Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5675f250-a647-3a49-aa4f-29f455760e8d.roa
File:                     5675f250-a647-3a49-aa4f-29f455760e8d.roa (raw, json)
Hash identifier:          yEjnMgPdPvN4BTwKZ1OZvbthr2jKGAFwRbw7scddhvE=
Subject key identifier:   A4:59:EE:A7:33:F2:8B:44:8B:3E:94:F4:11:84:4D:DD:5B:67:76:FD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F78A4A77FCC6F24782440
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5675f250-a647-3a49-aa4f-29f455760e8d.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8043::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:78:a4:a7:7f:cc:6f:24:78:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=17b4218a-3914-4c89-9b58-bc5fe3fff626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:1d:c4:3f:0b:c7:f6:bf:d9:00:c6:e2:d0:
                    1b:15:2b:62:04:81:1e:0e:8a:0e:33:e4:79:d8:19:
                    62:9a:b3:e7:7a:3f:f9:f5:ef:06:36:3f:1e:79:ee:
                    2e:8d:9b:63:04:c5:63:a5:30:d7:f8:41:7c:73:25:
                    ee:bf:1e:b3:78:4c:f2:63:3a:51:b7:85:74:18:a0:
                    99:95:2e:df:dc:07:56:21:ba:85:b9:7c:25:c7:9c:
                    2b:f9:ff:48:be:ea:4a:dd:6b:1b:cd:72:77:3c:84:
                    6e:e6:6e:08:ee:45:ae:51:85:88:3e:f5:6d:52:b7:
                    8c:37:c3:6f:30:ac:08:c8:fe:5a:b5:54:6b:b5:c6:
                    8d:05:5f:c7:37:34:5e:6f:a2:3c:a8:95:38:47:7d:
                    71:f6:1b:99:5a:d4:2c:66:73:3f:42:b7:ea:7a:24:
                    b8:e3:21:b1:a7:16:e9:9f:12:5c:00:b9:53:be:b0:
                    5b:ca:f8:cd:e3:6b:b2:d6:dd:0a:04:ef:81:e7:67:
                    5e:54:4a:b4:9f:0c:a9:98:e5:eb:38:0e:8c:74:ce:
                    88:ed:01:9e:60:57:46:24:fd:b0:b0:d8:36:77:a5:
                    40:49:c4:59:66:34:e8:9b:68:62:9a:6e:92:c6:99:
                    3c:1a:59:c1:ce:9d:73:b0:4b:54:a3:29:4f:a8:d6:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:59:EE:A7:33:F2:8B:44:8B:3E:94:F4:11:84:4D:DD:5B:67:76:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5675f250-a647-3a49-aa4f-29f455760e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8043::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:88:a5:04:46:5d:0b:94:b2:08:75:90:64:45:87:e0:f4:03:
         b5:d6:5b:ff:0a:65:20:74:97:a0:0e:ae:2a:0c:a0:c4:51:85:
         67:46:d1:e1:b2:d0:b8:22:a6:76:a6:54:1a:a7:69:55:6a:34:
         8b:64:82:14:52:10:76:12:b3:87:16:2d:ac:ed:0d:2e:26:64:
         9c:05:e8:ee:2e:76:7a:7f:e4:ee:f0:e7:14:87:55:25:75:15:
         b2:55:ac:3e:84:2d:b5:fe:62:f6:89:f8:9d:76:f0:b7:dc:42:
         34:a1:21:c3:5a:fa:b8:ef:66:e7:50:73:b7:61:ae:b4:e8:13:
         45:13:7e:82:5d:17:a8:06:68:e3:1f:bd:2a:7d:64:1b:0f:ba:
         bc:eb:05:48:b2:1b:c2:e7:a2:fa:80:fa:6f:55:a5:8e:48:11:
         21:fd:d2:3f:61:8e:ca:ed:06:4a:3b:87:34:d1:a5:eb:7a:9a:
         18:cc:9c:8e:1e:e6:70:1a:35:d5:ed:2b:e9:d4:f2:21:8b:2d:
         0c:31:86:70:20:98:28:6c:84:3a:61:9e:35:f3:8c:1d:70:60:
         bf:5a:c9:8f:74:f7:7d:de:df:92:6d:c2:36:11:57:16:ee:5c:
         e9:bd:87:0b:2b:f4:8d:3b:fb:74:72:03:da:c1:b9:2f:f1:22:
         68:0e:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:44:11 2025 by rpki-client