Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa
File:                     0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa (raw, json)
Hash identifier:          nrBOG9jbDszmEu4sdo/9Gegt9tDT+4kGXagwICJvORc=
Subject key identifier:   B2:4F:21:08:8D:DA:B7:B1:4D:99:B6:9D:07:69:87:89:DB:8C:BC:39
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849D165175594ECE2558EC42320
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     33363
IP address blocks:        2605:a40a::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:17:55:94:ec:e2:55:8e:c4:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=e701975d-4290-4200-ac3e-e3a75384f474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:eb:a8:fe:c2:7b:b6:86:51:7e:98:b7:cf:
                    41:79:64:fa:11:8f:b8:32:b9:4a:84:3b:df:e3:c8:
                    7b:9f:27:68:fb:65:99:d1:1e:d3:70:3c:34:35:ab:
                    df:f3:fc:b8:05:41:1b:fe:91:4c:12:c9:7e:bb:94:
                    b0:e3:3f:9b:fa:02:ff:eb:fb:e7:a6:78:56:59:04:
                    50:73:40:ed:a3:af:a7:26:0a:72:2c:16:59:83:4b:
                    6f:32:76:f9:86:40:87:07:31:81:a7:2c:7e:ec:55:
                    7b:28:f8:e2:7e:86:b5:d5:45:43:8e:12:03:51:dc:
                    82:53:81:e9:01:2a:60:8a:92:73:9a:37:c0:21:85:
                    e2:ee:78:c2:cc:d7:02:c3:da:04:96:61:80:7b:28:
                    32:53:af:b1:d6:d4:37:e3:f6:a2:0d:ba:01:ae:50:
                    d7:a4:5d:24:08:bf:45:2f:0d:ba:bb:b8:d7:a7:54:
                    8b:e5:40:85:4e:c5:e8:86:e8:d2:83:13:c9:da:52:
                    62:dd:97:c4:c3:33:60:aa:99:16:e6:d9:9c:fc:29:
                    83:41:64:71:b4:9b:3d:13:e3:b0:2f:9e:83:1a:6d:
                    33:e5:c8:02:9d:6b:50:cd:26:d4:ab:e8:98:7d:d9:
                    ef:58:f7:a1:8d:47:0a:77:95:16:dd:02:f9:96:44:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:21:08:8D:DA:B7:B1:4D:99:B6:9D:07:69:87:89:DB:8C:BC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:03:80:61:27:17:fe:54:66:cc:32:6f:07:ce:27:5e:17:
         d9:b9:7f:7b:82:e0:a7:bc:ca:1f:54:f7:d6:05:2e:16:d8:a3:
         e8:17:98:08:b2:c6:bc:ab:a5:76:43:24:30:43:b7:54:ee:8c:
         11:7a:7e:31:da:79:5e:5a:3e:53:b0:21:67:5e:39:91:6f:41:
         1d:50:da:1b:0b:d4:f7:6a:ed:ad:38:8c:b8:f8:3e:b8:42:d3:
         19:57:15:eb:6c:1d:f1:09:c3:17:a9:1a:2d:28:52:63:b3:f4:
         cf:28:04:fa:1f:55:cc:b1:96:ff:a4:65:a6:5c:09:b8:01:2b:
         0f:0e:33:b2:79:07:26:22:00:0c:9c:64:2f:1b:01:9f:13:62:
         eb:ed:a3:92:d8:37:1b:2c:b9:68:33:ad:4d:2c:82:1c:2b:49:
         a2:f2:d0:b5:87:8c:d6:22:67:9a:2d:5c:1f:fc:a6:0c:55:67:
         d3:26:64:da:56:5b:78:56:1a:79:4c:f1:61:04:e0:36:0f:51:
         50:6a:43:b6:91:f4:dc:3a:45:a6:3d:04:8d:eb:99:e2:6c:0e:
         f3:1e:4a:0a:ed:45:20:3d:c5:e3:ef:37:32:f8:61:e1:93:25:
         e8:c1:2f:de:4c:4b:b0:d9:c6:f0:75:c3:ad:f3:fb:20:49:f5:
         49:a1:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:00:58 2025 by rpki-client