Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4fee66b7-2079-333c-890f-28f06822a0b4.roa
File:                     4fee66b7-2079-333c-890f-28f06822a0b4.roa (raw, json)
Hash identifier:          UE8m7Xa4uax5PVgPvLgxyWXu/LRHZuFD+1iKWA70Pl4=
Subject key identifier:   B6:EA:68:40:BF:A3:0C:39:2E:8A:E9:DC:7D:8A:65:59:1E:90:69:72
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA3B5E8C95DA678E9CD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4fee66b7-2079-333c-890f-28f06822a0b4.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:80e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a3:b5:e8:c9:5d:a6:78:e9:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=24d2eaaf-f8e0-4101-922f-b02da516f52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:cb:1e:06:44:7f:a2:8a:22:13:6a:b1:73:
                    0a:fe:db:12:e1:3b:64:a1:15:e7:39:c2:1f:01:b4:
                    a5:1f:a2:12:f8:3e:3b:e4:99:6a:a0:01:15:48:37:
                    69:57:9d:54:43:35:61:b2:fc:3a:a5:d7:c2:de:9f:
                    9e:03:bd:24:44:0d:84:42:51:f3:37:2c:db:2f:ec:
                    f0:7e:c1:46:b7:ae:a7:15:af:fc:6f:b3:4c:89:e7:
                    cb:42:51:8d:a5:b3:4a:93:07:1a:62:c3:b9:19:61:
                    80:22:e0:89:c5:16:56:af:4e:92:10:ad:7e:b9:b0:
                    64:dc:7d:c4:8e:af:3c:02:fe:3f:4a:32:a6:41:1b:
                    d9:a4:48:61:38:89:e3:f0:d8:53:f0:4b:d5:ed:f3:
                    94:b8:33:30:d7:83:04:50:46:72:89:9c:21:74:ee:
                    2c:c2:32:1d:36:73:88:63:3a:41:53:c1:4f:62:96:
                    88:f0:71:b8:d3:8f:fe:2f:b3:51:5d:08:a5:1f:2e:
                    7b:72:a8:39:41:ad:86:e3:ad:08:e7:23:01:d0:e9:
                    88:ab:80:22:ec:c4:cc:36:0d:73:6b:e6:d2:69:a6:
                    ed:ef:c3:45:45:c7:58:4d:21:62:4e:5d:9d:92:1e:
                    2b:4a:ba:8d:be:d8:cc:2a:30:3f:71:24:74:87:06:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EA:68:40:BF:A3:0C:39:2E:8A:E9:DC:7D:8A:65:59:1E:90:69:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4fee66b7-2079-333c-890f-28f06822a0b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:2a:a0:25:96:ea:c8:02:04:8d:ab:d6:ee:d6:ae:db:d6:
         92:6d:31:de:a3:ff:b6:5b:0f:0a:0c:91:e2:5f:e8:54:10:9b:
         ba:70:69:dd:ea:29:46:5c:45:a2:28:3c:5c:7e:04:6d:75:40:
         ac:35:62:08:51:ce:8f:a0:de:01:53:1c:47:00:57:60:a3:67:
         6d:7a:02:49:f6:89:1d:7c:f4:4d:c2:20:03:8b:0f:53:9e:ed:
         35:74:9a:fb:03:7f:26:36:66:67:ae:c0:00:37:56:94:b0:04:
         c3:f1:cd:e4:3e:6b:48:8c:b1:3f:46:18:49:ea:74:a1:66:bc:
         28:e2:b5:40:65:70:15:dc:c6:50:b9:6d:b7:a1:8c:fc:01:b3:
         0e:21:0c:a7:bc:47:63:80:4f:b6:3a:6a:04:12:ad:d7:20:27:
         2a:6c:87:9f:e8:3c:1b:ea:c5:40:02:7f:92:c6:2c:c5:75:14:
         d1:13:e5:9f:24:7a:31:01:f8:6d:f4:18:29:44:2d:ad:65:18:
         02:41:5d:87:eb:93:e7:e5:8b:5d:b9:26:a7:a9:8c:8f:94:ca:
         a7:61:27:be:79:2b:a0:0a:82:19:26:66:3d:91:ff:03:51:58:
         60:ed:f2:de:34:c3:e4:d5:92:73:3a:91:af:b2:2c:ff:2b:b5:
         01:6f:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:53:35 2025 by rpki-client