Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
File:                     8f4129be-42f4-3968-aff2-2e4ca695144b.roa (raw, json)
Hash identifier:          AVXAJ4454p+QBwkV7+7vmmOtIeLpzhXOnCSio5d3A00=
Subject key identifier:   BD:89:0D:E0:81:43:3A:29:2C:FF:4B:D8:AC:76:D9:75:E4:4F:C5:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9E37B794111C11493A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:80b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9e:37:b7:94:11:1c:11:49:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=5519a3d4-868b-4860-8fc6-d9efe5acbb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:8f:10:da:8c:64:d7:c1:20:61:97:53:d0:
                    f5:1c:b8:2c:f3:2d:42:3c:b8:ec:54:4e:41:fe:07:
                    03:28:5c:99:94:b4:ad:73:fa:3b:1a:d0:51:20:4f:
                    62:a0:1f:d6:31:6f:4f:91:50:9a:22:62:89:8b:07:
                    9f:fb:c3:6f:c6:91:bc:4b:8c:69:f8:2e:90:46:84:
                    9b:8d:d8:fc:25:b4:87:11:6f:fe:87:51:df:d1:bc:
                    b5:8e:08:52:36:0c:e8:d6:fd:b5:5e:77:47:52:12:
                    c5:50:b7:07:df:ca:a0:6c:19:4b:f4:b8:7b:ab:22:
                    cf:aa:62:f3:e9:02:26:d2:e3:a2:f4:87:18:c3:43:
                    cd:f9:96:81:e2:e7:20:97:e8:6e:ee:7f:75:6d:5b:
                    ae:40:63:4a:fa:32:7c:23:2b:e1:45:c0:b4:ac:10:
                    93:68:f6:70:1d:65:31:b9:25:f7:2e:b3:c1:63:3d:
                    1c:15:55:c0:13:7a:0c:c5:80:8a:8b:b9:4b:db:4a:
                    d0:ed:bb:7d:c7:d6:91:53:b6:12:c9:0d:06:c2:d3:
                    21:16:f1:7b:85:a0:ac:40:70:0b:aa:2a:39:2d:d8:
                    33:e4:63:0b:34:3c:9b:43:36:64:d3:e6:f2:b6:5f:
                    72:ad:fc:ad:2e:85:c6:70:d1:b3:63:77:45:49:ac:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:89:0D:E0:81:43:3A:29:2C:FF:4B:D8:AC:76:D9:75:E4:4F:C5:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:17:6e:69:9b:e3:30:7c:f2:16:e7:fa:de:4e:ae:1f:e2:fd:
         9e:fa:7b:a1:79:80:8e:09:b8:6f:7c:d1:2e:8a:9e:b6:05:91:
         66:fc:bb:c7:ed:36:6c:99:05:5d:61:f6:52:7e:15:e8:d2:2d:
         af:1d:39:6b:4c:00:dc:4f:73:3e:94:37:b6:5a:98:43:d1:de:
         e0:fc:07:ac:e3:66:43:b3:04:58:b9:e7:71:e0:dc:03:1c:64:
         8d:60:e9:82:3f:94:ac:10:aa:ca:81:09:e5:fe:76:e2:97:39:
         8b:59:9c:e1:26:65:2c:76:d5:e7:8c:01:7a:0f:b7:e9:d0:8f:
         e0:85:5d:c5:52:b9:64:de:99:38:84:d8:49:77:b3:3d:b5:6c:
         03:5a:0d:3d:3a:d1:10:d3:ca:3f:0d:13:32:a1:1f:eb:4d:7a:
         dd:f9:60:9b:27:45:66:bf:d8:f8:f6:ff:2a:ff:85:6e:5e:ab:
         2d:c9:db:d9:68:d1:da:92:5f:6b:5f:82:e8:24:ce:99:58:6e:
         79:04:1a:a0:95:52:d0:99:75:31:7e:77:ac:da:c3:11:b9:c5:
         db:ed:67:2a:fd:f1:ea:59:4f:3b:2e:3b:4e:a2:4d:81:d6:ce:
         4e:4a:3b:a7:66:79:ad:f0:3e:e0:5f:14:74:27:02:b3:e8:ab:
         33:a2:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:58:18 2025 by rpki-client