Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa
File:                     44a9403f-17df-3731-bde8-32af09694c52.roa (raw, json)
Hash identifier:          XV+gYpwCjm3xJR11rbTsbAVuonRKiG1bDXQ/BpBMp4g=
Subject key identifier:   4F:20:BF:46:1F:E8:DB:37:C6:B5:C0:A8:D1:BA:B5:94:F2:EF:09:C8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA4DDE7BD507B748B6100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:83ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a4:dd:e7:bd:50:7b:74:8b:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=87b71d67-4969-4518-b41c-03e6a31e1e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:fa:5b:18:04:bd:23:2c:e7:66:7e:53:ab:
                    54:21:ba:e8:68:f4:8b:9b:b2:76:9f:43:5b:d1:04:
                    14:9c:2a:f8:5b:6c:b0:9a:94:50:e4:59:db:f1:1d:
                    af:8d:ac:65:d2:02:ce:28:63:45:d7:6f:2b:da:a0:
                    51:c8:08:01:73:82:4f:08:93:f0:63:e9:86:f0:18:
                    e0:80:02:cf:8c:18:30:39:00:9d:ac:54:cb:30:ba:
                    48:7c:42:50:f3:65:5e:d8:7f:d6:65:17:9b:75:02:
                    c2:64:ca:6e:43:a0:19:ee:f9:b0:28:5b:b2:fb:78:
                    e2:f9:c9:66:8d:03:73:13:76:46:60:b4:0a:92:c8:
                    b7:c3:96:51:ca:8c:eb:93:5d:66:ff:aa:bb:c2:08:
                    dc:3b:e8:03:28:52:7d:79:21:c7:4e:43:29:33:e3:
                    2f:27:2b:60:8e:53:b2:db:7d:68:b2:64:73:97:0c:
                    0f:67:8a:c6:1e:20:1d:ee:ef:a8:d0:52:e0:61:a2:
                    ee:42:87:a3:2c:1f:c6:ba:f9:f1:c1:80:32:9d:fc:
                    f6:bd:f9:36:38:15:1d:5a:08:82:eb:bd:18:e7:86:
                    9d:83:1d:0a:2e:e0:5f:02:6f:98:a9:8e:d9:6c:80:
                    02:db:67:1e:61:0c:47:34:fb:8c:36:61:5b:b2:76:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:BF:46:1F:E8:DB:37:C6:B5:C0:A8:D1:BA:B5:94:F2:EF:09:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:1d:3e:96:15:33:ac:e0:d1:4a:0c:68:37:20:98:dc:da:
         e8:b0:ad:b3:75:1f:a0:eb:19:5b:d3:08:3d:a8:4b:13:7e:dc:
         9e:1d:d8:7a:be:c7:b4:ce:59:da:bb:a2:f6:56:94:77:08:01:
         0c:d7:b2:ec:cb:c8:89:c1:a9:4f:3b:39:31:af:1b:a2:07:dc:
         30:17:71:0a:a5:71:95:41:ef:6a:e7:2c:fc:08:a8:a6:bb:2c:
         aa:ec:5f:61:9b:cd:18:af:95:85:39:92:27:80:e1:5c:81:58:
         ae:54:7f:f5:37:5c:96:6a:cd:93:c6:ac:7b:04:03:b8:fe:d2:
         7b:b3:74:a4:75:dc:fb:9d:a4:39:8d:cb:bf:30:ad:b5:66:5b:
         ec:29:b8:ff:8c:32:75:70:79:7b:8d:ea:be:fb:6b:55:dc:c0:
         95:49:3a:d7:e3:7b:10:40:27:1c:0b:cf:06:82:eb:7d:89:ca:
         ba:ca:db:3c:67:49:0d:f0:25:51:60:4b:61:d8:3c:d7:3a:42:
         4e:e6:1e:10:a7:7e:55:2d:d2:c9:9b:a3:74:f0:10:49:24:08:
         3e:01:98:1d:91:8c:64:47:6a:8e:a4:d9:10:78:73:ee:1d:b6:
         b1:d6:2c:74:45:0a:06:36:7c:3a:c9:b3:0e:bb:86:65:d6:79:
         cc:8a:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:23:35 2025 by rpki-client