:7f:02:72:d5:9f:2b:f8:87:13:0b:
                    86:fc:4f:8a:44:f8:f4:cf:6b:be:38:2f:eb:02:4b:
                    5b:7b:62:a0:36:d7:f0:b0:02:2b:9b:e4:59:d3:ba:
                    64:d7:f8:15:2a:f8:3c:d8:99:5e:31:cd:46:b9:2d:
                    f7:69:3a:1d:e5:1f:9e:10:a0:31:59:8f:2a:77:0f:
                    95:ee:b1:b0:30:c9:38:0f:58:aa:33:a2:d6:e6:08:
                    96:6f:8d:b3:01:46:8a:07:8a:2b:3c:b8:5d:d2:99:
                    2d:12:30:d8:e0:fc:e4:34:2c:0e:d9:b1:3a:63:b5:
                    76:f0:28:57:6f:4e:46:c9:9e:b5:5c:38:a7:45:8c:
                    25:c9:28:2b:95:43:d0:5e:d1:1b:3f:e1:19:ba:a0:
                    ac:ca:43:98:2f:cc:b3:29:e5:32:d9:1c:3c:8e:94:
                    3d:29:b1:98:fe:f0:2c:49:33:83:a4:9f:2d:f0:b0:
                    89:e8:51:da:9b:51:df:f1:40:c0:da:3f:f6:42:e1:
                    0b:34:35:2f:8d:be:6b:2e:dc:41:7b:f3:c4:01:14:
                    f7:48:a3:3e:2a:26:db:fa:f9:16:3b:e0:cb:db:fd:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:C2:0E:1A:F9:40:5C:0A:AA:92:50:48:59:66:EF:00:FB:8D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:842a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:55:8f:8f:cc:9c:b4:54:d6:6f:03:d9:60:e3:e4:5f:b1:
         4e:b9:8e:ee:41:05:38:51:35:5a:2b:f5:cd:43:a6:c5:ac:77:
         1d:ca:99:19:71:f4:ba:22:8e:2e:ae:e0:14:3b:ec:6a:e1:c0:
         52:0e:71:22:a5:4c:51:3a:a0:6a:ca:68:79:62:88:37:20:de:
         a5:01:b7:78:4a:42:f7:9f:04:53:c6:ea:1b:07:3d:07:61:57:
         6d:00:55:c4:1c:7b:ec:1f:d4:14:b7:00:24:c5:90:64:7a:00:
         9a:55:43:14:0a:a2:6a:3f:04:e5:84:f7:88:6c:40:ad:e1:ff:
         65:2f:0f:fb:c0:e5:4b:ef:97:b4:d3:34:36:45:ca:be:a4:e4:
         16:81:22:db:f8:06:02:20:fb:0b:ff:47:60:d1:cc:6e:f2:85:
         84:8f:53:ea:f1:06:47:b7:8a:6e:4c:4a:1f:99:1a:ae:b4:53:
         d2:00:d0:99:0d:43:7c:c6:8a:67:5d:71:d5:41:34:31:7c:18:
         59:94:99:ce:ac:9b:cd:31:c8:ca:60:59:3e:06:d9:f0:10:dc:
         9d:29:30:07:21:99:c9:49:b5:9d:39:94:9f:fe:f9:59:97:cb:
         f6:56:55:aa:77:5f:30:33:02:ca:93:1c:8f:fe:cb:fb:95:ed:
         b2:2b:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:32 2025 by rpki-client