Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa
File:                     65d136f5-59f2-3612-beda-18d07da1101d.roa (raw, json)
Hash identifier:          +C+aiarJx5NhaU9Rww6TqZLxk9k1OWkf1fYfZTZt43Q=
Subject key identifier:   52:53:E8:EF:32:8F:90:3A:CD:1D:DA:AA:26:93:50:5C:53:58:AE:6A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9B836BB275ECAC278C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2607:f098:40ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9b:83:6b:b2:75:ec:ac:27:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=6259332b-1245-4cba-b46a-bb74fb54b81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:7e:f5:fe:9b:2d:a9:2d:c8:b6:83:60:58:
                    7e:4e:c3:5f:99:a7:42:8e:05:af:b8:e9:6b:71:bb:
                    e1:aa:0e:8a:83:e2:6c:bd:7b:06:63:4e:38:74:3e:
                    a2:e8:1f:b0:9e:e2:0f:ca:ef:64:25:b4:ed:a9:aa:
                    0a:a4:c1:db:82:f4:14:e4:cd:51:7d:5b:2c:2e:eb:
                    90:cb:10:64:55:72:89:2e:f2:ee:38:eb:d2:f6:5b:
                    97:0a:3f:7e:35:c2:55:09:75:1b:4d:a2:27:e5:62:
                    a9:f3:a4:f5:20:99:e8:41:75:08:21:2a:77:c8:a5:
                    c4:64:13:8c:05:7d:90:d3:b9:57:13:62:de:a1:2b:
                    7d:f4:61:3a:e4:d6:e9:70:f2:29:6e:d9:52:94:5f:
                    d4:05:20:c9:a1:f5:f4:ac:37:0d:6b:a3:42:95:6c:
                    82:92:52:eb:2a:4a:ff:69:f4:4f:c8:29:cb:68:fd:
                    05:c9:bc:a0:b9:23:0a:0c:83:d8:a0:4a:5a:da:25:
                    39:e7:0b:94:a2:50:b0:b7:48:01:1d:4f:f6:d6:23:
                    8b:8d:5c:5c:8b:42:70:b0:8e:ff:48:ca:06:38:01:
                    8a:21:72:e9:a9:63:4a:ec:90:21:71:9a:9c:90:1d:
                    19:8a:09:51:1d:53:8c:c9:75:fe:8a:c0:92:1a:73:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:E8:EF:32:8F:90:3A:CD:1D:DA:AA:26:93:50:5C:53:58:AE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:40ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:25:34:b0:65:72:bf:33:d8:1e:67:d4:d2:90:51:4c:2e:c6:
         5d:84:05:de:32:f0:44:6e:79:10:5c:03:29:4a:0e:65:10:1f:
         be:5a:e4:d5:5d:d5:ef:50:ef:f6:b0:a8:02:c6:b0:4c:54:5a:
         e9:0e:a3:6a:fb:7d:35:1c:68:e0:45:ff:31:50:0e:83:a3:2e:
         46:93:d4:bd:6e:e7:97:65:47:ca:7d:75:bf:ea:02:75:ab:b1:
         89:a1:19:47:33:b6:40:ba:e4:12:92:81:0e:c8:33:40:31:dc:
         4b:26:87:fa:08:3d:86:6e:34:62:b2:b0:c9:66:91:dd:22:f6:
         66:35:f9:07:fd:4c:a3:b5:7e:53:be:30:71:83:c9:a4:f9:87:
         60:64:99:8a:0f:76:6b:6b:4f:b4:0a:f0:f7:a0:18:d7:73:7d:
         a3:11:8d:4c:91:f4:de:81:d8:21:50:11:3e:1f:cc:a6:d9:46:
         1a:19:ff:27:ae:6d:3e:e1:1d:c8:81:04:4d:27:74:8e:5e:8d:
         bf:d1:cf:1b:66:ff:75:c9:61:16:c8:91:75:11:86:9f:3e:d3:
         1e:6c:1c:08:de:6f:f8:46:51:09:07:1b:7c:8d:cd:cb:90:0b:
         c6:4c:54:7f:9c:b3:89:90:e9:72:17:63:0f:13:0e:ee:6f:fb:
         c2:db:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:16:21 2025 by rpki-client