Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721331c0-323f-3d28-902f-a48d9bdfe971.roa
File:                     721331c0-323f-3d28-902f-a48d9bdfe971.roa (raw, json)
Hash identifier:          IXMalmmlKFwe7jwhDq97ihlX5Li8qmaUUSIlOP9q5Ns=
Subject key identifier:   CE:42:51:45:A0:19:2F:BC:61:A1:C6:C9:09:DF:8E:7A:5A:39:78:38
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213470AAE0DEC5D9AF253380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721331c0-323f-3d28-902f-a48d9bdfe971.roa
Signing time:             Sun 09 Mar 2025 10:21:10 +0000
ROA not before:           Sun 09 Mar 2025 10:21:10 +0000
ROA not after:            Sat 07 Jun 2025 10:21:10 +0000
asID:                     3848
IP address blocks:        2001:4958:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:70:aa:e0:de:c5:d9:af:25:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:10 2025 GMT
            Not After : Jun  7 10:21:10 2025 GMT
        Subject: CN=b63a072e-2361-4b31-bd77-9f95d728f8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:de:07:d8:86:9e:a7:9b:32:6d:cb:9d:d6:
                    eb:c7:ef:98:eb:a2:dc:20:59:d9:88:72:8f:33:0f:
                    8c:d3:49:c8:db:8a:37:7b:8d:26:8a:56:86:36:d3:
                    bd:ce:8f:ca:02:9e:cb:1c:24:e2:17:6c:4a:89:95:
                    aa:e5:3e:4d:1f:36:a2:0a:f2:30:89:a2:54:ba:87:
                    19:f7:84:a8:7c:88:98:e2:ab:e1:94:93:76:3e:4b:
                    72:89:16:4e:50:01:d5:f7:5e:4b:de:3b:ed:c6:03:
                    56:ea:4a:8e:d0:7f:a3:0f:87:95:c3:7e:ba:39:f3:
                    f5:1a:9f:d5:a4:e4:7c:61:d7:fd:27:59:7b:c7:f8:
                    8d:a1:13:e3:4a:c2:53:9a:d2:1f:cb:b3:7d:83:47:
                    4f:00:49:5d:9f:b6:97:7a:be:df:4a:98:c0:98:6d:
                    35:5f:e0:46:c8:9c:3c:dd:44:c5:35:56:9b:c2:6d:
                    5b:60:d2:12:28:03:b1:e8:1f:6d:f3:5e:a4:da:4a:
                    20:d9:1c:8c:4f:4b:67:81:70:1b:02:8e:14:c0:a4:
                    28:d1:eb:14:6b:e9:7f:4e:6f:21:a1:f8:11:31:fb:
                    93:05:d7:c2:9a:70:b2:1d:d1:6a:40:ea:4b:b9:d9:
                    e6:6f:97:7d:60:d7:74:0d:5b:46:0e:c1:b6:60:d1:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:51:45:A0:19:2F:BC:61:A1:C6:C9:09:DF:8E:7A:5A:39:78:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721331c0-323f-3d28-902f-a48d9bdfe971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:de:06:85:d0:82:45:5a:ed:16:75:12:ac:a1:70:38:9c:d3:
         5f:7d:30:34:83:dd:6b:0c:dc:bb:af:08:47:af:c2:85:7a:70:
         bd:b9:f3:9c:56:01:af:0b:03:29:34:28:7e:91:3a:84:0f:02:
         ce:b2:64:64:03:70:a3:93:db:b7:12:2f:7c:8e:00:0e:9f:25:
         24:2c:4a:6c:50:ee:30:f6:16:f2:83:a0:3e:be:3c:ec:67:90:
         34:16:79:26:96:bd:4d:34:c7:1e:37:be:80:77:8a:b8:07:29:
         99:c0:b4:74:53:b9:66:c7:47:ad:6c:88:db:f4:b9:5a:7e:80:
         57:f5:c6:28:16:40:03:3b:da:c5:d3:61:e3:1f:15:8d:a1:06:
         f0:69:e9:c8:8e:01:ce:56:06:01:e7:c0:ea:8e:b7:b6:86:3f:
         d1:b8:aa:4e:b6:b3:64:ce:8f:4d:97:b9:7a:de:9f:68:c3:e8:
         42:16:31:ce:4c:69:8f:e5:b5:74:8b:a3:46:95:2f:c4:c1:98:
         93:54:1a:bd:f8:0e:7d:53:6e:60:78:33:f7:89:80:74:eb:10:
         87:6a:12:48:63:0b:a5:32:c1:4b:d1:30:39:c2:7c:10:b3:22:
         d9:5a:d6:c6:0b:6b:01:19:45:fb:b6:24:75:71:58:3e:17:65:
         2a:38:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:15 2025 by rpki-client