Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e6e4df88-0dbf-3855-a3df-5f2e42186c38.roa
File:                     e6e4df88-0dbf-3855-a3df-5f2e42186c38.roa (raw, json)
Hash identifier:          /wGZlwQC0HC8rgki2kAWRBu4CzG0azOxXEbo+WselSI=
Subject key identifier:   7C:A6:D1:F5:AB:AB:11:B2:3F:CD:68:9D:6A:48:C8:D8:02:B1:93:30
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6B40F63BB617145CBC00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e6e4df88-0dbf-3855-a3df-5f2e42186c38.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20115
IP address blocks:        2603:90f5:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:6b:40:f6:3b:b6:17:14:5c:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=2eab1bef-cadb-481a-8a82-586abc567070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:39:44:11:4f:88:de:68:c1:ce:eb:58:cc:
                    51:a2:f0:b6:d1:0d:63:62:6f:4a:74:19:f9:ea:ac:
                    e0:ec:e0:8a:9c:41:ad:79:31:df:77:c0:0f:2b:e2:
                    7f:64:48:cb:29:a3:3e:a6:b9:bf:d6:b4:c1:63:de:
                    1a:eb:31:48:9b:39:73:f0:61:ae:60:09:14:a7:cc:
                    27:46:bc:2a:73:98:0c:53:c5:eb:2f:4b:43:63:91:
                    49:be:02:af:dd:15:1a:c7:a9:cf:2d:d3:d6:dc:61:
                    42:3c:dd:88:a9:94:83:1d:48:be:55:8c:bd:e8:28:
                    89:18:43:2a:04:79:f8:a8:d6:77:7a:d2:6b:2b:4d:
                    7a:c6:fb:0c:f7:dd:5d:fc:65:b1:d1:f3:65:d1:87:
                    e5:93:e3:1c:01:fe:87:f1:8d:23:a9:3b:c3:3f:a3:
                    83:8d:bb:1a:f5:e3:d2:a2:54:bf:fe:96:4f:f7:87:
                    50:7a:1a:41:08:3c:fe:e9:88:53:a1:e4:29:d1:73:
                    d3:61:3e:be:61:7c:17:fe:95:a6:38:6a:b4:92:c5:
                    b6:7b:10:ea:59:df:f1:68:78:63:78:07:5b:b3:91:
                    82:bb:64:c8:70:2d:59:9e:3f:ed:0d:74:14:eb:44:
                    af:99:bf:da:81:61:50:c5:5f:68:93:b2:f5:77:66:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:D1:F5:AB:AB:11:B2:3F:CD:68:9D:6A:48:C8:D8:02:B1:93:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e6e4df88-0dbf-3855-a3df-5f2e42186c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d3:c2:46:22:c9:98:5f:cd:a3:f9:7d:ff:71:a6:d0:11:e3:
         54:3a:01:14:f1:d5:a6:b4:58:9d:fc:5d:6f:f7:18:dc:01:46:
         6b:ae:bf:47:7b:6e:59:11:0a:b4:61:e2:1f:bc:2d:e0:01:0e:
         f7:99:da:52:bd:58:0d:a1:49:91:b2:30:0f:1c:49:90:69:bb:
         62:26:9f:4c:ac:85:bd:35:66:d8:3c:fc:b8:91:07:da:63:a8:
         c6:c3:3e:81:26:2a:3c:5e:54:a1:a5:6b:23:43:9e:65:d3:e9:
         f7:6f:1e:57:48:08:18:6f:6b:2d:31:ff:74:aa:4f:99:7e:f4:
         82:d2:1b:2b:9a:d7:74:cf:f6:3b:39:af:7f:f3:a9:58:1b:f4:
         5c:e5:7e:d0:66:34:75:cf:ce:48:31:da:8e:89:67:11:29:21:
         0f:6a:21:32:85:e8:c5:68:49:cc:94:92:67:96:dd:a8:95:dd:
         38:e2:bf:a1:cd:66:68:ee:62:25:54:d3:73:6e:00:79:3d:38:
         e7:05:4f:e5:f7:7d:3e:b4:78:97:38:d3:49:3b:f7:de:57:0b:
         e8:b6:65:36:57:da:e4:c2:5d:d5:4f:04:8e:bb:9b:31:0c:df:
         50:65:ad:be:be:b7:c6:2c:36:9f:b0:31:4f:a4:6a:ce:87:5e:
         b3:b8:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:40 2025 by rpki-client