Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e69c9327-179a-333b-9263-aba2595dd432.roa
File:                     e69c9327-179a-333b-9263-aba2595dd432.roa (raw, json)
Hash identifier:          /nxeJFT06zn/ApyG+KOOm6ktX8gJxMeLgV8rXlII73M=
Subject key identifier:   33:95:06:FC:D2:20:78:B1:44:2C:D0:F7:74:2D:35:35:2C:03:18:5C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9F156D9926B22099BA80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e69c9327-179a-333b-9263-aba2595dd432.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:810d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9f:15:6d:99:26:b2:20:99:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=1463c86c-5323-49f1-8a9d-12fa10f9c357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:0d:10:06:49:87:5b:bc:2a:c1:6c:73:0a:
                    44:0d:80:60:ef:69:d0:86:54:77:ab:5a:17:7a:5d:
                    c2:7d:9d:54:9c:2a:1a:fa:81:bd:22:ae:1f:4b:da:
                    b8:27:89:47:96:f5:d6:db:c2:35:7f:89:21:38:d4:
                    aa:3f:8a:79:58:9e:2b:17:d4:78:d8:50:a2:8d:78:
                    9e:aa:f4:13:65:63:20:79:91:1d:88:ea:e2:e8:f4:
                    e6:9c:41:e3:b4:2e:39:42:06:6f:62:00:0f:6e:c8:
                    3f:a7:3d:e8:7d:2a:b7:8c:90:ee:b4:38:06:59:39:
                    b4:88:93:4f:d0:81:d2:21:0e:32:e5:a4:ce:77:d1:
                    fa:fd:d2:32:ff:39:27:95:eb:7b:93:9c:3f:a8:52:
                    37:a7:d1:98:42:88:01:a9:88:48:05:51:88:a5:31:
                    29:96:3a:e7:ef:5e:b6:c0:3b:60:5f:82:7f:ae:64:
                    00:5b:84:c9:c7:34:9d:c0:3c:cf:4a:0a:a5:e3:16:
                    bf:86:f7:13:72:c5:69:f1:ca:fc:e0:11:16:df:1e:
                    5f:64:35:82:a7:cf:a4:a7:ae:d4:b0:8e:47:d1:b8:
                    b2:3e:4e:3e:c6:72:0b:ff:8d:88:5c:78:ae:37:e0:
                    a0:12:f3:86:6a:3d:86:bf:7c:76:f4:77:75:70:d5:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:95:06:FC:D2:20:78:B1:44:2C:D0:F7:74:2D:35:35:2C:03:18:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e69c9327-179a-333b-9263-aba2595dd432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:810d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:ab:8b:bc:64:e4:4f:1a:5b:f0:51:ce:70:30:2d:25:9c:
         cc:07:5e:cc:40:75:f4:6a:a6:36:ae:8f:67:66:08:da:e0:89:
         db:22:02:fe:4f:2a:90:e0:b2:96:8a:8e:1e:08:71:44:f2:80:
         88:7e:6e:21:d1:92:74:4c:e6:8c:34:82:8e:3f:9b:8c:87:ac:
         5f:18:53:95:d2:98:0d:55:ba:63:1a:93:cb:26:7e:e0:67:16:
         5d:bd:36:23:80:c8:37:0a:70:9d:76:e1:92:b0:6f:f8:b2:89:
         b7:17:1d:35:e3:2a:94:f8:3e:6a:93:bd:ee:3c:4f:bc:af:10:
         ff:03:72:6c:d6:6a:44:63:44:7c:f7:2e:84:ed:5a:08:d8:f4:
         ac:7d:83:5a:fb:cd:d8:4d:ca:85:55:e8:53:5e:c7:af:e1:bb:
         bc:e5:49:dd:72:f3:b3:60:b0:ba:2d:9a:62:12:39:df:81:64:
         04:62:7d:7a:d7:7b:81:5d:00:a7:47:68:2d:b5:bf:16:be:0b:
         c6:6f:36:89:eb:be:96:db:65:26:22:eb:9a:4e:a9:f8:54:36:
         c3:20:ef:ea:a9:ff:92:6a:a9:c0:33:ae:fc:82:14:28:61:3e:
         8c:2d:eb:8d:ac:e5:9d:0a:7d:37:11:db:77:6e:47:81:b0:73:
         54:ea:5b:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P58VbZkmsiCZuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MTQ2M2M4NmMtNTMyMy00OWYxLThhOWQtMTJmYTEwZjljMzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQsNEAZJh1u8KsFscwpEDYBg72nQhlR3q1oX
el3CfZ1UnCoa+oG9Iq4fS9q4J4lHlvXW28I1f4khONSqP4p5WJ4rF9R42FCijXie
qvQTZWMgeZEdiOri6PTmnEHjtC45QgZvYgAPbsg/pz3ofSq3jJDutDgGWTm0iJNP
0IHSIQ4y5aTOd9H6/dIy/zknlet7k5w/qFI3p9GYQogBqYhIBVGIpTEpljrn7162
wDtgX4J/rmQAW4TJxzSdwDzPSgql4xa/hvcTcsVp8cr84BEW3x5fZDWCp8+kp67U
sI5H0biyPk4+xnIL/42IXHiuN+CgEvOGaj2Gv3x29Hd1cNV04wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDOVBvzSIHixRCzQ93QtNTUsAxhcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTY5YzkzMjctMTc5YS0z
MzNiLTkyNjMtYWJhMjU5NWRkNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD0Jq4u8ZORPGlvwUc5wMC0lnMwHXsxAdfRqpjauj2dmCNrgidsi
Av5PKpDgspaKjh4IcUTygIh+biHRknRM5ow0go4/m4yHrF8YU5XSmA1VumMak8sm
fuBnFl29NiOAyDcKcJ124ZKwb/iyibcXHTXjKpT4PmqTve48T7yvEP8DcmzWakRj
RHz3LoTtWgjY9Kx9g1r7zdhNyoVV6FNex6/hu7zlSd1y87NgsLotmmISOd+BZARi
fXrXe4FdAKdHaC21vxa+C8ZvNonrvpbbZSYi65pOqfhUNsMg7+qp/5JqqcAzrvyC
FChhPowt642s5Z0KfTcR23duR4Gwc1TqW6M=
-----END CERTIFICATE-----
Generated at Fri May 9 10:20:53 2025 by rpki-client