Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa
File:                     5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa (raw, json)
Hash identifier:          iPfRh6egX2oJLWiwk9ORQU5yVBvALexKvxLscO1hwTI=
Subject key identifier:   BA:85:C1:CA:23:3A:75:E4:FC:68:BB:D7:09:A2:14:F3:88:16:2D:61
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA4FA11700F306AF73220
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:84be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a4:fa:11:70:0f:30:6a:f7:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=26e99968-3be0-4d2e-91d7-23cf5f9f7e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:d9:52:5c:9d:fe:bb:68:14:77:20:97:45:
                    7a:52:01:00:68:1a:0d:f8:ce:04:3e:bb:8f:6e:b4:
                    2f:ce:56:ff:11:2a:65:39:07:38:cc:1d:f5:30:2e:
                    20:30:71:e0:f9:b9:84:6a:82:a2:8b:29:e3:1d:36:
                    eb:ae:0c:cb:9b:a1:20:8d:ec:9e:db:f8:2e:c6:52:
                    59:67:1f:3e:2c:4d:9e:38:41:13:09:c9:b0:4a:5b:
                    22:80:28:57:88:f9:fb:06:cf:0c:53:56:b9:70:d5:
                    1e:94:a4:bb:09:04:a3:9a:08:08:ee:f8:cd:1f:99:
                    77:25:05:ac:40:75:e7:88:7a:35:fd:ce:5d:f3:fa:
                    84:66:98:e5:c5:ae:e7:32:3f:80:33:3c:98:b0:62:
                    22:a0:20:1b:a7:ab:cb:b7:1c:07:10:38:6a:be:07:
                    eb:db:02:36:79:0a:1a:e9:5f:29:09:e4:ec:fc:07:
                    eb:a1:6a:6e:81:96:e9:d7:2e:9d:9b:fc:da:8c:f6:
                    78:36:c3:1b:27:55:26:53:c0:50:c7:d7:4d:7d:af:
                    9f:18:05:b9:8a:42:64:20:04:2d:d0:d0:55:dc:15:
                    8f:28:a7:bc:82:55:c5:dd:47:f1:6c:de:d4:ab:2a:
                    00:08:15:90:c1:49:6a:c2:0d:2b:5d:34:e9:b4:32:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:85:C1:CA:23:3A:75:E4:FC:68:BB:D7:09:A2:14:F3:88:16:2D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:95:15:af:5d:a6:4e:72:50:4e:13:bb:11:06:52:63:0b:
         ae:05:c4:0f:0b:5c:19:01:b6:34:16:85:d4:58:ae:c1:10:25:
         e5:12:ef:64:46:a0:e9:6a:8f:c8:aa:d0:86:2f:b1:60:92:a8:
         d8:9d:d6:8e:ad:ad:80:1a:f9:11:1d:73:97:63:df:78:bc:e5:
         21:99:b3:83:69:04:40:98:fb:d4:c4:f5:81:4f:a7:84:92:50:
         e9:b9:94:82:c9:0d:71:8a:d3:cb:30:d3:c9:84:11:d3:50:a8:
         3d:80:66:ca:c1:ea:a4:ea:84:07:76:12:73:da:45:6f:90:8f:
         71:b2:29:d9:83:64:38:e9:b8:9f:c4:09:6a:f4:77:3d:d6:fe:
         2f:fb:14:ee:a7:5d:57:10:38:d5:3f:d9:20:68:67:64:f1:49:
         95:0e:35:76:ad:b6:cf:45:03:b8:95:87:fe:b9:a1:1c:66:84:
         24:56:0f:8c:38:be:28:20:49:cc:56:56:1c:36:eb:94:1d:f0:
         4f:bb:ee:f6:49:e7:6e:c9:0f:35:e0:53:0c:f9:fe:b0:0b:7a:
         25:b8:7d:fc:45:d8:3b:4f:c0:31:ee:fe:fc:27:2b:04:b9:ed:
         21:d8:78:b6:24:71:b5:fa:d2:63:34:a1:dc:3a:4f:ff:1c:d7:
         f6:db:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:49:06 2025 by rpki-client