Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aedcbf71-99ee-3299-8ec2-c012ee311934.roa
File:                     aedcbf71-99ee-3299-8ec2-c012ee311934.roa (raw, json)
Hash identifier:          GO/pibaWSHwQ/3ibu+Uwjiz9oJH+ZmB8QMONOtHWhrY=
Subject key identifier:   C8:CE:F0:D5:21:31:67:06:06:A5:97:94:BB:2E:41:2B:02:4E:A7:AA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9C5F8BD87B91583CFB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aedcbf71-99ee-3299-8ec2-c012ee311934.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9c:5f:8b:d8:7b:91:58:3c:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8645ab1a-ca37-4659-b775-ab8b1ab81e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0f:aa:95:23:0f:65:e9:7a:f0:d4:f0:b7:e0:
                    55:34:3d:aa:8d:45:26:de:36:bc:6f:39:76:3f:4e:
                    fa:b6:3d:e6:ea:31:2a:18:f1:33:a4:07:30:f3:42:
                    73:9f:90:c5:fb:f0:b5:98:0e:89:3b:bb:c4:3a:73:
                    ba:4a:14:90:dc:bb:03:eb:61:a9:0c:8e:18:8b:a3:
                    d5:99:27:b6:d8:0d:15:16:de:53:4e:ee:c8:e5:ea:
                    76:6c:72:fe:c8:89:5e:b1:4f:f1:fe:c2:bd:42:c4:
                    2f:fc:a8:eb:ca:4e:76:3c:94:fe:75:26:54:f8:64:
                    7b:c8:e8:6b:7f:d1:09:68:a4:bc:9f:3e:c1:24:78:
                    46:b3:2c:0d:a2:fa:69:40:c5:98:05:86:76:4e:52:
                    34:a7:70:6c:48:83:ba:d0:03:45:4c:2d:24:dc:41:
                    40:69:1b:77:51:d1:8a:d1:e8:e1:ba:5a:cc:f1:f6:
                    6c:c2:55:a0:7e:20:73:18:39:0f:b0:c6:d8:8a:70:
                    e2:28:ec:a4:36:45:43:34:f0:03:ac:d4:9c:4f:e1:
                    90:0c:2a:b9:9a:b7:84:95:79:4c:0b:f1:f2:41:e4:
                    4c:b8:d0:b4:04:da:82:72:85:50:bd:57:e1:6f:5a:
                    f7:99:ec:d2:1f:19:89:c3:ea:17:65:82:89:7a:aa:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:F0:D5:21:31:67:06:06:A5:97:94:BB:2E:41:2B:02:4E:A7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aedcbf71-99ee-3299-8ec2-c012ee311934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:ce:f6:84:21:da:d5:a4:55:46:20:ce:59:e6:9b:fe:04:
         d5:a1:4c:46:29:90:f0:c4:89:e7:10:05:2b:7b:e9:52:10:e0:
         a8:9f:eb:dd:87:de:1c:e9:79:a3:de:88:a6:1e:bf:85:a5:c1:
         24:ef:7f:5d:c5:6f:6a:33:cc:6c:97:80:08:48:fb:9c:c4:3d:
         36:30:a2:c0:7b:b3:fc:08:b6:56:ec:e2:4b:22:17:01:60:02:
         35:2d:f7:a8:bc:a8:3f:c9:25:c5:64:1d:75:39:ff:e6:9a:6d:
         1b:30:99:24:b5:33:89:0b:f7:fe:c1:f1:d4:d6:38:ac:8b:86:
         2f:6a:8a:55:b5:4a:15:07:27:57:44:4b:53:55:cf:a4:73:28:
         aa:34:a0:b0:8a:22:33:7c:f5:fc:d9:0b:41:be:69:15:63:e3:
         e1:7b:17:1d:7a:99:7a:3b:39:1c:92:6f:02:ed:3a:41:e5:ee:
         57:fd:6a:ec:4c:b4:53:42:bd:1c:e9:14:ce:43:05:9d:d7:5b:
         e6:75:d7:d4:e4:b2:4f:5e:ad:b6:73:63:97:af:f8:08:62:f3:
         ea:29:1d:d2:62:f2:ac:e0:80:bb:5b:f4:5a:76:08:d2:ee:a8:
         d4:ad:17:7e:af:17:21:3d:95:4e:89:16:8b:28:f1:29:b6:a7:
         f8:05:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:03:58 2025 by rpki-client