Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4bd09377-5053-34be-b848-cf6394bb96d9.roa
File:                     4bd09377-5053-34be-b848-cf6394bb96d9.roa (raw, json)
Hash identifier:          PhP6nSY02Ms7/XSDGmcUzv2bPrfuG6jVztHeYzVRkEM=
Subject key identifier:   03:0C:47:DA:33:00:7D:33:AD:26:E6:0C:F4:C1:C3:F8:FC:AB:CE:C1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F67F93CB3836D978FCD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4bd09377-5053-34be-b848-cf6394bb96d9.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     10796
IP address blocks:        2603:90f5:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:67:f9:3c:b3:83:6d:97:8f:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8ab1224e-45df-4e26-aafa-715520f11b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:4c:69:6a:0a:69:f5:ac:25:7f:84:56:43:
                    6c:cb:97:27:85:a3:32:4b:95:cf:74:65:14:bb:57:
                    a5:0a:bb:74:02:85:a3:c4:3f:93:e8:02:24:70:a7:
                    06:84:c7:33:e1:9f:97:64:f1:cf:7d:0e:b7:85:b2:
                    14:25:5d:6e:62:19:06:35:5f:d4:85:5b:ed:52:8c:
                    6e:e3:52:28:a1:bc:13:21:e0:f6:0a:2c:dc:f1:fa:
                    95:4e:ac:21:14:5e:0d:0d:d6:c5:38:98:89:ce:bb:
                    41:a4:10:22:fa:a0:83:6b:71:aa:7f:67:9e:3d:19:
                    d8:5d:a7:bb:f7:81:31:85:e1:40:2b:70:e7:9c:88:
                    c7:ae:3d:44:d3:23:03:61:cc:23:d6:38:36:93:be:
                    7e:e1:4e:e2:f4:16:a9:33:ae:24:45:13:2e:67:65:
                    a3:1e:66:04:81:aa:a2:1c:ce:51:26:e9:20:38:dc:
                    7d:95:8d:68:8f:f8:9e:eb:2b:cd:1d:8a:98:be:a4:
                    8b:d6:2e:ee:18:e7:b9:94:e5:73:81:39:f4:27:9f:
                    20:22:d8:18:86:9e:76:23:63:55:67:b7:1a:56:12:
                    d3:88:09:7e:8b:ff:d0:ae:0f:0c:1a:a9:a4:b3:c1:
                    53:07:dc:86:71:8e:54:a1:21:92:ee:46:a3:c7:99:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0C:47:DA:33:00:7D:33:AD:26:E6:0C:F4:C1:C3:F8:FC:AB:CE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4bd09377-5053-34be-b848-cf6394bb96d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:50:52:84:90:2b:bf:4d:4f:f2:18:35:de:8d:8d:06:41:66:
         28:43:15:23:bd:a3:9d:91:17:c0:19:eb:ac:a6:24:a4:23:b6:
         56:96:63:e5:e2:db:f4:ff:d2:57:7b:90:1b:2d:82:03:41:bf:
         ce:f6:6a:c7:b8:f3:dd:76:50:e9:03:16:0d:fe:93:f1:82:3f:
         40:2a:95:b5:1b:c7:af:bb:8b:4d:d8:98:0e:40:de:49:8f:d1:
         51:ba:d0:a7:aa:6c:52:84:2c:c5:07:4e:16:0d:d2:4b:1e:99:
         ac:3b:d5:fe:26:f8:64:37:1e:f5:98:f8:47:d6:e5:c4:b5:ad:
         ca:0a:b3:dd:81:0c:fe:24:31:fd:df:6e:4c:6e:ca:2e:73:5e:
         9a:28:75:04:7d:0e:62:19:63:29:ac:30:7c:38:c1:02:8c:32:
         10:b5:65:12:66:59:e8:7e:e4:c5:10:30:e4:aa:b5:fa:08:24:
         b3:99:34:5a:0a:7a:cc:f3:d7:ea:32:cb:c9:01:c3:ae:5a:63:
         45:a8:73:cd:37:4b:66:eb:30:53:96:2c:6b:33:82:f6:6b:0b:
         e6:4d:e9:10:e0:cb:82:24:08:2f:e9:bd:37:18:8b:fc:ea:04:
         0b:33:93:99:fc:90:1d:a8:6f:10:d6:e8:a7:b1:79:82:9d:c0:
         02:39:98:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:59:56 2025 by rpki-client