Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/de1340c7-c065-3ffc-b8a2-c28d45a357e5.roa
File:                     de1340c7-c065-3ffc-b8a2-c28d45a357e5.roa (raw, json)
Hash identifier:          q1vqoOOZ14MJTYrvz7AWEaH5qXw7MukbEjz0orAZnKc=
Subject key identifier:   B6:9A:67:E1:5B:F1:AE:B5:B8:48:7C:A5:2D:3D:68:F6:1F:76:07:2B
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F432858493ED3CE77C7933106A4526600
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/de1340c7-c065-3ffc-b8a2-c28d45a357e5.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     393529
IP address blocks:        2620:4e:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:ce:77:c7:93:31:06:a4:52:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=c5696915-c10e-4af9-9ad2-ce131725065f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:e5:20:21:99:b5:a1:e4:cc:7a:89:cc:e9:
                    ce:f8:27:44:fb:18:09:a9:d6:d7:a9:90:db:ea:fa:
                    e3:2e:3a:94:e7:af:37:46:05:7c:34:88:cf:67:79:
                    92:e5:88:a4:3c:a1:c8:55:95:77:5c:69:c0:3c:32:
                    19:e3:1a:ad:c5:83:96:6d:90:ef:64:69:9c:e4:c3:
                    42:2c:6d:0c:ef:79:fc:bf:ac:3a:0b:85:b1:03:e2:
                    59:92:0c:bd:55:17:64:b0:0c:d1:04:cf:f6:30:df:
                    07:51:99:7a:0b:69:0e:f7:48:8a:16:da:35:00:fe:
                    40:ce:b1:95:a4:c2:9d:c2:ab:ba:d3:6e:83:df:0e:
                    93:63:76:9a:fd:5c:9d:ef:af:5c:58:3a:de:ef:ba:
                    7d:70:36:54:f7:02:8e:62:c9:1b:f0:e0:81:30:7e:
                    13:3e:4c:6c:87:76:09:e3:84:27:44:59:db:ba:72:
                    94:c4:d6:18:c6:ba:e2:48:ed:ff:b2:b2:18:1e:15:
                    68:16:e9:a5:bb:89:43:f4:f6:f7:b8:e5:97:6b:39:
                    bc:7b:ac:03:fd:a9:88:ac:95:f7:5e:67:b6:85:50:
                    d7:54:05:b8:7c:31:3a:fb:de:79:53:ff:7b:03:10:
                    ef:38:4e:58:d9:c5:55:45:f6:cf:27:eb:78:ee:78:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:67:E1:5B:F1:AE:B5:B8:48:7C:A5:2D:3D:68:F6:1F:76:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/de1340c7-c065-3ffc-b8a2-c28d45a357e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4e:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ac:e1:03:d6:ae:a7:24:da:5d:a2:b1:cf:5c:e7:7f:7e:71:
         d7:e8:dd:38:7e:ac:72:43:ab:a7:be:6c:05:66:81:1b:e4:b5:
         f0:00:d2:f1:d6:21:1b:99:8e:fa:4e:2b:7b:e7:d9:9d:84:19:
         0e:cf:15:f7:02:bd:a7:17:d6:ba:f8:43:e5:aa:ad:72:aa:5e:
         5c:3d:ea:5d:37:02:74:17:ce:c6:a7:69:de:60:ff:a3:6f:73:
         47:49:fd:ca:3d:5a:ca:6a:64:46:17:7b:a0:f9:fb:af:15:77:
         2b:a6:30:11:93:80:e4:d6:42:00:c5:d2:76:1c:48:fb:66:3b:
         09:85:d5:a8:80:e4:df:3b:c0:a5:27:c3:fd:2e:80:b2:23:76:
         9d:ba:50:7b:34:f7:7d:55:3e:06:ca:ad:20:5a:db:2e:65:e0:
         e6:5f:de:20:cb:0d:9e:18:fc:4c:0b:af:a1:79:66:2b:90:5a:
         0a:04:52:46:f7:61:8d:49:c3:94:db:61:b7:8d:cc:fd:ca:f2:
         a1:ff:28:69:63:7b:16:ea:54:68:84:e8:b0:e2:a3:64:90:07:
         3e:66:b1:b6:32:7f:8d:7e:37:76:e0:68:c0:16:cb:91:59:11:
         41:1d:d4:c8:c7:bc:78:93:c6:01:dc:bd:33:3c:97:86:61:ef:
         70:38:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:02:27 2025 by rpki-client