Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/419d5cfa-f22e-3661-88d8-34e49da63dab.roa
File:                     419d5cfa-f22e-3661-88d8-34e49da63dab.roa (raw, json)
Hash identifier:          WdVN48woOh22FTdY6a63xwgHSLEJoB5YfwChV6DGBQc=
Subject key identifier:   F2:A0:9F:81:93:77:13:68:D1:05:7C:B7:4D:4C:C9:90:B9:FA:AE:BD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F680A97111D7055E6E400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/419d5cfa-f22e-3661-88d8-34e49da63dab.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     11351
IP address blocks:        2603:90f5:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:68:0a:97:11:1d:70:55:e6:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8cde71ab-285e-4fa0-bee3-27edcf877596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:34:0f:6a:8f:1f:f3:09:34:23:c1:b0:ce:
                    c9:4c:1d:bb:43:7f:50:94:e7:b5:5e:46:97:d8:d1:
                    12:d6:d9:ce:11:fd:c9:7f:b4:3b:a4:d5:b4:67:53:
                    c3:f6:f4:98:27:a5:82:07:94:d2:3d:75:77:46:f2:
                    10:c9:2c:e7:53:1f:4c:70:d0:ae:09:8b:e3:82:e1:
                    5a:e7:eb:e8:11:db:0e:e9:29:83:98:d4:6b:9f:c6:
                    73:8d:a0:47:ca:37:02:c1:63:3b:5f:c2:26:26:0e:
                    3d:f6:61:f6:d4:2f:5d:fb:fb:47:58:3d:6e:94:b0:
                    cc:58:15:80:f7:34:0c:49:77:41:bd:d2:27:3b:a4:
                    f8:95:47:51:6a:d8:92:78:7e:69:4a:57:2c:3a:d8:
                    51:8f:97:31:84:c1:ae:d3:fc:ea:86:b2:6b:73:e9:
                    2f:4e:a4:2d:09:2b:82:58:f9:8d:a1:49:6e:7a:23:
                    09:87:bc:1f:9f:fa:65:ba:ff:10:50:6a:62:20:c0:
                    b9:e8:19:17:34:88:77:22:00:96:5a:6e:da:4e:09:
                    95:6a:eb:af:0c:25:1c:80:a6:ba:e8:7c:2b:2f:66:
                    90:16:0f:91:23:7d:fa:d0:ba:be:81:d0:9c:43:16:
                    08:26:11:d5:11:27:29:53:c3:07:fa:24:cd:d4:c3:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A0:9F:81:93:77:13:68:D1:05:7C:B7:4D:4C:C9:90:B9:FA:AE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/419d5cfa-f22e-3661-88d8-34e49da63dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:68:c2:e5:c5:c4:61:89:d3:0f:e0:c3:11:e3:e6:e2:81:e6:
         93:b8:35:bb:69:17:27:60:02:22:71:9c:ce:48:0a:18:a4:44:
         ae:f5:f2:96:0b:3d:b1:d3:39:46:fa:7f:13:9f:88:d1:df:62:
         f2:2c:83:98:30:b9:09:1c:96:5a:9f:f7:be:4a:8b:bb:6d:0d:
         14:36:ce:27:e3:1d:82:a7:cc:11:be:70:07:86:9f:ee:b7:76:
         2e:bd:de:6e:ee:c4:d1:d6:d5:0e:88:d7:8e:2a:73:00:74:72:
         8e:d3:f4:90:21:0d:10:d4:21:98:44:0b:1d:75:84:d0:42:1e:
         39:21:c8:15:2b:dd:19:ba:66:eb:bf:15:ed:d8:06:ef:38:de:
         b6:9c:3f:cc:cc:4e:e6:57:77:b1:4e:27:1b:80:9d:93:dc:de:
         66:43:aa:ef:5e:a7:e4:e0:98:fb:15:16:53:e0:5c:a8:ab:b1:
         f9:b1:5a:d4:11:21:82:41:10:c2:c0:83:27:90:73:65:c0:88:
         c9:17:a4:8c:78:ef:e8:c7:73:1b:33:00:c5:45:72:3e:8d:67:
         8b:05:59:33:de:a8:18:23:2c:a6:fe:91:8e:39:88:8c:43:4a:
         2f:1a:00:b6:b5:05:76:67:25:4d:13:53:b5:69:9b:46:d3:41:
         52:e1:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:36:20 2025 by rpki-client