Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f6af021-f44a-3247-84ae-d1916638160c.roa
File:                     8f6af021-f44a-3247-84ae-d1916638160c.roa (raw, json)
Hash identifier:          2FHnTOe7zFTEl4NSzMFNt9MDiZDkmABL5+cEh2U2jRU=
Subject key identifier:   83:C9:A2:96:18:8F:13:50:AE:8E:0B:93:4D:70:2C:C5:B4:96:3F:BE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F98F0C6017E3B5E1684C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f6af021-f44a-3247-84ae-d1916638160c.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2607:f098:20ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:98:f0:c6:01:7e:3b:5e:16:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=527932d1-aab6-46d1-94a3-6f5ecb64067c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:ce:2f:7f:32:b7:01:22:e0:0e:43:98:46:
                    55:e9:9e:2e:1e:c8:6a:bf:61:18:a3:cc:cc:bd:89:
                    66:2e:70:09:ac:85:2b:8f:7e:14:ca:cc:5e:ec:a5:
                    62:5e:f6:31:d4:9a:22:ae:f4:a4:fd:d8:71:34:f6:
                    23:c2:95:fb:fa:54:ab:f9:d2:22:b1:87:0a:f9:30:
                    34:3c:f5:0f:e3:e2:ed:e6:59:4b:47:95:fc:67:c4:
                    f6:de:b9:55:d5:6f:d5:ea:b2:90:de:95:c8:dc:ce:
                    e0:50:87:73:5d:34:d2:a1:2c:87:55:10:75:b8:4c:
                    2c:21:73:a4:17:d3:c2:53:b3:9e:90:4c:5b:e5:9a:
                    3f:da:2f:5a:90:31:b2:71:17:55:99:cd:04:86:ec:
                    86:c8:b8:98:62:7d:b8:47:37:c2:e7:ec:68:ba:f2:
                    8e:1b:3d:fd:29:3e:5c:fb:0e:b0:bb:71:c3:89:6b:
                    d5:6b:fb:aa:59:c7:4c:a4:9b:87:08:27:8f:62:a6:
                    d8:9d:1a:ff:54:93:25:8b:7f:7c:2e:83:f1:5d:02:
                    bd:ea:dc:48:0f:78:1b:06:59:6a:8b:2a:68:0e:04:
                    53:b3:63:f1:99:be:e6:fa:12:c9:fd:a0:73:f6:3b:
                    88:0f:30:9f:ac:c7:88:5c:c4:36:1e:f3:2a:61:77:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C9:A2:96:18:8F:13:50:AE:8E:0B:93:4D:70:2C:C5:B4:96:3F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f6af021-f44a-3247-84ae-d1916638160c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:20ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:18:ce:34:3f:ba:0b:74:22:c8:f9:e3:4f:11:51:96:59:
         99:b3:f5:7d:30:1d:12:43:b3:c3:38:e7:30:51:48:29:08:a7:
         91:df:03:66:f7:21:d8:74:36:cb:b8:4b:77:71:ef:eb:f6:42:
         97:ac:c1:ea:de:5f:26:c3:2e:3f:68:3b:56:cd:09:5d:33:e2:
         e4:06:f7:d5:5c:e2:cb:5f:e8:c9:9b:6f:e7:67:f3:99:81:23:
         61:80:ab:1b:e3:f2:4d:9e:70:de:25:6b:e7:78:6e:72:50:07:
         92:e8:8b:01:65:1f:d5:94:e5:5f:7e:b7:c5:c8:f8:77:1d:17:
         d9:c6:9b:ae:eb:6d:24:a5:c3:8b:46:be:87:40:d9:82:f8:26:
         b7:83:03:db:e7:fd:c1:d3:cc:44:25:dd:b8:2a:34:c9:4a:03:
         5a:c4:9e:93:ec:65:29:15:c8:7c:5e:d5:60:8e:a8:81:34:47:
         91:28:bb:20:15:30:da:02:12:8f:62:84:06:98:cc:01:d7:17:
         a9:a8:6d:90:3c:05:3e:a5:80:b6:df:2f:24:c4:0c:01:2f:89:
         a0:ce:03:47:0f:8e:ef:b4:f8:10:3c:3b:14:d5:a9:cf:00:d3:
         66:32:d6:94:85:80:f4:ef:c8:2c:77:d0:13:54:46:67:2e:53:
         50:f4:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:44:27 2025 by rpki-client