Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa
File:                     a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa (raw, json)
Hash identifier:          gFhyFecKFZldEfU2v1+MKumPUFMhHP9Tkzu8xitQsZY=
Subject key identifier:   31:F9:82:EF:01:90:DC:E3:A6:ED:81:9F:E3:09:C6:29:CE:C4:BA:DE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9D0225C35A7EE0D89F40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:803c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9d:02:25:c3:5a:7e:e0:d8:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=4ca9b9e8-3159-4e36-b73c-8d09ff4284e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:a3:51:c2:d3:96:8c:f0:26:72:68:11:88:
                    98:66:df:a8:e8:aa:48:ce:97:f3:c9:90:52:43:7a:
                    75:06:0e:bb:16:a6:de:01:03:54:36:91:97:26:73:
                    75:c7:1e:f7:30:fd:55:0f:c3:3c:50:77:91:bf:72:
                    ca:34:07:31:a6:7d:97:7f:23:0a:6f:ea:d2:d5:7e:
                    7b:32:a3:7d:8d:94:4d:89:8c:68:cb:c7:1d:72:97:
                    0e:e3:2d:61:4f:e7:16:c1:1a:1a:f1:11:bf:c5:d2:
                    c2:6d:c1:dc:fa:48:1f:fa:b0:14:f0:d6:19:c5:fc:
                    f9:4c:83:4a:4e:f3:3a:51:3d:be:3f:fe:09:4c:3e:
                    29:4e:3a:78:2c:b5:26:25:6c:e0:db:be:f2:d3:32:
                    c7:ef:63:08:8b:4d:8b:19:2a:e3:4f:6f:c9:15:db:
                    cc:bc:a6:b9:81:d6:83:31:18:16:d2:81:ea:8f:55:
                    5e:80:aa:ca:36:13:03:4a:38:48:22:33:5e:32:77:
                    b4:f5:cc:57:b6:69:17:33:c1:ae:27:a6:97:a3:6e:
                    23:13:a2:2d:2f:00:a3:e1:51:62:c7:c0:ae:1b:c5:
                    e1:52:d8:00:86:58:19:c9:8a:ef:08:19:38:3f:52:
                    47:5d:fd:da:f7:86:8f:76:30:1d:2d:ba:a6:c9:e1:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F9:82:EF:01:90:DC:E3:A6:ED:81:9F:E3:09:C6:29:CE:C4:BA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:803c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:83:dc:38:2d:4e:64:41:a4:f2:18:77:6e:82:9e:18:c3:
         a1:6d:bc:c7:dd:4e:52:99:68:6e:f0:61:69:64:4f:c5:49:dd:
         82:a3:37:f3:b0:05:07:3f:76:73:a5:f9:49:e0:97:22:0c:71:
         b7:67:15:a2:d0:e6:51:b1:3c:dd:5f:0a:81:65:0f:91:df:3f:
         21:52:a2:43:65:89:bd:24:3e:64:13:5e:b9:2c:12:e8:02:54:
         16:4b:5e:7a:bf:21:d1:ab:54:c2:09:6b:6c:8d:c1:95:2c:64:
         5d:ce:8d:0c:2a:3f:22:23:61:c3:e7:b3:89:c9:fd:e6:c6:e2:
         84:df:47:bb:96:49:98:4a:8a:5e:e2:ef:4a:1d:e7:63:85:18:
         bf:a3:3a:37:6a:78:49:a8:5d:c8:84:d5:91:ce:65:bd:b3:f8:
         aa:05:7d:4a:69:7c:a3:0a:d7:4a:49:01:46:36:b7:b4:5e:c1:
         87:c5:3b:f9:ef:b8:ce:52:0c:57:6f:16:24:07:e5:bd:00:d9:
         c5:39:0d:e4:1d:33:fb:0d:1e:4b:54:2e:52:98:4d:3d:84:80:
         3a:be:f5:78:08:82:3b:1f:7e:90:e2:5e:f7:f1:86:19:48:c3:
         ce:97:46:bc:e3:9a:09:4a:e0:4e:46:a4:85:01:4e:81:18:34:
         ab:5a:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:44:59 2025 by rpki-client