Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/274bd625-90fa-36d1-ae4a-4a32db0ccdcf.roa
File:                     274bd625-90fa-36d1-ae4a-4a32db0ccdcf.roa (raw, json)
Hash identifier:          HhS7KhSNQ+gvQa7hEWRMQjUZVOKya0Y9JTBvJfUTExY=
Subject key identifier:   C3:CC:A1:CC:C1:17:5A:DA:F2:FA:D0:49:79:0F:E3:21:CD:E1:0F:D3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA035CE937C83E0481700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/274bd625-90fa-36d1-ae4a-4a32db0ccdcf.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:819a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a0:35:ce:93:7c:83:e0:48:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=f1e575ee-fc00-4bdc-b16f-a434a9a171d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:48:78:d8:03:cb:59:00:fe:1c:e5:ae:42:
                    79:4b:c5:77:ad:3b:c3:3f:c3:7f:95:8a:9a:43:33:
                    40:05:31:4a:23:7f:02:03:e2:b0:6c:28:de:39:ea:
                    e7:cd:b8:01:05:f1:a2:57:cf:69:9c:94:c7:b4:11:
                    dc:a2:b5:f2:f1:36:08:74:66:e6:2d:b1:b1:3c:a1:
                    4c:9d:ac:cb:b1:6c:7c:4e:85:78:fa:b1:8e:34:49:
                    e2:22:85:04:38:87:77:fb:61:1b:80:64:55:ff:1f:
                    a6:1c:fc:b5:d8:88:1a:e6:22:1f:5b:a6:1f:30:45:
                    62:c1:2b:d9:72:6a:45:36:53:85:a5:70:0d:fd:bf:
                    19:6e:94:b9:08:df:0b:ec:0d:55:90:a9:2d:3f:c3:
                    42:ee:df:2a:dd:12:31:26:a3:28:ed:a9:7c:78:f9:
                    80:ef:7b:05:0c:55:12:27:f0:cd:5a:38:f3:94:3f:
                    4b:fa:0f:1f:3f:fc:04:4c:1b:19:1f:f1:f9:f9:f8:
                    95:ae:ac:da:6c:6f:57:65:d4:8e:0d:a8:7d:6b:d6:
                    4b:e0:4a:1f:f4:cd:c1:84:f7:dc:81:b9:24:ca:b9:
                    23:af:60:3d:f0:3a:66:35:15:b2:4f:7e:d0:70:d5:
                    8b:40:2c:4a:94:ba:c1:22:f1:96:f7:10:6d:24:01:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CC:A1:CC:C1:17:5A:DA:F2:FA:D0:49:79:0F:E3:21:CD:E1:0F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/274bd625-90fa-36d1-ae4a-4a32db0ccdcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:819a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:99:5a:92:5b:c5:6f:f8:98:6c:d2:bb:56:a7:20:87:03:
         03:c4:89:a9:f6:a1:01:f3:fb:d0:00:b9:7d:bb:b0:14:e2:09:
         c4:89:55:30:b0:08:2f:12:88:2e:a2:d5:c8:cd:0d:95:05:f1:
         b5:c3:38:17:4e:3f:9e:1d:a2:e8:e0:a1:06:75:a5:03:91:e6:
         d8:04:4a:5e:ff:c7:1c:8a:fe:bd:c3:56:5a:58:2c:ad:bc:3d:
         58:fe:92:56:cd:70:26:54:b4:63:88:3c:5b:8d:3a:6f:e0:ab:
         b0:a0:ff:d6:94:28:a1:6c:50:03:a5:75:3c:e4:40:3b:fa:3b:
         99:69:41:e7:6d:e4:38:b4:f8:c5:2d:df:6c:b8:4b:ed:6c:da:
         bf:d8:f8:40:4b:b5:64:3b:d1:f3:dd:da:8d:8f:fe:1e:4b:93:
         42:24:eb:1b:aa:df:9d:9b:30:91:f8:15:da:98:f7:2d:6a:bf:
         87:0e:0d:de:aa:a3:19:bb:5f:e8:64:48:5a:11:39:86:6c:f5:
         0f:88:3b:58:cb:35:5f:0c:7b:d2:b0:4a:47:a8:b7:94:0a:13:
         28:1f:91:bb:16:2e:2e:1b:d4:31:f8:dd:5d:b8:7b:9a:b2:66:
         ed:96:4b:0e:c9:19:68:68:91:b7:df:7c:79:d2:5f:b1:17:54:
         11:46:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:49:03 2025 by rpki-client