Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2ddae18-12e8-3557-bc02-cc9554be6470.roa
File:                     d2ddae18-12e8-3557-bc02-cc9554be6470.roa (raw, json)
Hash identifier:          QJL9p23/dQoZwyMPECTn7r1rRNPoIrDeDrimXMkdp9M=
Subject key identifier:   A6:2D:7C:2E:13:C3:DE:B5:CD:05:93:CA:36:6C:AE:19:78:B1:6F:AE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7005C75C3E3F9B2B8380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2ddae18-12e8-3557-bc02-cc9554be6470.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2603:903e:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:70:05:c7:5c:3e:3f:9b:2b:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=72a3e17a-0508-4086-9710-290cb88ae5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:a6:1d:ef:02:2e:24:88:93:b8:ee:c4:93:
                    6e:a5:64:3c:50:df:02:19:05:e8:44:be:cd:01:33:
                    e0:1e:41:48:4a:93:67:1c:86:47:29:84:cd:ac:dd:
                    34:79:9f:a3:4f:6c:7a:a0:33:b3:9b:55:83:e6:91:
                    0a:ea:6e:e5:d0:2d:d1:85:60:b2:d1:65:b4:bd:d7:
                    56:9f:40:92:03:9e:34:a6:99:80:57:64:84:08:bf:
                    ad:f3:35:14:6b:fb:f2:ad:63:a0:7a:39:8a:75:89:
                    33:c9:dd:19:d9:96:a5:af:4d:64:cd:da:2a:55:4d:
                    55:38:4f:c3:8d:e2:df:07:be:96:5e:8c:60:f9:79:
                    60:da:e9:6a:16:c6:13:e0:0f:d9:6a:5c:8d:90:c5:
                    52:e1:82:e5:93:fd:fd:d1:60:8d:5a:fd:9a:c1:36:
                    67:59:d4:1b:27:fc:f7:61:7d:6f:f7:15:d6:b4:8e:
                    43:bb:fc:e9:53:52:11:98:8d:05:2a:db:99:e9:dc:
                    0c:d1:92:1f:45:41:0b:2a:4e:df:46:4f:d5:86:d2:
                    e5:b1:05:ee:eb:58:a6:f1:ac:b9:a7:37:70:3a:a9:
                    a7:7b:3f:fd:74:8a:f2:94:32:16:6c:01:40:05:bb:
                    34:dc:cc:84:d2:02:9c:27:06:d1:1f:90:1c:29:35:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2D:7C:2E:13:C3:DE:B5:CD:05:93:CA:36:6C:AE:19:78:B1:6F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2ddae18-12e8-3557-bc02-cc9554be6470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4a:c8:e2:f6:cb:e1:34:12:dc:32:c4:f6:73:01:36:fb:f9:
         3f:a9:1c:4d:d7:e4:18:8e:e8:ab:f2:63:10:23:09:19:a1:e4:
         a3:1f:ca:8c:3f:e1:5b:d5:89:d8:50:1e:dd:be:4a:20:70:23:
         16:64:a3:de:1a:6a:3f:3c:69:3e:03:1e:17:31:d5:60:ee:a7:
         e4:96:76:06:55:39:ae:a5:62:60:80:f0:b1:f0:8f:be:8a:29:
         ff:46:56:68:01:22:72:d7:ff:0f:87:be:a6:04:5d:95:6d:db:
         f2:da:19:34:bd:3c:8d:63:83:bf:c7:7b:15:3d:ff:f6:e3:a6:
         5b:0a:a0:d8:79:3b:bd:3e:29:24:1a:b7:7b:7d:bf:bc:b4:43:
         da:70:65:41:16:f4:eb:e4:31:55:de:76:99:37:f7:ef:1d:42:
         80:cf:d5:32:36:74:98:5f:00:a1:0c:d3:77:60:3c:bc:ff:98:
         3d:e5:f8:1f:2c:4f:e1:8b:2b:cc:8a:e2:dd:cf:44:a7:4c:3b:
         51:96:72:63:ba:e3:46:86:0c:e9:0f:ae:d7:a4:5e:bf:6a:f0:
         93:49:69:12:21:a9:d4:df:27:0b:57:07:ef:4b:f2:af:23:10:
         bd:f2:d0:12:e0:78:52:e7:e7:bf:ef:12:c2:0d:07:6c:e8:83:
         86:b0:6b:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3AFx1w+P5srg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
NzJhM2UxN2EtMDUwOC00MDg2LTk3MTAtMjkwY2I4OGFlNWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OOmHe8CLiSIk7juxJNupWQ8UN8CGQXoRL7N
ATPgHkFISpNnHIZHKYTNrN00eZ+jT2x6oDOzm1WD5pEK6m7l0C3RhWCy0WW0vddW
n0CSA540ppmAV2SECL+t8zUUa/vyrWOgejmKdYkzyd0Z2Zalr01kzdoqVU1VOE/D
jeLfB76WXoxg+Xlg2ulqFsYT4A/ZalyNkMVS4YLlk/390WCNWv2awTZnWdQbJ/z3
YX1v9xXWtI5Du/zpU1IRmI0FKtuZ6dwM0ZIfRUELKk7fRk/VhtLlsQXu61im8ay5
pzdwOqmnez/9dIrylDIWbAFABbs03MyE0gKcJwbRH5AcKTX5wQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKYtfC4Tw961zQWTyjZsrhl4sW+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDJkZGFlMTgtMTJlOC0z
NTU3LWJjMDItY2M5NTU0YmU2NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgOQPgAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA5KyOL2y+E0EtwyxPZzATb7+T+pHE3X5BiO6KvyYxAjCRmh5KMf
yow/4VvVidhQHt2+SiBwIxZko94aaj88aT4DHhcx1WDup+SWdgZVOa6lYmCA8LHw
j76KKf9GVmgBInLX/w+HvqYEXZVt2/LaGTS9PI1jg7/HexU9//bjplsKoNh5O70+
KSQat3t9v7y0Q9pwZUEW9OvkMVXedpk39+8dQoDP1TI2dJhfAKEM03dgPLz/mD3l
+B8sT+GLK8yK4t3PRKdMO1GWcmO640aGDOkPrtekXr9q8JNJaRIhqdTfJwtXB+9L
8q8jEL3y0BLgeFLn57/vEsINB2zog4awa5M=
-----END CERTIFICATE-----
Generated at Wed May 7 09:16:59 2025 by rpki-client