Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/901e5e2a-7645-3d9f-9a9f-701897294a89.roa
File:                     901e5e2a-7645-3d9f-9a9f-701897294a89.roa (raw, json)
Hash identifier:          SFKNiz9DD7iMn+G2gLt7gdYvGBL9FRWExWtorVU9jPU=
Subject key identifier:   86:9B:02:40:B3:82:7D:1A:FA:A1:93:78:6C:48:29:01:77:4D:D9:3A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA070EAF3320F81F82500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/901e5e2a-7645-3d9f-9a9f-701897294a89.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:81f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a0:70:ea:f3:32:0f:81:f8:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=05c00d27-9084-4fbc-b24e-321ab7e6c1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:61:01:b6:3b:8c:f2:b2:d4:c3:af:ee:87:
                    aa:b9:75:a0:64:76:5d:d1:3e:7b:d4:0c:29:9e:84:
                    ba:e8:c5:a3:fd:4e:b7:03:5b:25:f7:bc:f8:7a:1f:
                    94:8f:55:89:81:e7:1b:81:20:42:e8:62:46:ab:32:
                    8a:ad:f1:84:42:38:a1:26:d9:ed:11:f3:5d:47:a3:
                    c1:cc:40:77:53:1c:75:7c:86:d1:af:0e:a5:f6:a9:
                    84:f1:b8:b1:57:a0:cf:d4:38:c7:2f:59:df:81:7f:
                    8a:ec:cb:64:ec:3f:bd:72:5a:99:f7:ab:c6:13:e8:
                    69:79:cc:ac:32:15:34:d7:77:53:1f:e6:91:c9:8a:
                    68:06:f8:0b:89:f6:fd:6a:2a:e8:a9:e0:85:28:d6:
                    e0:b4:aa:58:08:c2:1b:c0:e3:e5:dc:7b:b3:ab:a0:
                    f1:1b:f9:df:c6:64:3b:ad:b0:00:c7:61:39:66:0e:
                    32:57:77:93:7a:1c:b9:84:c8:c5:3e:e9:aa:71:5c:
                    e4:61:fd:bf:e3:3a:9a:2f:6b:94:e6:42:8d:43:a5:
                    08:d2:66:4b:50:58:b8:e1:1c:e1:44:a5:72:93:f0:
                    df:17:48:56:a3:0c:39:b3:34:08:0c:d2:8d:65:65:
                    0d:d5:c2:97:ca:8f:15:3a:de:d9:29:76:54:fd:81:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:02:40:B3:82:7D:1A:FA:A1:93:78:6C:48:29:01:77:4D:D9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/901e5e2a-7645-3d9f-9a9f-701897294a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:d4:4d:ff:55:b7:2c:7b:39:a7:24:91:e1:4f:e1:d8:5b:
         51:8f:39:c2:68:1b:43:3c:23:45:f4:42:04:68:d7:d3:60:d6:
         da:64:0a:56:58:93:61:cf:6c:b3:3b:30:a1:aa:ba:e2:43:71:
         d9:d0:73:c7:75:0f:88:83:4c:52:4c:72:36:4c:20:0c:70:8c:
         8a:35:a6:de:d3:49:e9:18:3e:91:f8:d0:2d:e5:1b:fa:8e:8a:
         e3:e5:40:4c:83:71:33:73:e3:31:11:eb:87:51:20:0e:b3:04:
         59:40:c6:5d:0f:b5:27:b1:c5:0c:a9:33:2b:49:9c:da:bd:f9:
         8c:45:7d:c1:1b:4e:93:89:10:43:c6:76:78:4e:ca:65:3c:6e:
         0b:6f:e7:57:63:86:56:19:8e:f8:6a:08:ae:aa:fb:e3:a7:eb:
         a0:d8:0e:d0:c1:62:a9:ce:d5:f9:df:5c:76:ec:f6:85:c2:61:
         ff:ae:7f:85:b6:4c:be:25:f1:c2:3e:c5:99:83:e5:f4:f1:63:
         19:33:34:a9:2b:7e:02:7f:04:92:2d:fa:95:0e:6f:89:d7:c1:
         62:2d:21:9f:1a:3d:8b:78:a8:28:6c:3b:a0:65:da:01:fd:fe:
         af:72:bb:aa:a9:0a:62:59:15:2a:56:0b:1b:bf:77:41:7c:5f:
         15:12:42:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:37 2025 by rpki-client