Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df0c8963-fafe-3c6b-83e5-6f81d9fdcf91.roa
File:                     df0c8963-fafe-3c6b-83e5-6f81d9fdcf91.roa (raw, json)
Hash identifier:          A/p0iB/K5XxqtcmjUNXov2CKBAACXj8zp6/stNZa6J4=
Subject key identifier:   1A:B9:24:A4:91:28:D8:4A:B5:F6:2F:0E:C7:9C:B4:A5:4E:30:A8:2F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921347108187EAF2698FD1980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df0c8963-fafe-3c6b-83e5-6f81d9fdcf91.roa
Signing time:             Sun 09 Mar 2025 10:21:10 +0000
ROA not before:           Sun 09 Mar 2025 10:21:10 +0000
ROA not after:            Sat 07 Jun 2025 10:21:10 +0000
asID:                     3848
IP address blocks:        2001:4958:1522::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:71:08:18:7e:af:26:98:fd:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:10 2025 GMT
            Not After : Jun  7 10:21:10 2025 GMT
        Subject: CN=19a20f61-2255-4b22-ab9c-60b2d31df214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:ea:a7:3a:eb:a5:48:39:7e:7d:e2:dc:43:
                    5c:5b:a1:34:c1:ab:f7:18:21:0c:b4:3d:12:07:8d:
                    62:d2:e5:a6:ec:e8:4e:7b:4a:ff:4e:a8:18:f7:36:
                    5f:5a:48:58:45:fc:b4:ea:18:12:7a:0a:8d:f5:6b:
                    29:c5:f3:14:b9:ee:b4:d1:c0:2f:dd:cd:2d:e8:1d:
                    b1:47:d2:f1:7f:6a:db:1c:92:12:df:8b:d3:d4:c6:
                    70:17:64:8a:f1:7d:e8:b6:4c:a2:52:55:3d:50:09:
                    e1:26:25:ac:a6:f4:e1:c4:ca:df:b2:f5:ec:f0:f7:
                    91:c6:8e:69:28:2e:4b:71:df:30:8f:d3:27:21:0b:
                    21:ae:ba:a5:46:a8:45:55:ac:04:c7:2e:fb:4e:81:
                    71:7a:67:27:17:6b:33:65:6a:18:24:73:88:d0:5b:
                    8c:4b:c3:ed:db:13:5e:f7:5b:8e:42:ca:10:4d:f6:
                    c6:14:f7:56:ce:80:16:ba:3c:41:ca:b1:f9:61:fe:
                    29:30:e7:bc:94:9f:ad:56:ec:9d:06:e5:b2:26:db:
                    88:95:a2:e7:ab:4d:04:a9:ad:fd:9e:aa:ee:c3:91:
                    33:5b:e7:8d:be:2f:a6:01:fb:92:21:1d:81:55:ee:
                    2d:35:7b:f4:29:84:b6:b9:4b:47:c0:f7:95:21:36:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:24:A4:91:28:D8:4A:B5:F6:2F:0E:C7:9C:B4:A5:4E:30:A8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df0c8963-fafe-3c6b-83e5-6f81d9fdcf91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1522::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:76:a9:c6:5f:d4:c3:f4:f9:98:a9:32:35:89:65:b2:7d:eb:
         53:38:07:51:33:00:15:dd:ce:1f:19:01:d0:18:9e:da:55:dc:
         71:7d:1c:cb:1f:70:17:cf:70:6d:2f:2a:11:b5:31:98:94:1c:
         89:1f:f3:56:80:bb:98:7a:2a:6d:4c:75:39:4c:8f:b3:fc:cb:
         c7:77:a3:09:12:b2:48:14:bc:35:1f:7f:bd:ed:35:c7:80:da:
         de:59:7d:63:d2:be:05:2c:8d:a1:63:2a:cb:ee:cb:a0:2d:45:
         f6:e3:95:b4:56:3b:c9:e6:48:4f:48:ef:dd:1c:43:de:db:7f:
         1f:b9:f8:5c:2a:f7:cd:f3:65:4d:fc:d1:38:fc:1c:9e:2a:4f:
         03:30:1b:f2:52:73:a0:18:04:25:0b:89:99:b1:5e:2f:c6:1a:
         88:41:00:1f:35:4f:a8:6f:23:97:51:b5:6d:d1:0f:7c:9f:88:
         df:0e:8b:4f:bd:d5:82:f8:df:d8:a8:f0:95:54:43:31:0c:21:
         85:e3:47:af:fe:b5:20:3f:f3:bf:87:0f:56:5d:b3:80:07:81:
         0e:2f:04:6c:7d:55:de:85:50:d0:1a:69:4c:48:92:f7:36:fd:
         b5:37:16:3b:08:63:4c:03:ca:14:41:9c:9d:23:73:ba:f1:3a:
         6b:86:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:20 2025 by rpki-client