Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa
File:                     0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa (raw, json)
Hash identifier:          mBdVv85+oqksnnaQ5CfHGb3vEAcdQaTPoIYnHbQZttk=
Subject key identifier:   0E:50:8A:19:64:E5:70:8B:2E:3B:AE:F2:28:EA:03:31:94:84:96:24
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F432858496A19A2A83FC3EDE671687B80
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     14413
IP address blocks:        2620:119:5080::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a2:a8:3f:c3:ed:e6:71:68:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=9ee29e56-1883-4b9d-a50e-c9263e9d0760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:fc:12:4b:03:a9:4b:c4:be:b1:67:28:48:
                    63:5f:71:94:b1:ed:6d:b2:4c:1b:a4:b8:1c:1b:a1:
                    60:20:5a:13:9d:9d:cc:2a:f0:c0:9c:87:41:e2:28:
                    0a:4e:e3:2d:0d:7d:b7:73:79:51:20:3d:60:c1:7b:
                    d5:d3:a5:f0:4c:ab:18:fb:46:6e:a1:2c:8f:62:d0:
                    ff:44:2a:fc:af:33:7e:5c:bb:f3:7f:21:12:1f:b1:
                    b1:89:cf:a6:a1:b3:5f:36:14:48:3a:88:47:83:3d:
                    48:fc:aa:bf:de:b4:d8:a8:11:5b:bd:c2:e6:ee:fb:
                    b1:7a:6b:74:66:a3:3f:47:ba:09:e7:39:cc:c0:5f:
                    96:ec:23:70:9f:52:50:c5:cc:57:41:f1:e9:66:e4:
                    3b:2c:e1:c2:cc:da:f3:fa:1b:e6:97:48:78:d8:89:
                    c1:5c:43:57:3d:d9:97:7c:74:54:e8:ca:0b:1b:26:
                    83:0b:fe:34:48:0c:f6:26:86:39:e4:8e:74:5a:80:
                    f4:34:61:a7:a9:24:79:01:78:88:62:16:98:05:f5:
                    f9:bd:74:7b:01:20:70:57:75:b2:b4:89:dc:94:c9:
                    bc:d5:fc:1f:3f:df:bf:01:77:33:73:6e:39:07:66:
                    fd:00:df:36:4c:ba:96:18:ba:b7:fc:6b:a9:57:75:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:50:8A:19:64:E5:70:8B:2E:3B:AE:F2:28:EA:03:31:94:84:96:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:5080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:b2:50:99:5c:2b:89:7b:d6:75:e3:d2:15:68:df:ad:76:
         9f:b4:de:61:9c:f0:24:cd:7e:4f:b9:d1:f0:b5:12:46:bc:ca:
         b4:2f:76:c0:4f:a8:47:fb:67:42:88:93:22:87:c4:ee:fa:7e:
         52:cb:33:da:36:88:66:ef:90:23:05:02:e6:aa:13:10:ef:cb:
         5d:73:df:e2:9b:12:77:e0:bc:e1:b2:31:14:ce:54:8a:c7:99:
         3a:32:ca:7d:31:dc:a3:ed:9d:e8:5c:b3:aa:2f:2b:b2:46:ff:
         82:91:ec:03:cb:fc:7e:13:16:f0:63:86:9e:aa:69:13:d8:16:
         86:5b:39:23:21:f7:ec:05:64:8e:21:ce:d9:dc:50:9b:b6:8c:
         4f:16:e6:92:57:73:e5:52:65:1a:b1:0e:45:6e:21:75:5e:91:
         9a:76:cf:10:70:4d:9d:a0:1d:a0:c3:b7:15:4e:c9:91:75:2a:
         2b:65:0a:ce:33:f5:91:03:bb:2c:d5:89:87:84:35:75:09:fc:
         ad:40:13:8e:b5:72:af:76:81:75:a7:6c:18:97:a5:8f:51:20:
         94:0c:34:76:6d:f0:e6:b4:b6:3d:e8:3c:f9:95:db:b9:26:a4:
         20:c3:d6:54:0c:a7:43:69:6e:51:ea:50:87:8b:74:d6:62:93:
         8e:f2:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:01:28 2025 by rpki-client