Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31a2f635-598a-395a-b797-084cc96a8a94.roa
File:                     31a2f635-598a-395a-b797-084cc96a8a94.roa (raw, json)
Hash identifier:          CT3eqYGmxnASDHjgm9mpaCsjfqyhFdHSeiRld3z2EIw=
Subject key identifier:   12:11:CD:46:DB:75:25:9A:E3:91:AF:13:67:49:10:76:60:04:70:0E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F993B98BC0C919C0D4B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31a2f635-598a-395a-b797-084cc96a8a94.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2603:9004::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:99:3b:98:bc:0c:91:9c:0d:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=9d49e698-79a7-48b6-911f-7cc99576f1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:b5:15:a1:5c:f6:b7:9c:d3:50:57:ab:8f:
                    16:b1:44:84:90:89:ee:e7:a9:fa:84:f4:ce:39:26:
                    a8:8e:6d:80:3a:6e:ff:1e:d2:36:19:36:c0:c9:d8:
                    01:d0:76:90:53:65:1b:e5:55:58:45:d0:cc:b7:7a:
                    79:9f:70:da:00:20:f3:29:f2:2a:9b:61:36:11:8d:
                    d3:cd:ab:b3:2e:db:4f:6e:67:53:83:0a:57:76:df:
                    e5:c9:38:c3:94:25:b0:74:72:3b:01:fd:03:60:c1:
                    9e:cf:07:b7:b5:12:69:f5:9b:f6:59:76:d9:21:7d:
                    51:fd:5f:d2:1a:d7:10:7f:37:6d:2a:1c:8d:7e:89:
                    14:09:67:74:cf:14:63:28:30:ba:95:30:bc:85:92:
                    9d:8b:02:1e:aa:dd:2b:61:69:2f:0a:9a:b6:ec:07:
                    09:d3:1d:35:19:cf:76:69:c1:3c:6b:80:54:f4:4b:
                    d5:cc:0a:85:ee:65:80:6a:b0:fa:8b:69:3e:3d:28:
                    47:35:1d:93:66:13:43:c3:62:a9:e3:65:62:30:15:
                    18:5d:6d:6a:5a:5d:df:19:31:2d:0d:45:98:29:6e:
                    88:75:ea:26:5a:5b:79:b2:08:71:a5:8f:8a:ce:91:
                    a1:ea:05:b5:ac:52:12:da:1b:23:f3:a9:b3:66:62:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:CD:46:DB:75:25:9A:E3:91:AF:13:67:49:10:76:60:04:70:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31a2f635-598a-395a-b797-084cc96a8a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9004::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:6e:b5:7f:cd:2a:f5:9f:32:9e:09:54:ff:ca:c2:e6:06:
         56:68:f4:e2:22:c4:a7:f1:4a:b5:d7:1c:a2:85:b6:0c:15:a7:
         c4:76:65:4e:91:3b:e8:7e:06:f9:c9:59:0f:61:cf:24:dc:ee:
         db:3d:10:ce:b2:6a:15:db:5d:2c:c8:be:bc:08:30:25:4e:cb:
         24:3f:6b:78:ae:f8:3a:1c:4c:0f:a8:a3:78:9b:aa:59:32:b6:
         b2:cf:92:54:a4:92:1d:71:8a:ef:35:44:60:08:a4:ca:bd:b9:
         99:fc:6e:d3:66:82:a5:e5:b0:67:99:34:fa:4c:5e:f3:a3:aa:
         d7:b5:36:88:f5:97:db:fc:26:44:34:57:1a:69:12:7c:bd:12:
         81:64:03:82:b0:3b:81:39:a0:67:78:22:f8:63:29:97:07:7c:
         ef:76:a4:d7:82:1e:92:2a:9e:d1:20:b6:79:3c:fd:cf:7d:5a:
         17:d5:a8:d0:98:35:f6:7c:e8:95:01:3f:a3:a4:e4:97:65:b9:
         d0:0b:0c:09:98:4e:81:5d:97:3e:c9:4d:98:ba:36:1c:5d:e8:
         4e:16:b2:65:31:8a:ef:8f:40:d3:28:82:a5:98:64:5c:fc:ad:
         96:d0:b2:5d:7e:7d:95:92:e9:62:b6:86:17:7a:1d:7a:ee:c4:
         eb:59:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:23:25 2025 by rpki-client