Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa
File:                     9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa (raw, json)
Hash identifier:          P9PRAB4zsBYp5Hva7N5tozHXsWYufWs7PF8rDnIe1Jo=
Subject key identifier:   9E:51:74:A7:B1:C1:08:FB:58:BD:36:20:24:39:F3:75:BE:00:BB:5B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D210FE1531B01B919BF5C7A8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        2604:cb00:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:10:fe:15:31:b0:1b:91:9b:f5:c7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=2018a6fd-4c51-4d9d-b93a-873442a3db1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:19:54:f0:4b:26:06:0c:97:2d:fb:97:90:
                    0e:28:b5:98:e3:a5:4f:51:54:67:b1:60:b5:d7:00:
                    28:ed:87:3a:b0:fa:03:80:5f:1e:eb:e6:57:95:ca:
                    8a:41:b4:71:d8:14:61:de:bc:bb:24:f7:1c:bf:74:
                    52:e2:b2:ef:39:47:81:8d:9c:4f:5c:23:a5:f2:87:
                    c8:05:40:3b:a7:59:1d:65:97:c4:6f:6d:fe:b6:f1:
                    76:a4:3e:f2:d4:19:af:85:ca:89:db:92:28:0a:6f:
                    b4:f8:22:94:b4:17:31:55:9c:e8:f6:ee:92:01:63:
                    e6:ec:f4:76:ad:9a:be:e9:02:89:13:c2:36:5c:95:
                    0b:b3:ef:30:11:36:05:f3:ce:f6:5a:9f:9b:ac:be:
                    06:88:61:1a:3b:04:89:51:7e:e0:c7:ba:1b:f1:a6:
                    19:cf:83:13:b7:8d:bb:5c:d5:40:e3:0c:7e:ef:4d:
                    06:d9:cc:0b:94:8b:08:19:f4:e2:22:fb:98:71:97:
                    27:05:1b:2f:4f:c6:9f:97:77:19:cb:63:e7:5d:57:
                    d3:78:ff:71:36:9c:ac:a7:b1:95:ed:cf:ea:7d:1d:
                    a9:8f:d4:37:1a:71:c3:6d:01:df:96:a1:a2:ec:e6:
                    07:63:9a:2e:9d:81:67:2d:2e:3a:d8:33:e7:41:9a:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:74:A7:B1:C1:08:FB:58:BD:36:20:24:39:F3:75:BE:00:BB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:3f:30:14:04:b2:0b:7a:b5:e4:e7:99:80:4f:63:26:d5:
         15:25:ac:14:c6:97:c2:5d:2e:ca:4f:26:45:92:2f:9d:55:1d:
         30:31:e0:d4:cb:c1:b6:ff:4b:72:0f:44:35:d8:81:cb:6d:90:
         10:c8:6b:87:c1:60:fd:b0:9f:f1:aa:77:41:63:55:2c:24:f5:
         33:45:d1:a4:7b:65:3a:d8:e8:0f:f6:4d:04:5e:ad:49:66:b9:
         c7:31:80:28:be:ef:01:14:6f:2b:f4:2b:d4:13:b2:a2:7d:fe:
         aa:2d:1a:06:bd:2a:9a:1f:5a:58:aa:fa:5e:81:cb:56:61:12:
         26:75:b7:46:1c:1c:32:d4:07:4c:da:78:85:bd:87:3a:de:15:
         21:c6:f2:03:7c:8d:95:8c:fd:44:66:dc:ec:22:65:81:6a:57:
         20:ff:cb:3a:0f:42:0b:be:0c:aa:10:d6:29:59:dc:39:5d:71:
         ef:12:ad:55:34:f0:ad:87:13:09:ae:5a:7d:55:25:69:78:dc:
         27:ed:92:98:ef:32:5a:f5:00:c5:9a:93:11:85:89:3c:b1:e6:
         20:66:b3:93:a4:8e:94:d0:ca:c6:02:0e:72:25:d0:81:18:c0:
         17:61:6f:39:c3:7f:6c:07:c5:ef:e5:73:31:04:b5:20:45:15:
         4c:57:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:39:29 2025 by rpki-client