Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa
File:                     cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa (raw, json)
Hash identifier:          tu6dcAW3460g+/1eO6lYM47PwGyG+a3dQMWp+XhrAY8=
Subject key identifier:   05:DA:DA:12:8E:8A:0C:44:71:D7:25:1A:CC:71:91:6A:45:F8:00:04
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7ADE61531C7E2FCC5F50
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:811f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7a:de:61:53:1c:7e:2f:cc:5f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=3ff65b6e-3a67-45b6-8b92-fc6906188076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:66:8c:30:f0:14:a9:ef:e5:4e:5b:92:b2:
                    d3:99:51:9a:c9:0c:88:c2:80:75:83:96:75:c3:d9:
                    0f:1b:f5:69:79:31:29:14:3c:22:4f:e9:dd:1f:11:
                    68:7a:6b:6e:bc:80:7f:ff:10:76:1c:84:36:70:5f:
                    71:31:16:91:5a:23:78:3c:94:1c:1f:77:73:3a:03:
                    a6:8c:af:66:3d:86:43:ca:c5:9c:04:9f:22:cc:64:
                    43:d9:d7:74:56:28:b6:c4:ce:d5:ca:fa:a1:a4:f7:
                    92:8d:86:93:20:a6:f1:b7:89:07:37:a7:17:ef:3e:
                    b9:7d:ae:06:c6:f9:a3:13:e9:5b:af:27:c0:5d:84:
                    22:82:bf:4b:a4:a0:07:20:86:a4:ed:3a:be:55:b8:
                    bd:4f:ae:ac:75:0d:46:e7:07:5b:5f:c7:f2:1b:a6:
                    a8:75:67:9a:e0:b4:0c:d7:19:be:1e:72:2d:3f:f1:
                    8a:4c:19:ad:6a:c7:35:dc:1f:65:e1:5d:3c:62:d8:
                    97:a2:90:d4:35:d3:33:6c:c8:b4:f2:ff:d8:3c:94:
                    a2:e1:fb:35:97:ea:c2:d5:57:37:05:ee:e5:dc:7d:
                    0c:b0:f7:aa:44:59:90:dd:a4:5b:91:3f:f3:ca:b4:
                    a2:45:43:19:dd:0f:02:8f:55:2c:87:16:69:65:6b:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:DA:12:8E:8A:0C:44:71:D7:25:1A:CC:71:91:6A:45:F8:00:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd98a871-a841-3c5a-9ed5-265e6cafe1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:811f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:61:87:a7:2e:92:dd:a7:01:52:68:0f:02:58:22:a6:d9:c9:
         06:7f:1a:5e:67:be:6f:00:d8:f3:7b:c2:2d:2c:c8:78:f8:d8:
         3c:e5:44:75:63:c4:c5:7c:f3:93:94:2c:07:63:08:82:fd:89:
         a6:d7:47:73:8a:2c:47:4b:99:b4:1e:a0:9c:1e:13:a0:3d:5f:
         16:bf:9f:01:a2:c4:19:b8:1a:a2:91:3d:ae:fe:e0:e5:00:7d:
         22:95:10:ae:bb:87:9b:6a:81:b2:ff:d0:a7:5a:49:f4:75:d4:
         b5:25:65:78:e5:9a:48:46:71:b3:2b:ca:56:56:47:a2:0a:34:
         34:6e:36:28:c4:39:c1:35:75:a4:36:61:af:28:4e:cf:59:ba:
         8e:a9:d6:01:b1:aa:30:e5:20:19:c7:21:1d:f7:8b:ca:7b:00:
         2e:98:71:5e:c9:1f:bb:9d:a7:bd:a2:04:31:08:67:06:41:49:
         12:fb:ce:ba:cb:c2:75:a7:e0:3f:01:b6:76:d9:58:19:35:bc:
         16:c8:23:ea:b1:dc:1c:eb:75:f6:d6:5b:35:d2:8c:55:58:96:
         b2:3a:90:58:97:c9:69:90:76:29:b5:54:77:98:4b:52:da:b9:
         e8:79:ea:0b:9b:d5:4e:3a:07:f3:c6:4a:b4:67:2a:51:0c:df:
         40:f8:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:17:14 2025 by rpki-client