Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa
File:                     8cf600b5-a78c-31ad-9585-1136957f1b31.roa (raw, json)
Hash identifier:          PHpW/4M3u2zw9PduIhHkPttU9rCtpiP46l8OM1gQk5I=
Subject key identifier:   0A:D0:B5:C4:09:E3:4C:23:5C:72:05:14:9B:51:52:ED:A6:80:8B:A1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9B75538C66AAE0E8BD40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2603:9031:60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9b:75:53:8c:66:aa:e0:e8:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=a7849441-40ad-4b1b-a75b-29378872d922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:e8:17:13:5c:9a:67:01:ca:d8:aa:39:99:
                    53:2a:a6:b3:ed:1e:07:12:93:55:71:d7:01:b5:df:
                    7c:a1:25:55:6a:ad:42:ef:46:4a:d4:da:60:68:3d:
                    b8:94:2f:63:61:09:12:a7:7d:50:2b:50:e2:85:cd:
                    c5:01:ea:8f:1b:bc:82:e9:9e:e7:f9:65:21:fb:2f:
                    21:fc:9f:e2:b0:45:95:09:1d:d8:c8:ff:8c:0a:c9:
                    ec:dc:c1:53:92:70:41:69:5d:56:bf:16:34:8c:8a:
                    68:65:c4:51:09:39:89:60:76:48:83:6d:b6:77:23:
                    f4:76:cf:29:e3:37:d9:a8:8e:25:e5:3a:7c:81:f3:
                    ac:29:11:87:9e:ce:e6:da:d9:1b:f6:ee:58:9b:fa:
                    3e:f0:8c:22:40:f9:4c:20:10:e2:be:32:de:a4:25:
                    fc:15:cf:d8:5b:43:6c:48:80:93:62:c3:e0:e3:d3:
                    25:39:50:3b:88:a9:8d:78:10:85:fd:7b:2b:93:23:
                    fa:56:ad:5a:b8:4e:7a:bb:a3:a1:0e:d3:fe:a4:96:
                    10:1f:38:5d:7c:df:3b:cf:ce:b4:87:00:f1:fa:a0:
                    51:c0:e0:09:e9:25:da:1c:5c:0a:37:24:a2:d2:76:
                    c2:ec:99:9c:c8:e7:e7:fc:17:90:03:59:eb:d6:fe:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D0:B5:C4:09:E3:4C:23:5C:72:05:14:9B:51:52:ED:A6:80:8B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8cf600b5-a78c-31ad-9585-1136957f1b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:49:3d:41:3c:c4:6c:4a:3e:82:0e:12:f9:0a:53:b5:1f:26:
         63:d9:5d:e1:5e:7c:0c:f3:d9:69:f9:0b:9f:cf:a8:8d:fc:98:
         25:2b:08:52:fd:7b:e8:15:23:66:71:8c:1d:1a:3a:ec:2f:5f:
         15:b4:0e:04:c2:6e:21:be:5f:1e:14:66:a0:c8:aa:dc:15:c4:
         99:22:b5:2f:9c:07:ba:bf:ff:c8:2c:85:58:d4:43:2f:99:e8:
         26:fb:06:ea:55:8f:51:01:f5:67:7b:6d:a4:03:b0:c2:41:b0:
         04:12:1c:99:cf:45:41:90:f2:7f:2e:ed:23:3d:b3:31:dd:a0:
         25:74:ed:eb:d2:06:3b:e1:3f:ce:bc:e1:2c:25:32:d0:a4:11:
         72:8a:af:3d:a6:25:49:cc:d9:7d:3a:8b:d4:f7:be:a0:09:1a:
         d8:19:ee:5a:92:dd:6f:4d:a2:01:fc:3f:6b:ff:6b:bb:ce:9b:
         50:25:5c:aa:41:05:b9:14:96:83:cf:63:78:80:4b:71:a8:ec:
         3d:fc:f7:71:73:41:ce:59:a2:83:1d:52:15:d1:2f:97:e9:6f:
         4f:98:37:9d:45:9f:22:df:dd:28:0c:65:4c:30:1d:76:9a:8a:
         3a:8c:c7:b9:6e:ec:1b:80:37:d5:dd:7a:69:d8:d4:63:10:bd:
         de:45:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:20:38 2025 by rpki-client