Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa
File:                     55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa (raw, json)
Hash identifier:          lbWHg2ltkEkgObQSgV7YWKKdrOyzqZb0DW5K7bo6QOo=
Subject key identifier:   0E:CD:26:7B:0F:53:79:63:5F:89:46:3C:FA:47:0B:BF:04:D8:2F:96
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F79F2952BB4CB13CED7C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:80ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:79:f2:95:2b:b4:cb:13:ce:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=bdff4734-45da-463e-a0f4-e6d8714ebf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:79:0a:05:77:88:97:02:f6:c8:cc:22:91:
                    f6:b2:f7:ed:b0:4b:fa:ba:3a:7d:1f:17:a7:0f:8f:
                    10:d2:3e:a4:9d:2c:d2:8f:8e:8c:a3:7a:dd:f4:b9:
                    ca:44:cf:65:4e:0f:a3:12:79:21:77:88:0a:6d:8b:
                    c6:50:76:ff:b5:9e:47:f1:99:fc:3f:0c:4f:2a:56:
                    22:dc:a6:d3:40:4c:0c:0f:31:dd:e5:c8:0d:9d:85:
                    c5:ce:2b:17:e9:e6:d2:c8:35:c9:aa:e0:ff:c1:26:
                    eb:eb:80:18:1d:71:c2:da:07:cf:a6:f6:72:11:2e:
                    59:c6:9e:ee:29:17:7c:96:e3:94:3c:ef:29:ec:30:
                    e2:7e:06:11:74:9b:95:a2:84:f6:bc:cd:be:91:ad:
                    c1:61:47:f8:dd:d3:9b:f5:f6:05:53:a9:3c:d1:98:
                    c5:19:27:6f:0b:21:fd:cb:2f:ce:6d:69:e9:29:b1:
                    21:18:d1:28:ab:2b:41:fb:e7:fd:f2:dc:21:34:71:
                    a1:62:4a:6c:6d:77:d2:31:12:eb:9c:51:58:6d:65:
                    3c:4c:99:19:be:e4:47:1b:d0:a6:88:c2:01:32:01:
                    19:24:ef:b8:95:e1:e5:ee:cb:b8:cd:2d:77:2a:70:
                    59:ae:81:90:70:be:f8:21:e8:5a:bf:65:75:4d:04:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:26:7B:0F:53:79:63:5F:89:46:3C:FA:47:0B:BF:04:D8:2F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55698ea4-408f-3d9a-90da-19ac81b0e5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:62:12:45:04:6c:9a:52:46:35:d2:cd:af:b5:71:a7:24:73:
         24:31:35:25:7a:62:6a:f5:21:55:2c:95:07:f6:7a:4c:4b:52:
         9b:09:b8:97:3b:67:a5:4d:19:c5:04:ca:29:af:72:03:1b:a2:
         e3:25:86:81:55:b0:61:56:68:09:fb:75:b2:c4:96:76:06:6e:
         8b:1a:7f:e1:51:8a:ac:97:ac:1b:4b:87:67:c1:4e:ca:4e:92:
         ee:a3:22:68:92:b1:ed:c5:60:ae:11:07:a4:ce:47:a1:b0:a6:
         a2:05:b3:64:42:8a:8f:42:36:e7:c2:37:f3:6b:49:61:78:7a:
         7b:f9:36:70:7f:61:9a:9c:56:a9:33:10:99:05:1c:f1:5d:e9:
         73:0a:b5:75:16:57:fc:41:e6:2d:1b:71:01:bb:b9:7c:c1:8e:
         5f:39:59:0d:79:9d:83:57:df:30:13:ef:b6:5e:75:b0:63:49:
         fc:22:aa:fc:16:bd:26:1a:21:f0:d2:c1:6c:c6:c2:e3:57:f4:
         c5:9e:8b:25:72:18:54:ea:82:3c:9a:e9:af:22:95:34:cf:1d:
         e5:d5:23:d1:35:6c:35:73:b1:97:2a:f2:14:1b:12:b7:55:1c:
         9b:4b:24:e5:4e:fb:91:28:c7:8f:5f:a4:8e:c4:da:2f:ee:2c:
         6a:af:86:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3nylSu0yxPO18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
YmRmZjQ3MzQtNDVkYS00NjNlLWEwZjQtZTZkODcxNGViZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUl5CgV3iJcC9sjMIpH2svftsEv6ujp9Hxen
D48Q0j6knSzSj46Mo3rd9LnKRM9lTg+jEnkhd4gKbYvGUHb/tZ5H8Zn8PwxPKlYi
3KbTQEwMDzHd5cgNnYXFzisX6ebSyDXJquD/wSbr64AYHXHC2gfPpvZyES5Zxp7u
KRd8luOUPO8p7DDifgYRdJuVooT2vM2+ka3BYUf43dOb9fYFU6k80ZjFGSdvCyH9
yy/ObWnpKbEhGNEoqytB++f98twhNHGhYkpsbXfSMRLrnFFYbWU8TJkZvuRHG9Cm
iMIBMgEZJO+4leHl7su4zS13KnBZroGQcL74Iehav2V1TQTLJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA7NJnsPU3ljX4lGPPpHC78E2C+WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTU2OThlYTQtNDA4Zi0z
ZDlhLTkwZGEtMTlhYzgxYjBlNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYDO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIdiEkUEbJpSRjXSza+1cackcyQxNSV6Ymr1IVUslQf2ekxLUpsJ
uJc7Z6VNGcUEyimvcgMbouMlhoFVsGFWaAn7dbLElnYGbosaf+FRiqyXrBtLh2fB
TspOku6jImiSse3FYK4RB6TOR6GwpqIFs2RCio9CNufCN/NrSWF4env5NnB/YZqc
VqkzEJkFHPFd6XMKtXUWV/xB5i0bcQG7uXzBjl85WQ15nYNX3zAT77ZedbBjSfwi
qvwWvSYaIfDSwWzGwuNX9MWeiyVyGFTqgjya6a8ilTTPHeXVI9E1bDVzsZcq8hQb
ErdVHJtLJOVO+5Eox49fpI7E2i/uLGqvhpU=
-----END CERTIFICATE-----
Generated at Wed May 7 16:51:46 2025 by rpki-client