Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6cb1607c-642c-3255-b4f9-24a4a062c549.roa
File:                     6cb1607c-642c-3255-b4f9-24a4a062c549.roa (raw, json)
Hash identifier:          WMgrHvEQvDY8T9inZduQAHAu1GK78KCxpM8ebW1eCzg=
Subject key identifier:   18:21:41:40:2A:18:C7:2C:71:9E:17:6C:A9:BC:13:0D:A9:97:22:49
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F725164D8B6816C316500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6cb1607c-642c-3255-b4f9-24a4a062c549.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:72:51:64:d8:b6:81:6c:31:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=d33871c3-1871-4253-912d-17c3639cbf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:60:e7:fd:dc:5a:b8:f6:3b:1d:77:45:e4:
                    8e:7d:0f:8e:cb:09:4e:a7:81:37:2b:49:aa:8f:da:
                    da:14:e2:ef:b8:63:83:7a:1d:84:ad:d7:cc:cf:cf:
                    ca:93:03:7c:af:da:af:88:b8:1b:e9:4b:08:04:6c:
                    72:b6:6f:93:0a:85:9f:33:37:73:e4:53:3b:99:7f:
                    89:17:7c:66:b6:df:db:60:cd:5a:89:50:22:e3:6a:
                    eb:7d:86:66:b3:5e:eb:e7:62:c4:26:8e:7f:c9:27:
                    04:bf:ec:ce:e7:95:0d:34:f8:c7:ad:5f:f4:2b:88:
                    c8:67:17:5e:fd:1c:87:9e:a5:99:1c:90:92:77:b6:
                    1e:f3:c8:ea:66:c9:09:64:df:49:fe:1a:84:0d:4d:
                    26:f5:d9:55:97:b5:b2:e2:90:7d:b3:18:cb:d4:5e:
                    af:06:91:92:40:c0:c0:4a:d2:ba:28:1f:74:78:3c:
                    1b:69:bb:c7:e1:c1:a3:ff:8b:cd:92:cd:c2:d7:34:
                    79:0a:9f:87:3f:52:7c:f5:3b:2d:d0:4b:89:5c:44:
                    82:ec:1b:8a:22:8d:3d:0d:e6:3e:6c:9a:10:18:6b:
                    7f:6b:a2:27:d2:ca:2b:dc:b6:6a:0a:55:87:8b:5d:
                    3c:8b:e1:b9:76:27:5b:12:ec:cc:4b:ff:f3:7f:ee:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:41:40:2A:18:C7:2C:71:9E:17:6C:A9:BC:13:0D:A9:97:22:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6cb1607c-642c-3255-b4f9-24a4a062c549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:ff:6b:10:96:4e:d2:70:c3:16:f8:ee:a8:43:6e:f5:89:
         74:27:91:be:95:92:af:ea:e4:ae:9b:fe:1a:7b:bd:c2:55:83:
         16:05:56:f0:8f:d6:2f:7e:d8:77:50:c6:55:3a:aa:84:a7:cf:
         cb:2e:ae:f7:86:e8:f8:78:95:d5:a7:9f:a5:1c:e5:41:8c:1b:
         96:03:a0:4e:07:74:2c:e1:0d:75:ea:12:ab:59:8c:2a:f5:c5:
         d7:0a:a4:1d:58:65:fa:15:a6:a4:cd:f9:67:9d:30:02:c5:04:
         42:03:88:eb:7d:57:9e:1c:22:aa:65:29:ce:e0:b0:2e:a5:10:
         3e:18:98:96:70:e0:a4:27:7a:7d:1c:b1:fc:86:06:34:47:0f:
         93:c6:41:a9:3f:64:8d:c5:47:35:6e:3c:e8:1f:29:c9:8a:52:
         31:6a:62:9d:ef:b4:4a:c1:03:e6:c6:11:a8:f1:4a:87:03:02:
         71:6b:99:ad:cc:ba:15:c2:6a:f5:c4:07:11:73:d1:3d:d9:a4:
         4e:8b:6e:26:9c:18:f6:98:16:5c:d5:34:2d:0e:96:9c:29:09:
         17:41:65:b1:2c:37:02:1c:4b:07:c0:11:54:3a:dd:05:8b:30:
         21:40:10:82:a5:23:02:b9:49:81:8b:74:5b:48:97:db:0a:54:
         8b:6c:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:23:03 2025 by rpki-client