Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/288627d8-1600-3cbd-82ed-c2906b597a63.roa
File:                     288627d8-1600-3cbd-82ed-c2906b597a63.roa (raw, json)
Hash identifier:          luXk892IiEpWr7wGA6BF0mJg9oaQjJIzYb02ssLJRSA=
Subject key identifier:   07:91:69:61:E5:6D:EF:14:44:52:71:92:C0:2E:6A:9D:A5:EE:90:DA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7DA8531CBDE8AAAAEEC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/288627d8-1600-3cbd-82ed-c2906b597a63.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:894f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7d:a8:53:1c:bd:e8:aa:aa:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=dd6b059a-6cb5-47da-af80-849f55f06192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:9b:53:58:3d:e4:34:7c:23:0d:8b:61:12:
                    38:1d:b0:9e:1f:3e:bf:2b:58:cd:0c:1c:35:b5:e8:
                    04:5c:84:64:94:13:43:f4:59:1a:e9:03:6d:c0:19:
                    cc:5d:7e:59:f6:e4:c5:1f:d4:f9:2a:d2:06:5c:34:
                    cc:b5:77:88:b6:9b:67:da:98:73:d5:85:23:4f:a7:
                    17:0a:31:a9:38:f5:9d:f3:4c:57:3a:48:f1:fa:fe:
                    bf:7e:6b:3f:9a:71:18:a3:46:09:b1:e9:45:89:0f:
                    43:27:aa:c1:e9:eb:cd:19:c1:93:1a:60:65:bb:f3:
                    86:ba:cd:4b:b4:12:10:4d:f1:72:ae:d8:42:9b:64:
                    c4:76:00:be:10:a6:ca:f6:c6:fe:4f:52:b5:52:42:
                    2d:f1:d4:1d:dc:97:3e:80:75:b1:90:28:33:84:ec:
                    34:e9:76:29:a9:ae:97:13:f4:03:d7:14:17:57:61:
                    e5:b8:18:e4:80:5b:3a:b0:38:29:e2:cf:2a:e5:f5:
                    45:95:e4:c1:ba:f0:cf:c7:d5:f3:dc:af:6b:b1:de:
                    97:84:c5:df:d7:bc:f5:7c:81:e8:fc:7b:f2:c3:bd:
                    c2:49:60:21:c8:86:6d:5c:84:fb:a5:bd:cc:49:08:
                    25:ba:bd:28:6a:9d:13:98:b4:0d:bf:54:76:1c:f0:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:91:69:61:E5:6D:EF:14:44:52:71:92:C0:2E:6A:9D:A5:EE:90:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/288627d8-1600-3cbd-82ed-c2906b597a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:894f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:8e:d4:f6:5a:9d:8a:e9:03:29:5c:f2:6b:a9:a6:44:57:
         d5:73:f6:d7:04:25:10:96:83:57:b6:fe:2a:3c:6e:7e:0c:ba:
         cb:b8:02:9e:ed:5b:f7:6b:9c:ba:58:d0:28:7c:60:84:11:ed:
         f8:17:b7:02:0f:66:d9:7d:31:90:49:ca:d2:80:f5:c5:f1:2f:
         0f:fa:aa:2f:f5:61:67:09:5f:f7:1b:76:b1:08:a3:83:e2:6d:
         0c:30:2e:03:85:4d:f3:f5:c5:44:48:d7:6b:5c:f5:3f:5a:c5:
         ef:9e:bf:ba:89:90:8f:4d:c7:12:fc:ea:be:f8:54:9c:97:a6:
         07:c7:c0:4d:5f:42:06:95:35:47:16:6b:0e:35:f1:81:b6:eb:
         0c:42:90:e6:49:d4:d0:42:d1:d1:fd:d7:51:b0:74:71:21:82:
         a9:a1:a2:e2:77:be:12:7a:45:d3:52:95:76:e5:03:cc:3e:a2:
         08:25:a7:81:59:a6:73:39:a5:04:7c:d9:0d:e2:5c:3e:6a:e6:
         d1:83:d2:e2:d7:eb:98:51:b8:53:ce:ec:fb:36:0d:a5:6a:56:
         22:73:e6:a2:8b:40:d1:b8:22:7d:0d:57:82:3a:aa:66:86:49:
         01:23:57:8f:86:cf:07:90:d1:8e:00:2e:bf:bd:d1:89:de:4a:
         3d:d0:14:e4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P32oUxy96Kqq7sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZGQ2YjA1OWEtNmNiNS00N2RhLWFmODAtODQ5ZjU1ZjA2MTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlebU1g95DR8Iw2LYRI4HbCeHz6/K1jNDBw1
tegEXIRklBND9Fka6QNtwBnMXX5Z9uTFH9T5KtIGXDTMtXeItptn2phz1YUjT6cX
CjGpOPWd80xXOkjx+v6/fms/mnEYo0YJselFiQ9DJ6rB6evNGcGTGmBlu/OGus1L
tBIQTfFyrthCm2TEdgC+EKbK9sb+T1K1UkIt8dQd3Jc+gHWxkCgzhOw06XYpqa6X
E/QD1xQXV2HluBjkgFs6sDgp4s8q5fVFleTBuvDPx9Xz3K9rsd6XhMXf17z1fIHo
/Hvyw73CSWAhyIZtXIT7pb3MSQglur0oap0TmLQNv1R2HPAwcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAeRaWHlbe8URFJxksAuap2l7pDaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjg4NjI3ZDgtMTYwMC0z
Y2JkLTgyZWQtYzI5MDZiNTk3YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYlP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACrAjtT2Wp2K6QMpXPJrqaZEV9Vz9tcEJRCWg1e2/io8bn4Musu4
Ap7tW/drnLpY0Ch8YIQR7fgXtwIPZtl9MZBJytKA9cXxLw/6qi/1YWcJX/cbdrEI
o4PibQwwLgOFTfP1xURI12tc9T9axe+ev7qJkI9NxxL86r74VJyXpgfHwE1fQgaV
NUcWaw418YG26wxCkOZJ1NBC0dH911GwdHEhgqmhouJ3vhJ6RdNSlXblA8w+oggl
p4FZpnM5pQR82Q3iXD5q5tGD0uLX65hRuFPO7Ps2DaVqViJz5qKLQNG4In0NV4I6
qmaGSQEjV4+GzweQ0Y4ALr+90YneSj3QFOQ=
-----END CERTIFICATE-----
Generated at Sat May 10 21:01:57 2025 by rpki-client