Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa
File:                     49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa (raw, json)
Hash identifier:          Ey8NxQS0CDoj5g9lCpflEbcDOm/7w86BE3/FIWezE68=
Subject key identifier:   A8:A7:DB:EE:D5:0B:24:A3:26:CD:1F:16:4F:BB:50:9A:97:37:78:8E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA5586264FDD4CDAAFA30
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:89eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a5:58:62:64:fd:d4:cd:aa:fa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=5b05a0b8-2acf-48b5-82f9-b47729c9e0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:52:df:f7:3c:ec:79:16:f8:b7:b6:d8:01:
                    2b:80:76:18:2e:1c:ea:82:bd:49:1d:6d:68:f7:7e:
                    b8:b2:5c:2e:2f:df:ff:ea:70:78:e0:07:fe:fe:28:
                    24:ca:7e:39:61:6b:7f:dd:31:1d:c1:a4:52:00:f4:
                    ad:34:fe:9e:c8:86:f0:15:74:b5:05:19:49:95:21:
                    6a:7f:a6:9e:88:6e:dd:8f:ab:95:73:ec:b8:67:da:
                    ff:a2:00:c8:6c:6b:b6:51:02:25:2b:16:76:c8:4e:
                    92:29:78:aa:95:06:d1:72:91:9b:3d:0e:79:c4:8d:
                    a2:1a:29:fc:e8:ac:a8:46:18:d4:b2:fe:aa:65:f8:
                    85:ca:a0:4a:20:80:f3:97:4b:25:9f:6a:a9:11:ee:
                    a5:d8:ce:ad:f3:ae:65:6a:c7:b6:27:46:e8:8e:83:
                    24:c2:cf:a8:10:ef:3a:99:7e:f8:22:67:8f:a4:32:
                    dc:65:bc:be:43:42:be:27:dc:01:50:49:68:58:6a:
                    f7:d0:4e:e2:06:e7:92:cb:fd:2a:30:50:42:08:b2:
                    ce:76:34:c3:fe:d1:7d:d8:dd:60:63:5f:27:2c:dc:
                    ce:16:60:23:b5:97:39:2d:74:9a:c5:5b:d7:ad:58:
                    a1:b9:a9:9d:db:96:64:c5:d4:c4:42:13:7e:26:e1:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:DB:EE:D5:0B:24:A3:26:CD:1F:16:4F:BB:50:9A:97:37:78:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cfc61d-2266-3a5e-aca1-7387bfdd7987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:89eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:34:cc:96:06:a4:a3:82:14:fd:d1:ac:8c:d7:36:c9:79:8f:
         39:78:2b:c4:29:a1:bc:e6:44:ba:0c:6b:aa:36:37:6d:33:f7:
         2a:e5:8b:e7:08:bc:2c:ea:a3:30:8d:a2:29:3f:8b:b2:01:56:
         b1:80:7d:ed:a8:5a:c2:6d:b6:f3:cd:63:63:a4:0b:f3:9d:e1:
         29:73:d4:1b:8f:b5:c0:6e:01:ac:a6:aa:1f:09:92:bb:ad:13:
         f1:68:0f:7a:48:35:ef:ea:2f:4f:bc:6c:d3:27:62:9c:6c:42:
         71:c4:57:e8:b8:47:b7:ac:9d:03:05:80:e8:bd:a9:38:13:f2:
         08:b3:28:b1:07:75:3c:d1:9d:a5:bf:59:1d:d8:34:35:9f:4f:
         a8:a8:59:65:03:45:79:6d:0f:54:d5:f3:e6:89:03:d4:78:26:
         b6:3b:d1:bd:00:2e:e6:b4:80:ea:c6:40:45:fd:0f:4c:46:ec:
         fe:63:ee:7a:75:d3:47:1e:bb:fb:0c:c0:17:be:9c:8a:ab:27:
         78:39:bf:3a:19:d8:9c:30:d7:bf:aa:72:c1:34:e4:74:08:78:
         7d:42:8c:dc:bf:b5:44:74:6e:de:25:38:dd:d0:87:34:f7:ad:
         59:ca:77:53:3e:7e:2d:fa:e6:ab:ab:93:05:ba:9d:83:b4:f8:
         ab:6e:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:41:03 2025 by rpki-client