Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/164b66ef-57d3-361c-947d-80181857d309.roa
File:                     164b66ef-57d3-361c-947d-80181857d309.roa (raw, json)
Hash identifier:          icfiHqAUlpl64mrBdso5RoBIua06LIelABAdqUq2oCU=
Subject key identifier:   C1:70:FF:BF:A5:73:FD:E1:6E:72:A9:86:41:2E:36:1F:9C:26:3D:53
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9CDFFFED9670C47914C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/164b66ef-57d3-361c-947d-80181857d309.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8036::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9c:df:ff:ed:96:70:c4:79:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=bf2e21fd-62f4-4402-a914-4b1a1204f93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:81:37:0a:60:d6:79:6c:6c:ac:37:38:cc:
                    3d:e7:04:43:61:91:23:c0:fd:3f:ea:a0:14:34:82:
                    2b:91:39:b5:73:7b:1f:07:87:7a:0d:f2:83:32:c4:
                    3a:4d:0b:02:bc:a0:89:92:bf:5e:c6:28:d5:1a:c5:
                    98:72:da:eb:23:ab:b5:fe:e9:30:06:08:47:84:fd:
                    bb:b4:bd:b0:74:cb:da:6d:0e:8b:09:f9:60:4b:85:
                    22:8e:4f:29:99:07:cb:14:b3:fc:73:a0:79:3c:ac:
                    a0:7d:8f:f5:e7:a2:37:8a:cc:c6:24:6d:42:69:f8:
                    3a:03:42:00:85:75:4d:f6:53:cb:e1:16:58:03:19:
                    9f:58:6b:3e:e5:f8:2c:33:00:65:bf:61:46:b3:84:
                    a2:0b:fc:f2:43:52:7f:08:65:4f:08:ce:e2:95:30:
                    53:dd:30:56:fc:35:48:f4:c0:67:45:91:e8:98:d5:
                    f3:4b:8d:60:09:3e:36:c3:c7:cc:23:90:32:5e:af:
                    3c:44:fe:e5:2a:d4:49:e8:93:25:5e:00:95:e2:a6:
                    8d:51:9d:ca:23:96:18:cc:c2:d3:4f:61:62:70:f0:
                    a2:38:98:3b:60:36:1d:17:76:3e:97:de:c1:0e:06:
                    dd:ef:e1:e2:37:ab:97:bd:58:ed:bf:b5:1a:4f:b5:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:FF:BF:A5:73:FD:E1:6E:72:A9:86:41:2E:36:1F:9C:26:3D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/164b66ef-57d3-361c-947d-80181857d309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8036::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:59:cd:83:7d:b8:bd:1a:fe:c6:49:1f:42:9d:78:15:ec:a2:
         63:95:52:fa:4e:b0:e5:9b:d7:1f:5c:17:ee:ef:d7:73:36:cd:
         a7:4c:7c:7f:89:65:1e:e5:b6:fe:f6:02:ed:32:63:fe:d0:d0:
         e4:b6:7b:00:4d:97:51:d8:e9:44:d3:10:cd:59:98:d9:3c:32:
         2d:6b:56:35:5e:16:eb:21:9c:c3:6e:17:b2:7e:a1:d1:f1:e2:
         20:53:89:ad:c2:e5:8e:3b:c5:02:ec:ed:d4:8e:0d:9d:6a:a3:
         76:b3:d3:cb:8d:3d:f1:0c:0c:8b:a6:04:58:38:b4:25:87:ca:
         01:ed:ad:d3:2a:49:53:14:31:9c:52:67:c1:06:b8:c2:ae:a8:
         78:4a:c3:a0:47:c6:69:66:41:b8:8b:73:3e:bc:6a:98:9c:47:
         02:c6:e9:f8:bd:89:43:bb:20:0e:2b:f7:4e:ea:40:d9:da:2a:
         cd:e2:c6:6a:fb:09:9f:49:f3:da:4f:15:59:80:cd:63:c5:98:
         6f:ea:ef:f8:f8:13:a0:61:4c:f1:7c:16:d1:eb:29:68:a4:5b:
         e2:29:89:4e:7d:4a:b5:43:71:03:85:07:2e:d5:44:e3:e2:12:
         de:8e:e7:3d:14:bc:b1:85:4e:a0:41:6c:f1:1c:da:6a:df:04:
         92:2f:36:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P5zf/+2WcMR5FMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
YmYyZTIxZmQtNjJmNC00NDAyLWE5MTQtNGIxYTEyMDRmOTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu36BNwpg1nlsbKw3OMw95wRDYZEjwP0/6qAU
NIIrkTm1c3sfB4d6DfKDMsQ6TQsCvKCJkr9exijVGsWYctrrI6u1/ukwBghHhP27
tL2wdMvabQ6LCflgS4Uijk8pmQfLFLP8c6B5PKygfY/156I3iszGJG1Cafg6A0IA
hXVN9lPL4RZYAxmfWGs+5fgsMwBlv2FGs4SiC/zyQ1J/CGVPCM7ilTBT3TBW/DVI
9MBnRZHomNXzS41gCT42w8fMI5AyXq88RP7lKtRJ6JMlXgCV4qaNUZ3KI5YYzMLT
T2FicPCiOJg7YDYdF3Y+l97BDgbd7+HiN6uXvVjtv7UaT7W1awIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMFw/7+lc/3hbnKphkEuNh+cJj1TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTY0YjY2ZWYtNTdkMy0z
NjFjLTk0N2QtODAxODE4NTdkMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEJZzYN9uL0a/sZJH0KdeBXsomOVUvpOsOWb1x9cF+7v13M2zadM
fH+JZR7ltv72Au0yY/7Q0OS2ewBNl1HY6UTTEM1ZmNk8Mi1rVjVeFushnMNuF7J+
odHx4iBTia3C5Y47xQLs7dSODZ1qo3az08uNPfEMDIumBFg4tCWHygHtrdMqSVMU
MZxSZ8EGuMKuqHhKw6BHxmlmQbiLcz68apicRwLG6fi9iUO7IA4r907qQNnaKs3i
xmr7CZ9J89pPFVmAzWPFmG/q7/j4E6BhTPF8FtHrKWikW+IpiU59SrVDcQOFBy7V
ROPiEt6O5z0UvLGFTqBBbPEc2mrfBJIvNko=
-----END CERTIFICATE-----
Generated at Tue May 6 16:17:37 2025 by rpki-client