Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/884f5284-2578-37d0-9a7c-b3b880a21685.roa
File:                     884f5284-2578-37d0-9a7c-b3b880a21685.roa (raw, json)
Hash identifier:          dOdVQKL73u/Xs+trf/EBY2UIt3r4kwVq2Aar2LhOVns=
Subject key identifier:   63:F7:F3:98:34:81:37:ED:6A:6E:AF:8C:73:25:C4:B3:3F:AE:6B:BD
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F432858498B99D0BC6BE565491966DAA0
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/884f5284-2578-37d0-9a7c-b3b880a21685.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     812
IP address blocks:        2607:f798:2503::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d0:bc:6b:e5:65:49:19:66:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=f1acdb17-dc8f-4ea1-80b0-eeb8c813ce8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:ba:b6:5e:34:29:db:5e:6c:ba:53:7c:37:
                    d5:33:f6:0c:f4:7e:a1:85:4d:fe:3b:d6:92:ac:1e:
                    7d:82:7a:be:60:d5:0f:49:e5:f8:a8:db:ed:9c:fb:
                    e5:ae:91:26:fe:21:e5:58:f1:7a:3f:9f:34:20:0e:
                    0f:cb:65:42:c8:d3:b1:55:31:b5:3b:fc:7b:71:42:
                    6e:d7:1e:c5:09:c3:78:8c:e3:69:96:a9:76:00:be:
                    bf:16:2f:f1:03:ed:26:ef:34:b3:26:62:89:84:26:
                    2b:08:16:68:3a:f9:7e:87:6c:c1:a0:79:8f:58:21:
                    36:e2:29:46:f1:9f:86:03:8f:3a:d1:87:f0:2d:ff:
                    4f:68:82:0d:7c:b0:bc:58:a7:ef:b2:18:4f:0c:8b:
                    67:6f:a0:d7:9c:ee:d0:e5:2f:12:f8:19:0d:1a:f6:
                    e9:a5:ae:63:dc:61:15:26:9f:3f:d0:b9:17:40:a3:
                    98:65:b9:25:26:11:76:93:47:f3:7a:01:59:ac:97:
                    14:58:32:0c:f8:12:7e:82:d3:5c:ab:f5:ae:29:a6:
                    1c:a8:ee:18:76:0e:43:75:a4:7d:6a:92:e5:4a:dc:
                    49:93:e0:fc:4b:46:64:63:fe:15:0f:2d:77:4a:71:
                    ce:2d:fa:e4:85:a9:de:bc:c3:55:2c:38:a1:0a:f7:
                    58:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:F3:98:34:81:37:ED:6A:6E:AF:8C:73:25:C4:B3:3F:AE:6B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/884f5284-2578-37d0-9a7c-b3b880a21685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:2503::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9a:5d:5d:37:1a:6d:03:17:19:e7:82:06:50:f2:46:38:b1:
         e9:cb:f9:2d:6c:dd:ea:ac:04:23:19:c9:e6:e9:ae:22:72:da:
         2c:b3:45:e9:53:a3:7e:8f:24:de:b2:d8:e9:43:9e:84:2c:41:
         9a:4e:21:ab:04:32:a6:51:6c:df:e6:58:5d:83:b5:a0:c6:54:
         a6:ea:21:ef:34:e1:15:cb:5a:a0:f0:50:b4:d4:c5:73:d2:d7:
         15:68:36:a5:c3:23:46:1b:08:66:84:39:8a:1e:33:63:07:3b:
         1e:e3:fb:f5:8e:58:0b:1f:46:1f:68:80:53:ae:16:d6:be:ba:
         09:2a:ba:f4:e6:0c:b1:31:8d:4b:d1:0f:d3:e9:2c:c8:05:5e:
         2c:63:20:15:7a:42:1e:d8:a8:cf:68:5c:af:b4:80:33:f8:67:
         40:d8:e0:4d:cd:41:df:98:50:3a:2a:43:00:69:78:76:37:98:
         1e:1c:e1:33:dd:d6:e8:ce:f0:71:a9:8f:bf:c7:49:d7:43:6c:
         42:06:9f:9d:56:66:f6:8b:cd:50:bf:2a:2c:24:da:70:75:f6:
         91:54:bb:0b:59:ff:16:9d:3a:c7:c3:e0:38:37:60:9c:fb:3b:
         88:15:e5:8d:3c:d0:8a:c3:5a:cf:40:94:81:7f:6a:2d:87:c2:
         67:9e:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:19 2025 by rpki-client