Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/35ae4912-626c-38be-a192-e3b717b3fc6a.roa
File:                     35ae4912-626c-38be-a192-e3b717b3fc6a.roa (raw, json)
Hash identifier:          goeZnK+XV5V4LTcIjE7Nlrsy1FPRXNBv9uWgUD2LvtE=
Subject key identifier:   8A:2F:BB:B0:3E:CD:60:B7:2B:6F:5F:27:6C:28:01:9E:93:76:8D:BD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7B397B71819EC0667A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/35ae4912-626c-38be-a192-e3b717b3fc6a.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7b:39:7b:71:81:9e:c0:66:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=42778159-8d99-465f-b500-475be021c8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:43:65:76:3e:15:9c:20:21:c5:5b:c7:22:
                    a9:82:cc:46:26:6d:ce:ec:a2:e1:69:f7:8a:cd:c9:
                    a3:13:7e:a6:0f:96:8d:e2:77:ef:e7:31:28:31:be:
                    f1:87:10:4a:6a:d8:fe:51:1d:6e:ce:57:35:c2:1b:
                    1b:20:06:65:51:1f:ee:14:c1:21:5f:51:3c:ea:7e:
                    20:1b:0f:7a:ed:53:88:16:e0:1c:59:42:e1:9a:d9:
                    c2:79:32:af:d6:5c:c5:5c:7b:2a:aa:be:12:6e:b4:
                    2a:e8:db:ba:d0:79:42:1a:d6:22:f4:c6:d2:8d:7a:
                    6c:5b:3d:ff:e4:80:c9:00:4d:9a:53:d1:13:76:ac:
                    f5:3f:bd:36:0e:bd:a7:b7:73:a2:79:70:d7:6d:60:
                    e6:78:ec:8c:0c:ae:35:42:85:d5:fb:c0:da:8e:d7:
                    97:23:3f:f3:ba:b2:f5:bb:76:8a:84:26:1f:2b:3e:
                    7b:78:62:02:b3:8f:ed:53:d4:7b:3c:56:1c:82:83:
                    20:88:74:14:00:26:59:7e:f0:2d:ab:dd:8f:38:8e:
                    0d:03:c6:c8:94:e9:71:b4:13:e9:08:c6:9c:35:72:
                    89:8a:5c:b2:77:81:71:83:78:e8:6f:89:e6:33:e8:
                    f0:58:89:fd:2e:78:df:73:22:f2:bd:32:f2:58:4c:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:BB:B0:3E:CD:60:B7:2B:6F:5F:27:6C:28:01:9E:93:76:8D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/35ae4912-626c-38be-a192-e3b717b3fc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:1a:cc:7a:f9:62:53:ea:cf:6d:0e:d3:b8:be:02:0a:70:
         46:4b:53:d5:cc:70:03:69:99:a2:8e:12:d9:26:85:5f:02:6d:
         ba:fe:4e:83:eb:a2:65:88:9c:c6:9b:d5:b8:46:ae:a4:71:ce:
         58:5b:f4:7c:61:7f:16:b7:31:68:0b:11:68:71:71:ec:41:e3:
         05:4b:0e:5b:25:51:80:28:ca:4c:73:5c:74:d3:25:c1:ad:bd:
         89:cf:4f:28:74:25:46:c9:3e:49:f6:63:fa:f5:8a:1b:7b:71:
         a5:f3:2e:f1:0a:e3:5a:f9:94:74:f9:9b:92:e9:d5:d5:fc:6c:
         45:0c:9a:c6:4b:99:04:5f:a4:97:f7:1c:c5:9b:b6:b6:59:8d:
         34:44:56:52:3a:e9:19:cd:28:7a:ce:82:00:6e:7e:e0:71:47:
         19:a1:7b:fa:cd:3a:d7:8a:bd:d4:a1:7b:a4:9c:96:ed:22:d1:
         cb:3d:90:3d:58:5f:de:82:8f:cc:d4:ce:97:b0:18:1c:2c:dd:
         5e:3f:f3:c2:b6:8c:cc:e1:86:92:f3:76:6b:47:1d:ba:18:e4:
         10:86:5b:6b:c1:ca:2f:d3:58:38:80:1f:45:ab:43:fc:f6:bb:
         e9:2c:e3:2e:69:b0:b5:45:23:04:68:3c:c7:21:b6:93:1f:c4:
         91:32:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:24:43 2025 by rpki-client