Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/be12646c-8a81-31c0-b261-0800b158de0d.roa
File:                     be12646c-8a81-31c0-b261-0800b158de0d.roa (raw, json)
Hash identifier:          9FQ4G43EafI+z+Tmj/a0XoSoeeaMKdi/TCcvlznFVD4=
Subject key identifier:   2D:69:93:A9:9D:03:8B:4F:C9:14:C8:87:E3:52:FB:2F:74:14:F9:5A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA4154F555D7F392B3740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/be12646c-8a81-31c0-b261-0800b158de0d.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:812d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a4:15:4f:55:5d:7f:39:2b:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=34ad639c-f2f2-458e-b436-5130e35e53fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:87:57:be:0d:7e:3a:4c:42:88:c9:da:50:
                    f8:dd:15:82:ff:1b:b9:9c:4f:0e:4b:25:03:db:73:
                    c6:34:93:a0:89:bb:e1:e0:f9:c9:5d:de:3d:3f:71:
                    eb:e0:ab:5a:2b:77:d3:45:c2:af:3e:a5:72:85:8e:
                    42:da:71:69:7b:8e:d8:25:21:a1:d8:2d:48:8a:f8:
                    f3:e7:84:1b:d5:a2:96:f0:91:06:7a:dc:78:1b:a7:
                    94:69:2a:f8:4a:43:0f:60:92:88:3e:66:1a:21:59:
                    5e:cc:31:74:47:ea:50:00:d7:6e:83:6b:40:0c:38:
                    07:7f:35:64:ba:41:66:f1:62:d3:0b:e0:0d:66:fe:
                    fc:3f:f6:36:3b:36:d5:89:c0:9f:b0:08:d4:82:f1:
                    a9:e2:4c:50:89:06:9b:99:e4:9a:5a:4f:df:4c:29:
                    f2:f0:0c:37:51:be:7e:c7:a8:dd:2e:95:04:ad:0b:
                    28:31:6e:ac:86:da:14:c4:b7:a1:dc:1f:01:d3:4b:
                    4f:fc:7f:eb:45:b6:e5:e7:bf:91:a8:d8:1d:bc:07:
                    3e:6c:a7:c9:3a:28:cd:d2:da:22:15:c7:fd:1a:1c:
                    c5:f8:4a:96:a0:fe:cc:fe:81:87:da:66:fd:8c:cd:
                    c6:4f:e8:d4:68:c2:ea:89:9c:3b:4d:58:44:60:18:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:69:93:A9:9D:03:8B:4F:C9:14:C8:87:E3:52:FB:2F:74:14:F9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/be12646c-8a81-31c0-b261-0800b158de0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:812d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:32:28:a9:ee:64:bd:1a:38:85:b1:a8:71:d2:00:8a:54:
         0a:f1:bc:e3:80:08:09:fe:d0:a2:18:23:c8:a2:36:88:d2:1e:
         66:b7:b4:bc:a1:75:bc:31:4e:d9:19:07:b9:48:bd:4a:f0:eb:
         d1:e5:c2:27:1f:d6:31:79:97:72:50:c1:06:16:af:cc:4b:04:
         f3:90:b8:86:b2:6d:21:5f:b5:e0:ea:aa:78:5a:42:ec:5a:7e:
         8d:2e:9e:77:17:7c:32:17:44:ed:d7:45:f3:59:02:58:ea:18:
         5b:6f:6d:b1:bc:04:47:25:f7:9c:19:5f:ed:97:b6:fd:56:52:
         f7:68:f9:66:ee:cd:80:b9:4a:44:ac:57:f9:c7:43:a3:10:ff:
         f5:ec:98:5b:84:22:10:60:5f:1f:b2:8b:23:75:78:96:08:47:
         cb:d9:0d:d4:cc:3b:3e:37:8b:e9:f9:fa:41:88:7b:f6:f7:f9:
         f9:7f:4b:0b:33:15:f4:54:33:db:08:7a:00:0c:70:8b:2b:e0:
         bd:cb:d6:e2:1b:03:fb:e8:11:ce:8d:49:56:da:5d:ec:1d:03:
         55:aa:af:f7:fe:d8:ab:e7:bd:7b:b6:b2:6a:35:a3:dd:da:9d:
         e8:3a:e3:45:11:23:5d:45:08:2c:c7:48:b0:17:1e:97:45:b2:
         ae:ab:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:30:06 2025 by rpki-client