Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa
File:                     fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa (raw, json)
Hash identifier:          VpBNQ98W/zbu3JI9Ur7Gx5tM5QOXOrKLEVItf20UbdA=
Subject key identifier:   DC:C6:CF:3A:14:C3:3C:80:E0:E0:9E:DA:0B:17:62:0B:72:6E:7A:05
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6829796A5A95AE0C3480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     11427
IP address blocks:        2603:90f5:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:68:29:79:6a:5a:95:ae:0c:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=d77507d3-1703-4054-97f6-850f08bd4c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:02:a8:5e:b0:d6:7d:fb:8e:13:fe:46:c8:
                    f4:ce:28:1b:67:7b:c4:31:e2:a0:b6:a5:0c:23:a2:
                    17:56:83:21:1d:1d:2a:25:92:f0:56:cf:ac:75:5a:
                    37:4d:f1:58:ab:89:f8:b1:39:33:b0:17:2a:e6:ce:
                    ee:d4:10:e0:19:cd:2a:7a:f1:e7:0c:1f:f8:a6:73:
                    1e:31:ad:04:5c:6e:31:42:ef:1e:b5:df:48:b2:b4:
                    0f:29:82:b0:e3:a3:14:1e:e6:04:75:df:b4:0d:bc:
                    56:f7:46:ea:13:30:45:12:67:2e:c4:7a:b9:9e:a3:
                    12:09:ff:1a:6c:64:5a:40:93:59:a7:1f:d1:5c:31:
                    80:5a:8d:98:55:4d:ed:ab:45:53:43:0d:48:4d:f6:
                    12:39:b2:e8:4b:e3:00:19:68:91:78:60:50:90:4b:
                    19:99:46:a1:04:d0:ff:6d:d0:f2:f3:24:87:23:85:
                    e4:b3:29:56:33:47:ff:5f:0e:09:6e:8a:b2:f9:75:
                    a8:e6:8e:04:7d:55:8f:37:40:04:43:b4:df:9d:eb:
                    19:f0:63:aa:98:6a:e6:c9:9e:18:d4:dc:3d:43:cc:
                    23:34:4b:36:3d:4f:bf:bf:85:7f:77:31:3a:f3:1e:
                    19:8b:4e:3e:66:a7:fd:e0:b1:b1:06:3d:d9:cc:c2:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C6:CF:3A:14:C3:3C:80:E0:E0:9E:DA:0B:17:62:0B:72:6E:7A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4d:97:df:8a:49:8f:bf:be:94:8c:d4:be:af:d8:96:8b:bb:
         76:ce:b2:a3:29:c9:df:4e:41:f9:e2:29:b8:22:a2:c3:75:af:
         46:04:1d:d1:df:eb:6d:38:96:5c:c3:a5:11:38:dd:b6:98:b1:
         71:df:6d:06:35:2a:3a:c0:bb:b6:42:f9:e8:9a:6a:58:48:da:
         bd:30:36:e9:e0:cf:b3:53:af:bf:52:3f:34:ba:7f:aa:83:6f:
         08:a4:f9:d1:b4:95:c8:83:a4:c6:27:b6:f0:19:97:23:07:ed:
         d3:ab:e2:ee:0b:6c:a3:77:5b:82:dc:e5:ad:b6:d1:af:83:28:
         12:91:59:eb:45:65:fa:62:fb:0e:48:3c:91:a2:14:bd:67:d3:
         c5:85:04:7d:06:8d:2a:7f:fb:7c:c0:66:71:09:8e:1a:22:94:
         c4:10:7c:50:f2:e3:48:bf:7f:43:47:da:7d:73:40:1b:f1:42:
         fa:38:4d:09:7f:c7:1e:e6:d3:2e:ff:9d:ad:1a:42:10:bc:55:
         d9:30:0e:ca:6a:57:b7:49:2d:a3:e9:05:2b:cf:c7:82:88:ec:
         06:94:dc:6d:12:9d:73:76:bd:0f:6f:c0:7d:e6:29:c5:84:b3:
         9d:e1:75:f3:98:90:81:19:aa:be:52:a2:e5:30:8d:5b:15:a3:
         ba:db:86:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:47:41 2025 by rpki-client