Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27c34578-c575-3d57-b357-3bd2d112f427.roa
File:                     27c34578-c575-3d57-b357-3bd2d112f427.roa (raw, json)
Hash identifier:          qdBu8A8yUgWyr10mDIeu8krxHYDw26nVzFPW/8iuygA=
Subject key identifier:   71:C5:2D:2F:A0:87:5C:A7:56:2A:4D:C4:B7:46:71:C7:FB:A1:A3:BA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9D3155B400EAFA0B8980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27c34578-c575-3d57-b357-3bd2d112f427.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8053::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9d:31:55:b4:00:ea:fa:0b:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=c5cad89c-aa34-497d-aad7-e4b188e689e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6a:75:0f:04:83:6d:1e:3a:94:14:3c:de:73:
                    1f:72:80:7a:1b:68:58:46:3b:8a:1f:23:4e:7d:a4:
                    01:6b:92:7b:f7:53:10:9b:05:bd:44:f9:47:4e:8b:
                    c1:0f:48:5b:71:5e:ee:81:91:b7:77:1f:7d:90:c3:
                    d7:c7:dc:02:de:dd:73:71:16:24:68:05:7c:2e:86:
                    26:c1:8e:5e:c5:1b:ea:8f:ce:7e:e1:ed:a1:d3:bd:
                    53:e0:99:ed:fd:59:41:aa:83:47:1a:32:00:e5:34:
                    5d:00:92:b9:ea:1a:5c:cf:e3:6d:50:c4:59:d7:6e:
                    11:af:eb:db:32:7b:fb:04:21:c8:e0:5b:4d:db:06:
                    9a:1f:d2:52:6d:d1:12:4a:44:3b:31:56:21:f4:c2:
                    96:c6:3d:b6:e9:9a:f9:20:de:3f:95:8d:c3:ce:a2:
                    db:7e:cf:d9:77:9a:10:ec:64:e9:d7:de:36:7a:19:
                    f6:b4:f0:15:09:c4:5f:e3:93:22:83:2a:d0:61:f3:
                    ba:b8:12:04:50:1f:56:6d:fe:12:9a:82:d7:ae:87:
                    ac:90:f1:a5:ce:6f:1d:e9:31:79:e5:62:e9:a6:f3:
                    5f:86:2f:ed:93:c6:cc:46:a7:d5:fe:72:06:ce:6b:
                    ce:c1:60:a0:a2:81:c4:cb:6f:52:89:c4:a1:b1:3a:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:2D:2F:A0:87:5C:A7:56:2A:4D:C4:B7:46:71:C7:FB:A1:A3:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27c34578-c575-3d57-b357-3bd2d112f427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8053::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:ba:e0:e2:1e:11:42:e6:70:ae:5f:a3:cc:05:04:9f:b3:
         9d:de:f5:7c:a6:aa:3b:88:9d:11:0d:a5:93:57:0b:20:d8:e5:
         96:1d:e4:59:31:39:39:23:86:7f:ad:49:ca:d3:e4:05:42:99:
         2d:9a:88:11:5a:9a:79:01:1a:ea:eb:c7:e7:6e:51:e9:fe:2c:
         d7:9b:39:65:bb:c9:5e:0e:c6:82:26:a6:2c:82:30:2c:34:87:
         d0:f8:fb:7e:75:52:d3:2c:d2:c1:ef:dc:2e:3a:51:de:5b:eb:
         24:32:a1:d0:2e:10:b2:a0:57:23:2c:71:69:18:33:af:2f:7c:
         df:3f:6c:b6:00:18:ca:57:c0:63:00:a3:2c:4a:e2:93:ba:7b:
         59:6e:2e:09:a3:bf:a1:7f:d2:0e:5f:44:70:0f:ff:75:e1:ba:
         c0:9c:d9:88:00:31:43:18:de:fa:e4:7d:90:da:b5:6f:75:5a:
         e8:10:9f:a9:bc:2d:41:51:26:7a:30:43:71:de:8b:d9:3b:69:
         2a:70:b4:4b:92:a9:5c:e5:80:b3:8e:ad:b7:34:e9:e2:b5:8c:
         30:15:49:53:10:a2:da:c7:71:23:81:98:d5:2f:72:74:05:85:
         7a:bc:2e:b4:4f:2a:77:b6:c0:ab:c4:48:ad:a4:d3:85:1b:eb:
         42:b1:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:05:45 2025 by rpki-client