Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7c67607c-c36c-32a1-8e89-ba19bceed2ed.roa
File:                     7c67607c-c36c-32a1-8e89-ba19bceed2ed.roa (raw, json)
Hash identifier:          uq0UjqnOjvZDjU1J72bUu20iqBbpfUPGIinTtvxiO4A=
Subject key identifier:   D4:AB:AD:85:C2:8A:A9:11:10:03:E8:DD:3A:75:70:5D:E6:1F:02:8C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7AEF300E075DAB30B080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7c67607c-c36c-32a1-8e89-ba19bceed2ed.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7a:ef:30:0e:07:5d:ab:30:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=e7226b99-d7be-4b18-948d-f5c7aebb3738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:55:c3:36:da:f2:20:41:70:ef:6a:c9:07:
                    0a:67:92:16:11:3b:7e:fe:46:16:0f:3f:f3:fd:f9:
                    83:57:f2:95:cc:58:86:30:b7:5c:76:51:8d:26:89:
                    41:d4:21:a8:29:70:18:a3:fb:64:34:73:c1:e4:f7:
                    55:f6:54:ba:98:f8:4b:9b:af:4a:9e:75:9a:83:ea:
                    eb:0a:18:f8:55:76:73:b7:cf:ad:7a:17:c7:0b:f6:
                    7b:00:64:44:d9:7b:e3:ee:2c:de:6f:52:9b:19:84:
                    7f:58:96:3f:37:4d:2e:3a:c7:02:15:27:98:77:9d:
                    43:8b:d9:fa:a8:f4:62:16:0c:68:e6:3f:7c:bc:3a:
                    07:cb:e8:29:20:80:ca:8e:6c:9b:1e:ef:d9:f4:c4:
                    23:07:37:00:94:54:b6:4f:82:32:ea:b1:73:4b:70:
                    2b:ab:0a:37:52:9c:bc:ca:41:88:87:f4:e8:0d:9f:
                    f2:14:9b:b9:32:87:39:85:2d:4f:3c:d0:98:d0:7c:
                    f2:92:54:fb:31:4b:9c:97:61:c3:54:46:8c:39:86:
                    a1:6e:03:b8:9a:a3:d3:11:f5:2f:dd:40:2d:a8:1a:
                    5a:2d:03:4e:41:42:15:75:45:ca:6a:17:46:4c:2f:
                    5f:dd:d5:b9:e7:47:69:15:92:b9:a3:73:81:06:f6:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AB:AD:85:C2:8A:A9:11:10:03:E8:DD:3A:75:70:5D:E6:1F:02:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7c67607c-c36c-32a1-8e89-ba19bceed2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:47:61:53:01:4f:e9:d3:6c:da:b1:ba:9f:38:37:28:b1:42:
         1b:45:96:9e:14:f1:b8:8d:dc:ae:15:b0:05:7e:8e:95:de:0e:
         10:38:f3:5f:bc:e8:0b:61:2a:48:47:21:5c:68:c8:7e:2b:b5:
         84:77:42:b3:5a:db:46:b1:57:16:a8:7f:99:3a:0a:76:98:31:
         03:08:5c:cc:d1:18:00:0a:0f:d2:a5:a8:d0:e4:43:2e:c9:68:
         87:45:8d:cc:3a:e0:cf:d6:e5:bf:22:54:ca:c0:e6:94:b5:6d:
         bd:22:87:c1:e3:b6:e7:20:02:a6:0c:f1:bd:3a:c2:13:ac:0b:
         fe:56:b8:fc:7a:a0:16:bf:c3:9b:9a:f0:ff:60:5a:36:7b:00:
         80:00:17:5c:f5:52:17:7b:4e:af:ea:2d:08:53:ae:86:d3:d1:
         0b:e1:42:33:90:44:0e:d0:83:13:21:5a:24:f3:f9:ae:8a:65:
         04:07:1b:95:12:fa:45:59:ea:e0:63:54:33:79:f5:dd:16:83:
         42:f8:76:8b:4e:61:59:8b:72:af:b3:0b:47:a5:69:c3:d2:18:
         96:cc:f6:24:60:a1:c5:4a:fc:78:4b:eb:ba:9e:8e:cb:60:13:
         e2:9f:ab:b0:41:9f:9f:49:6b:75:be:4a:01:90:c1:60:e0:c1:
         a9:76:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:06:21 2025 by rpki-client