Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa
File:                     33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa (raw, json)
Hash identifier:          obejpoTpvepoA+nOS2/mIyNS70iZtP00SIhlE2KVDC4=
Subject key identifier:   17:B6:3B:B6:8E:68:0D:1A:F1:6A:0B:25:9C:65:CF:88:3E:5D:FF:33
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9CCFC0A721892B34F080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8035::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9c:cf:c0:a7:21:89:2b:34:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=a1f38c0d-9df8-4dab-9ef0-6f460b3af77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:17:56:65:ae:2e:52:db:c3:8e:97:c9:90:
                    fd:6d:5c:58:67:00:2f:4e:f2:44:8d:69:e7:0a:67:
                    d7:0f:7e:64:e0:7a:5e:bc:a6:d0:a3:84:ff:53:64:
                    49:30:f9:53:cc:f5:4e:9c:81:d8:89:27:15:a8:b3:
                    43:87:fb:a4:4d:7a:61:ee:5f:c9:33:70:72:8e:13:
                    88:99:ca:dd:3e:c4:0a:a1:f2:70:cb:9f:c8:68:4e:
                    9e:d7:e8:14:e1:c6:37:5f:c8:db:94:23:2d:59:f7:
                    62:34:40:6f:0c:e6:fe:4e:44:76:42:34:c9:b0:67:
                    7e:ea:66:ce:8c:99:a4:40:0b:bf:58:b4:b6:b5:24:
                    8f:55:81:f0:fd:df:b1:04:5b:d0:ff:d4:ae:7b:4e:
                    99:87:d1:c8:dc:7a:25:a9:55:43:d2:e1:77:b3:65:
                    50:96:01:6f:51:33:11:37:1a:c6:fe:be:7d:92:f0:
                    c9:35:7c:cb:28:43:a4:05:92:69:94:ac:ef:a6:20:
                    b9:d7:91:42:20:46:4a:93:0f:d1:dc:6d:be:7d:20:
                    be:c7:07:22:0d:b6:dc:29:d0:37:fd:22:b3:7d:d2:
                    4b:8c:13:6a:fa:30:dc:c2:18:93:2c:a3:a8:03:fd:
                    fd:1e:0d:b9:72:45:78:8e:96:f9:96:ce:75:7a:e7:
                    75:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:3B:B6:8E:68:0D:1A:F1:6A:0B:25:9C:65:CF:88:3E:5D:FF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33c1d78b-b02f-34e3-86b1-6a5c1d8609a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:7e:65:cb:cd:05:58:88:c0:b4:5d:05:69:9d:bb:60:8b:
         75:de:c8:82:f9:4d:3a:51:16:f3:0f:1a:aa:e7:f1:f7:99:49:
         66:3b:b6:50:e2:7c:3d:01:41:b3:e4:b7:a6:5d:c5:ed:fc:2b:
         37:4f:de:dd:4a:28:15:2e:72:a6:ea:16:ae:07:94:28:95:c5:
         34:f9:1f:e7:bb:d7:c8:18:08:59:8f:c7:66:02:fc:40:ed:35:
         34:c0:fd:a8:40:15:f3:1e:dc:79:1e:ca:8a:2a:ba:64:db:6a:
         6c:70:42:09:1b:39:04:43:bb:1a:22:26:0a:ea:92:4c:f9:ad:
         cb:87:e6:f9:88:53:47:65:45:c9:89:4a:81:04:e7:8c:b6:6a:
         95:ed:c0:c5:56:dd:ca:dc:62:82:a6:24:b7:6c:ca:66:74:ef:
         06:03:0e:4e:67:39:51:6a:07:f3:45:7a:01:83:0b:8d:29:9e:
         5b:af:b3:9b:2c:f9:47:73:b6:fb:8c:3e:34:0a:6a:d9:f5:fe:
         78:f0:aa:bb:a2:23:3c:72:90:fa:9f:c5:ad:d4:3c:5c:c9:3d:
         b6:68:1c:e0:5d:b3:2c:18:ac:b0:78:e9:b0:15:1d:e9:20:c8:
         66:1d:b3:1e:d6:5a:cc:a2:92:47:eb:74:61:b3:28:a7:27:d9:
         5c:f2:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:04:26 2025 by rpki-client