Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa
File:                     bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa (raw, json)
Hash identifier:          EnHqTJVm71hgxMOz0xCO1hSrxF/zuuAguSP7j/LrK+I=
Subject key identifier:   CB:D6:BF:7F:E1:D4:DE:AB:9A:87:27:0E:BC:66:97:F6:CB:56:9C:ED
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA3381E7DBADB0E8BD800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8067::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a3:38:1e:7d:ba:db:0e:8b:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8cdaf76a-1880-4555-80dc-6a6a58cf4bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a3:20:9f:51:84:57:1c:a6:2f:dc:b9:a2:b2:
                    fd:b6:6c:a8:ee:ea:fa:ba:76:27:9f:80:b2:aa:dc:
                    9f:42:3e:9c:db:94:0b:82:1f:b1:f4:aa:33:78:38:
                    ea:71:ae:33:de:50:d6:f5:9e:2c:6a:9a:bb:14:67:
                    f9:69:3f:57:0d:00:6c:84:c4:be:4f:f8:5b:56:d1:
                    8b:96:8a:a6:76:c2:39:d6:a9:b5:db:a3:b4:92:f8:
                    cf:3d:62:fc:bd:7e:6b:9a:ff:5d:fa:98:4f:74:9b:
                    c4:19:fc:54:b3:88:a6:12:f0:81:cd:53:09:2e:ef:
                    fa:8d:ff:61:c4:c4:f1:5a:53:3b:df:a4:33:3b:7e:
                    28:a1:26:e4:72:4d:f9:5e:82:a2:0f:ec:21:a4:fa:
                    bb:c4:22:57:77:d4:2d:15:55:fe:9e:bc:ca:39:a0:
                    99:98:02:7f:36:29:08:5c:ac:06:58:79:18:d2:15:
                    19:78:38:70:39:0f:3e:b5:fc:f9:1e:a1:65:0e:04:
                    b1:c7:a9:b6:26:49:9e:15:f3:32:3e:1b:47:78:c6:
                    17:3f:7c:80:12:7b:69:3c:4a:e6:fb:7d:f2:39:27:
                    66:de:d1:17:87:d4:8d:9a:e7:b9:2b:58:41:a1:f9:
                    0d:e5:18:71:a1:52:31:64:10:b9:00:58:d4:e4:86:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D6:BF:7F:E1:D4:DE:AB:9A:87:27:0E:BC:66:97:F6:CB:56:9C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd8e9e2b-1f34-3a77-a74f-47d6def27f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8067::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:e5:b0:19:ef:12:64:52:30:1b:7f:5f:85:87:48:5b:ba:
         42:52:b8:d4:07:a0:5d:0e:dd:1d:3c:64:5f:a8:48:20:93:14:
         c6:e2:88:56:73:71:5a:5f:d0:fd:10:cd:03:fd:e0:a5:66:44:
         e1:f2:7c:d8:f0:3e:1c:c5:21:18:7f:23:00:3c:79:ed:e0:ba:
         31:2d:93:08:88:d6:e9:8e:37:48:96:14:35:02:34:7e:d9:5c:
         37:a7:dd:77:12:34:02:58:4e:e9:9a:fd:a8:ad:41:e6:54:cc:
         17:ac:27:da:53:53:c5:7f:71:f5:5d:aa:bb:a8:97:1d:38:95:
         e4:f4:f3:6d:0c:9f:d9:b8:9a:fb:b7:1c:25:e4:76:ce:3b:2d:
         b3:03:f0:f7:14:d6:21:92:b6:a9:ef:f6:7b:7e:f3:b4:3e:aa:
         ad:57:0c:4c:ed:89:03:9c:15:01:08:3e:b9:87:7c:a6:8a:1b:
         2f:be:2e:41:18:03:06:b9:f8:c8:15:e8:c1:9e:ee:f2:ae:ca:
         ee:64:dd:21:a2:fe:a6:fd:e1:6e:b7:48:d2:de:7f:a9:be:5a:
         a7:1c:cd:b4:7b:e3:dc:ed:4f:57:b9:34:4e:0a:29:61:c4:29:
         f7:c7:7a:93:3b:e0:03:5f:ea:28:b7:68:f3:ee:76:4b:de:52:
         07:b7:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:56:37 2025 by rpki-client