Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac9a30b3-b72b-3390-a6e3-8f73c9a06940.roa
File:                     ac9a30b3-b72b-3390-a6e3-8f73c9a06940.roa (raw, json)
Hash identifier:          AtBjC4oy5quv6dO0ILLGVIa3CHyEFIpPyEvTcZEgsFE=
Subject key identifier:   26:0A:B2:22:39:F2:30:53:E4:83:1F:07:36:B0:38:4D:F7:2F:2E:BB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7A3F8AF81C3BC25DCFF8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac9a30b3-b72b-3390-a6e3-8f73c9a06940.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:80e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7a:3f:8a:f8:1c:3b:c2:5d:cf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=98a79d6f-90da-49e8-ac6f-1a0dbabe507d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:0b:13:13:25:25:7c:b1:49:29:8f:24:66:
                    c6:10:58:8b:3a:ad:5a:a8:cc:03:b1:f9:da:34:1b:
                    58:d0:9e:a5:9d:1f:2d:61:d0:49:7c:52:f1:d5:99:
                    ef:77:fe:45:55:91:ad:84:00:7d:18:ee:31:58:3e:
                    08:1f:2c:dc:d7:4f:b0:6b:0b:8e:0a:dc:2f:55:58:
                    0c:85:17:40:f6:1e:f6:ae:86:6f:cb:bf:13:fd:06:
                    65:03:0a:4d:01:9e:0b:df:56:64:9a:9d:ba:1d:97:
                    9c:e2:df:5f:63:d2:cf:25:85:28:09:69:d5:3b:a8:
                    e4:c6:2f:fc:dc:17:b7:2a:0b:79:02:c1:70:03:68:
                    ba:54:46:e5:5b:b1:61:06:18:86:30:5e:81:70:d5:
                    fb:69:31:19:a4:6f:0b:cf:05:45:dd:e9:2e:32:24:
                    24:db:0f:ed:e8:3a:97:83:fe:c3:0e:94:07:1a:de:
                    ec:e6:b8:ea:1f:65:a7:9c:0b:58:d4:25:06:f9:11:
                    5e:ad:eb:06:1b:ee:90:7d:ea:69:a7:d3:3e:fd:a7:
                    2f:c3:d0:5a:d6:26:43:0f:c1:23:e1:65:aa:89:b3:
                    f9:7b:58:89:cf:f4:82:b9:96:dc:f0:e5:ed:9a:65:
                    e7:12:47:a1:59:67:0f:2a:ef:84:cc:4a:c2:c9:68:
                    6b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:B2:22:39:F2:30:53:E4:83:1F:07:36:B0:38:4D:F7:2F:2E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac9a30b3-b72b-3390-a6e3-8f73c9a06940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ae:44:73:a9:58:88:95:02:27:88:f2:e2:4a:f3:85:01:b0:
         c9:d9:e6:5d:75:fe:5e:5d:54:ba:ea:49:a0:06:3c:5f:43:9c:
         79:49:92:dc:a7:66:ba:8d:56:13:d7:37:93:60:aa:34:97:f1:
         6b:27:f2:ec:4d:90:b1:95:3d:cb:cf:8b:3e:ad:78:99:2a:29:
         d2:ba:d2:b0:bd:67:81:11:df:ff:ee:80:f3:24:d1:4b:ab:8a:
         2f:02:e6:0b:88:cd:75:1b:29:1c:bc:da:bc:04:29:87:1a:3c:
         76:05:c4:0a:e8:3a:3b:c9:d8:dc:b5:98:18:a7:6f:63:da:7f:
         8a:5d:f4:12:7c:12:3f:44:77:0e:43:89:e5:04:47:88:b4:11:
         14:66:6a:0a:dc:5c:d2:b6:99:6e:d9:b5:e2:03:a4:38:92:23:
         0b:35:6d:86:72:66:cf:2b:28:ef:87:a3:4f:5e:0f:0d:79:ce:
         87:1d:00:9d:58:ee:77:1b:b5:f4:49:28:d9:69:d7:e2:81:96:
         6e:63:73:4b:a5:0d:28:1b:d5:20:b9:74:a3:29:ea:76:52:e4:
         db:30:87:82:c1:41:4f:dd:77:39:37:4e:f0:21:94:4b:e9:d0:
         ed:64:aa:fa:8c:ae:8c:2e:14:8f:a7:0d:86:cd:f2:c3:c7:e4:
         fe:eb:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:24:54 2025 by rpki-client