Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/89e3c95c-09bd-3ff6-b765-1c0251777a19.roa
File:                     89e3c95c-09bd-3ff6-b765-1c0251777a19.roa (raw, json)
Hash identifier:          MFsxOoacO6BPFKiH4IXSVrB4jwwfz3Jc06FX0mVNBLA=
Subject key identifier:   7F:68:24:FF:2D:07:EC:28:86:51:A5:C8:4D:14:AD:DF:27:4C:80:DD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F772A4371A6B361FD9900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/89e3c95c-09bd-3ff6-b765-1c0251777a19.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8489::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:77:2a:43:71:a6:b3:61:fd:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=eb4d0774-06d7-4b3d-8580-0c478bd96973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:ec:12:fb:74:f8:af:45:30:92:54:a4:b2:
                    c9:2f:92:86:cd:36:18:eb:f2:74:54:2a:79:a5:0b:
                    ca:f2:53:92:88:ec:b8:25:bf:dd:f1:32:b4:1e:bd:
                    4d:b8:f2:10:f8:89:68:84:68:85:1b:de:0c:4e:c5:
                    3c:82:31:0d:be:90:93:f0:3e:f4:e0:89:c1:a2:54:
                    00:da:fb:84:c5:2b:77:a4:c7:e3:f3:ba:fe:b3:91:
                    06:33:8e:de:7b:c9:6a:dc:df:65:17:d8:0b:42:93:
                    4c:6d:ca:a9:d9:4e:70:38:4b:f0:fc:ba:98:6e:90:
                    9c:8c:47:7c:60:72:4c:c2:8f:55:ae:e9:33:7c:49:
                    87:f2:4d:8b:69:db:3f:3f:f1:54:43:eb:47:b5:c2:
                    86:db:64:22:de:06:e4:54:0e:09:30:5f:87:7b:aa:
                    92:82:a1:33:ec:df:da:f0:6b:63:f2:3a:f0:b6:a4:
                    5f:e9:82:32:f8:c4:6b:e2:f6:93:cd:8f:cb:a7:60:
                    cf:a5:e0:ca:14:c2:41:4b:74:5a:eb:ee:10:af:24:
                    26:1c:9a:0a:3d:c8:c1:71:e0:20:95:88:a2:e7:a2:
                    c2:4a:b2:68:2a:40:2e:d3:32:d8:3b:47:a7:8d:65:
                    2a:96:66:a1:8b:e8:ea:b8:15:42:6a:31:d2:97:34:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:24:FF:2D:07:EC:28:86:51:A5:C8:4D:14:AD:DF:27:4C:80:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/89e3c95c-09bd-3ff6-b765-1c0251777a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8489::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:61:88:85:48:a6:d6:a8:d0:55:b7:0b:fc:49:ab:96:f2:13:
         b2:91:2a:9a:05:51:d7:38:c1:4a:8b:3c:b0:8e:fc:78:c7:15:
         7a:a1:9c:56:97:ee:5a:22:f9:d2:fa:34:ef:c3:d3:2f:9c:4d:
         b1:c0:07:97:de:55:2e:99:1b:d4:01:e5:f9:73:63:d2:f2:30:
         16:2a:e4:a6:c1:6d:50:48:1a:2f:4a:49:97:44:2b:ca:a8:b2:
         d5:01:12:85:b3:a7:b6:35:f0:3a:f7:f1:29:41:63:9c:26:48:
         8f:c6:47:e3:fd:2f:11:a4:6f:90:58:fb:87:7d:0a:a9:b1:ca:
         5d:89:28:ab:3c:3d:e8:55:d9:41:e8:97:3b:ac:10:be:85:13:
         2a:5e:0f:27:88:c4:47:3a:7c:2b:bf:b7:fe:9c:3f:0d:29:e3:
         a0:a9:d8:a0:f2:f0:55:8a:c5:7a:80:22:2d:7b:2c:42:eb:2c:
         8d:b8:05:49:b6:6e:ec:dc:6d:ca:e3:94:57:4f:dc:db:2b:50:
         d0:b9:c6:df:67:2e:11:d7:64:5c:f1:03:63:3d:7e:43:73:59:
         fb:35:4a:ca:39:04:d0:11:6f:bd:49:99:36:e4:9e:ce:7e:54:
         20:6e:d4:22:50:1a:6d:e8:56:b1:21:b6:9b:06:09:f9:80:f7:
         f7:c1:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:39:20 2025 by rpki-client