Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67ee09ea-c241-3309-b24a-8231d654eab9.roa
File:                     67ee09ea-c241-3309-b24a-8231d654eab9.roa (raw, json)
Hash identifier:          q++I4dCGmGdDBCZdAA3kpyimisG48Js9PDqxQ/spTF8=
Subject key identifier:   51:94:EB:DA:EF:D8:20:11:B4:7C:CB:FA:6E:EC:C3:2C:1A:15:24:8B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9C77ED5387600FC1A880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67ee09ea-c241-3309-b24a-8231d654eab9.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:801c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9c:77:ed:53:87:60:0f:c1:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=33d1b52e-e405-46ae-b933-f7edfa3808d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:d7:58:91:10:67:d3:5c:b9:a5:e7:e1:cf:
                    92:23:4e:0c:0e:5a:36:d2:71:fd:43:7b:69:69:e1:
                    6c:52:3f:e0:50:4a:f4:f2:61:ec:13:60:00:96:8f:
                    08:28:ec:be:e3:bd:20:4e:a6:a6:f3:c3:db:97:53:
                    37:ab:9c:55:fa:2c:7c:2b:20:65:73:2b:e8:be:17:
                    47:d0:32:0d:12:07:4c:68:f1:a0:bd:38:73:4a:92:
                    ef:10:35:df:8c:5c:b8:69:38:6d:e9:02:d7:dd:03:
                    05:96:5c:db:c5:30:9c:09:10:87:09:b1:1d:7d:bb:
                    a2:7d:82:8d:0d:50:9e:72:bb:b9:57:9f:2f:c6:9f:
                    41:12:0a:9a:1f:1d:65:71:c9:65:ae:51:bb:64:89:
                    8e:4d:01:3b:a4:98:f0:e4:dc:ba:5f:50:d9:c6:f8:
                    a0:c7:32:38:c1:49:59:fe:7b:58:4e:02:d6:2d:1e:
                    9c:24:84:ac:f8:b2:d9:c6:1b:2e:eb:82:5d:b9:b0:
                    f8:70:05:eb:bd:00:f0:9f:59:04:80:ce:5f:32:8b:
                    cc:af:37:3e:c5:b7:b9:36:0d:f6:c7:ce:c2:ed:81:
                    81:16:62:7f:6a:92:ef:a0:10:83:2c:70:48:d6:ef:
                    99:72:eb:cc:18:b4:11:96:a5:66:f7:63:07:97:4c:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:94:EB:DA:EF:D8:20:11:B4:7C:CB:FA:6E:EC:C3:2C:1A:15:24:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67ee09ea-c241-3309-b24a-8231d654eab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:801c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9b:31:9f:b9:64:a4:50:c2:bd:f1:56:32:a5:8a:0f:23:fa:
         3d:0e:90:1c:ed:e3:20:34:3c:0c:12:e3:70:32:3a:c6:2e:d5:
         73:6c:2c:6f:79:fb:e9:24:d7:1a:a1:d5:2f:1d:f5:6f:35:1f:
         da:e7:14:55:30:b3:62:a4:54:05:b3:67:99:d5:93:d0:2c:c6:
         02:7c:e6:cd:4d:cd:0e:96:39:30:36:21:6c:52:46:d9:79:16:
         32:92:12:8c:60:c9:22:ca:52:6e:a0:ed:a8:58:bd:3a:d3:77:
         77:1c:fc:b0:b2:ab:6c:01:d0:ef:59:ed:22:2e:00:7f:9f:bf:
         39:97:b3:c7:fc:3a:d5:7a:ac:ce:ad:3c:b1:cb:b6:23:70:16:
         0c:f0:1c:f8:f0:3d:7a:2b:81:ac:f9:86:27:19:b2:4d:b0:64:
         39:ba:dd:f3:cb:3b:3a:5c:bc:28:20:29:43:dd:84:8a:5a:c9:
         3e:cc:4b:20:11:bb:d9:55:49:e2:5d:13:02:34:34:0b:05:cc:
         b1:8c:32:03:3c:00:81:a4:3a:5d:ce:76:fe:1c:8d:09:61:94:
         89:46:2f:39:7b:2b:f8:48:9a:fd:00:5e:ba:ee:2e:99:37:e6:
         e8:b7:ff:2d:0f:a4:f9:09:27:bd:17:55:5b:4c:76:c0:88:0b:
         20:67:46:7a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P5x37VOHYA/BqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MzNkMWI1MmUtZTQwNS00NmFlLWI5MzMtZjdlZGZhMzgwOGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmrXWJEQZ9NcuaXn4c+SI04MDlo20nH9Q3tp
aeFsUj/gUEr08mHsE2AAlo8IKOy+470gTqam88Pbl1M3q5xV+ix8KyBlcyvovhdH
0DINEgdMaPGgvThzSpLvEDXfjFy4aTht6QLX3QMFllzbxTCcCRCHCbEdfbuifYKN
DVCecru5V58vxp9BEgqaHx1lccllrlG7ZImOTQE7pJjw5Ny6X1DZxvigxzI4wUlZ
/ntYTgLWLR6cJISs+LLZxhsu64JdubD4cAXrvQDwn1kEgM5fMovMrzc+xbe5Ng32
x87C7YGBFmJ/apLvoBCDLHBI1u+ZcuvMGLQRlqVm92MHl0wWKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFGU69rv2CARtHzL+m7swywaFSSLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjdlZTA5ZWEtYzI0MS0z
MzA5LWIyNGEtODIzMWQ2NTRlYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEWbMZ+5ZKRQwr3xVjKlig8j+j0OkBzt4yA0PAwS43AyOsYu1XNs
LG95++kk1xqh1S8d9W81H9rnFFUws2KkVAWzZ5nVk9AsxgJ85s1NzQ6WOTA2IWxS
Rtl5FjKSEoxgySLKUm6g7ahYvTrTd3cc/LCyq2wB0O9Z7SIuAH+fvzmXs8f8OtV6
rM6tPLHLtiNwFgzwHPjwPXorgaz5hicZsk2wZDm63fPLOzpcvCggKUPdhIpayT7M
SyARu9lVSeJdEwI0NAsFzLGMMgM8AIGkOl3Odv4cjQlhlIlGLzl7K/hImv0AXrru
Lpk35ui3/y0PpPkJJ70XVVtMdsCICyBnRno=
-----END CERTIFICATE-----
Generated at Tue May 6 04:02:26 2025 by rpki-client