Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31c76401-172e-3db1-ac67-e18a632834d1.roa
File:                     31c76401-172e-3db1-ac67-e18a632834d1.roa (raw, json)
Hash identifier:          gSxcDYdZTf4310YiJUfX7c9Ix0d6+KuFRv09rUDEbeI=
Subject key identifier:   56:58:99:C1:71:3D:18:EA:42:7A:E3:F3:51:7A:58:B7:6F:44:0E:6D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F784CDA781B0204297000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31c76401-172e-3db1-ac67-e18a632834d1.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:78:4c:da:78:1b:02:04:29:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=1c1e2efb-0a5a-431c-8b92-860cb8f3d006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:3a:77:3b:79:fc:e1:c3:05:85:02:f2:ff:
                    20:1d:0e:b4:c4:0f:a1:15:dd:b9:5c:07:64:92:2a:
                    f9:d9:d4:19:77:58:d3:48:62:dc:82:c7:69:e7:4a:
                    71:19:15:5a:88:38:74:8f:72:80:1b:19:b5:b3:07:
                    b8:ec:70:3f:23:01:11:8e:77:89:39:85:3e:38:5e:
                    6f:33:28:5f:fd:3f:24:c6:7a:0b:04:20:21:7a:60:
                    0c:4f:89:8c:46:bf:23:76:9f:db:7f:56:b1:d8:9b:
                    41:cf:5a:57:8c:42:2c:ca:6c:8e:c8:24:f4:5e:70:
                    51:30:2b:ea:52:23:c4:55:84:69:75:21:9b:f3:87:
                    10:e1:30:d1:23:a5:2d:77:bf:4e:57:7a:6e:fd:7d:
                    90:bf:8d:bc:7d:8c:1e:a1:d1:c9:51:1e:55:e4:5a:
                    a5:b9:bd:72:e5:98:88:e7:64:30:a0:26:04:b9:be:
                    fa:f6:d4:be:2b:ad:81:40:02:9b:12:6f:86:33:a4:
                    13:2e:b2:b9:ab:9f:27:b9:24:e4:ae:cf:e6:5d:26:
                    7f:4e:7a:98:ff:41:57:34:42:d4:0a:20:ed:59:bb:
                    9b:ba:88:29:33:d0:61:de:93:09:59:12:1a:66:9d:
                    8c:33:86:eb:ae:b3:23:23:f4:ca:5d:fd:f8:bb:9e:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:58:99:C1:71:3D:18:EA:42:7A:E3:F3:51:7A:58:B7:6F:44:0E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/31c76401-172e-3db1-ac67-e18a632834d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:70:55:32:6b:b6:e7:a3:72:f7:68:0c:b0:b5:23:95:33:fc:
         15:32:ab:d1:93:34:16:3b:51:ea:27:5f:8c:db:46:5c:e9:ae:
         8c:cc:fe:f9:56:63:fe:98:9a:cc:d5:7e:4a:0c:ee:e7:1e:24:
         4d:bc:ab:75:a8:46:d1:5e:d0:5b:14:4b:96:8a:64:23:bd:21:
         f0:10:e6:84:6b:16:e5:73:6f:69:bf:01:0d:95:46:e3:93:95:
         c3:76:5b:96:52:b4:f6:39:73:39:e2:d2:94:39:1c:c2:e8:9e:
         d2:a3:70:bf:f2:38:c6:64:29:a2:4e:59:f6:0f:24:2b:e1:02:
         d8:d7:6a:65:7d:e5:b6:b8:17:39:f3:5d:b1:15:2b:f9:c7:b3:
         f9:11:bd:1c:ea:24:75:1c:e4:24:b3:64:7b:94:f8:ac:9a:32:
         2a:bb:73:28:b7:be:ea:21:23:02:8f:67:a4:11:a9:4a:fc:43:
         21:67:1e:f2:ce:8c:1b:c4:5b:b5:1f:0f:8a:14:33:c0:54:90:
         f6:72:16:0b:a7:19:30:d7:ae:06:a5:1b:57:73:2f:ae:2f:55:
         a4:e8:cb:ed:e1:46:ff:d4:99:ad:e4:fe:0d:99:01:ac:c4:6b:
         aa:6e:ad:dc:e4:37:41:78:56:32:63:52:2f:28:81:84:41:af:
         87:af:34:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3hM2ngbAgQpcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MWMxZTJlZmItMGE1YS00MzFjLThiOTItODYwY2I4ZjNkMDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTo6dzt5/OHDBYUC8v8gHQ60xA+hFd25XAdk
kir52dQZd1jTSGLcgsdp50pxGRVaiDh0j3KAGxm1swe47HA/IwERjneJOYU+OF5v
Myhf/T8kxnoLBCAhemAMT4mMRr8jdp/bf1ax2JtBz1pXjEIsymyOyCT0XnBRMCvq
UiPEVYRpdSGb84cQ4TDRI6Utd79OV3pu/X2Qv428fYweodHJUR5V5Fqlub1y5ZiI
52QwoCYEub769tS+K62BQAKbEm+GM6QTLrK5q58nuSTkrs/mXSZ/TnqY/0FXNELU
CiDtWbubuogpM9Bh3pMJWRIaZp2MM4brrrMjI/TKXf34u55hSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFZYmcFxPRjqQnrj81F6WLdvRA5tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzFjNzY0MDEtMTcyZS0z
ZGIxLWFjNjctZTE4YTYzMjgzNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADlwVTJrtuejcvdoDLC1I5Uz/BUyq9GTNBY7UeonX4zbRlzprozM
/vlWY/6YmszVfkoM7uceJE28q3WoRtFe0FsUS5aKZCO9IfAQ5oRrFuVzb2m/AQ2V
RuOTlcN2W5ZStPY5czni0pQ5HMLontKjcL/yOMZkKaJOWfYPJCvhAtjXamV95ba4
FznzXbEVK/nHs/kRvRzqJHUc5CSzZHuU+KyaMiq7cyi3vuohIwKPZ6QRqUr8QyFn
HvLOjBvEW7UfD4oUM8BUkPZyFgunGTDXrgalG1dzL64vVaToy+3hRv/Uma3k/g2Z
AazEa6purdzkN0F4VjJjUi8ogYRBr4evNCI=
-----END CERTIFICATE-----
Generated at Mon May 5 20:07:53 2025 by rpki-client