Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa
File:                     a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa (raw, json)
Hash identifier:          KoODTZqGainNBeSAJKsUlZsZF8JYqcxkkceNlpuIqZ0=
Subject key identifier:   2A:6A:A1:7C:96:C3:1A:51:BE:F0:63:71:22:09:90:64:3C:00:EA:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F764EBA3803E46FD2D100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:822e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:76:4e:ba:38:03:e4:6f:d2:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=f9b3e5f3-60df-42fe-9e2c-c76eb11e6e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:b6:00:19:49:37:f1:1d:f2:21:b1:6f:a0:
                    1f:aa:57:46:2a:49:5f:ac:73:b0:a9:4f:23:7e:d7:
                    ec:fc:75:e3:5b:83:7e:f3:2d:75:c0:5a:cc:ed:9d:
                    a0:51:14:77:ee:d1:e8:a8:71:22:68:13:83:bb:99:
                    60:de:72:e8:4c:12:3e:10:c1:e7:ce:c9:d7:5e:28:
                    bd:02:c5:12:71:b2:2e:38:1d:47:14:7a:d9:a4:5b:
                    14:d8:f4:51:8c:6b:82:7b:2d:b3:95:76:4d:ae:e6:
                    ee:cc:c9:6e:f8:07:7d:c4:d0:c7:4f:58:9a:aa:f2:
                    2b:60:50:ce:ef:b7:7a:1d:6d:7a:8c:08:f6:e2:fe:
                    94:55:ce:14:08:2d:b1:5d:83:4a:fd:b9:f0:5f:1b:
                    19:cc:a4:2d:30:16:bb:9d:75:ff:e4:7b:6e:fa:34:
                    ff:47:25:e3:84:ee:27:e2:20:79:86:ca:07:c2:9f:
                    72:93:36:a8:9c:f9:ba:c7:bf:41:42:e6:89:e1:01:
                    5f:fb:8e:e7:32:da:b3:70:29:4b:79:37:fd:5a:cc:
                    25:5b:d4:b1:b8:8c:6a:a0:36:fc:4d:64:29:e7:5e:
                    34:3c:df:40:c3:81:76:45:ae:55:60:e4:b6:ad:e4:
                    06:b9:e1:af:05:4e:57:5e:50:e5:3f:a9:76:a0:ec:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6A:A1:7C:96:C3:1A:51:BE:F0:63:71:22:09:90:64:3C:00:EA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a39e01f6-36a4-3862-a0aa-47a703b8bd33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:822e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:90:b3:6c:58:75:1b:b4:bc:b0:b6:a6:1b:2a:80:78:8f:cd:
         f1:25:dc:24:73:5a:9c:d7:cb:c7:27:fc:da:77:7d:7c:71:36:
         1a:0d:a9:84:93:a1:bd:33:5a:10:8c:b0:1c:d2:5f:c0:4c:e2:
         77:a7:d0:f2:78:90:14:73:24:66:5b:b9:bd:55:67:3c:f2:06:
         a5:fc:96:55:ab:d4:d5:a8:86:54:72:ad:63:3b:9f:3c:0d:d1:
         a3:38:f3:84:3a:f5:32:b5:b0:6d:c2:98:30:be:4d:76:68:c3:
         8b:0b:ad:9b:f5:38:42:b6:49:e5:20:3a:88:5d:92:7a:b6:70:
         41:92:d5:a2:28:86:fc:bb:b9:cc:c7:12:d5:65:5c:86:11:fa:
         47:99:c0:07:6c:12:54:ed:d3:df:19:ca:b1:75:79:a1:5d:d2:
         04:7b:aa:d3:c6:34:5b:f5:b9:28:fe:65:71:0f:49:fd:4e:22:
         f6:40:a5:7e:6f:bf:6e:b3:94:6b:10:66:78:9e:08:d5:a1:db:
         d1:88:16:ba:74:96:df:30:41:4b:65:78:d2:32:83:c1:66:17:
         ef:16:33:37:07:92:5f:e3:69:b0:78:37:ed:49:38:41:1a:dc:
         bc:70:13:d3:02:9b:f4:64:0b:fd:ee:ff:31:02:6a:df:1e:17:
         24:e3:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:43:51 2025 by rpki-client