Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/80d67ced-c907-3e27-adf6-d578795268a6.roa
File:                     80d67ced-c907-3e27-adf6-d578795268a6.roa (raw, json)
Hash identifier:          nb3jx3W5/gAx9hXBHnbyQAbL6vzotE1RWbtCcjJX1zg=
Subject key identifier:   8F:2A:C6:94:69:0C:E3:75:41:4B:5F:67:8F:25:10:3D:50:56:74:C9
Certificate issuer:       /CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
Certificate serial:       010D0C9F4328584917DC2B7F2C9702DD19624A00
Authority key identifier: DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/80d67ced-c907-3e27-adf6-d578795268a6.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     2497
IP address blocks:        2001:48b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:2b:7f:2c:97:02:dd:19:62:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=dbf6b44d-5e6e-40d5-a91c-610ec1eaa1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:b1:7c:81:3e:9f:b0:c7:e5:32:82:04:51:
                    c3:8c:67:4d:11:59:fa:9f:dd:56:87:03:e1:0c:bc:
                    cf:39:71:4a:44:ab:8a:a5:c8:14:f7:f0:6c:e7:9d:
                    4c:29:cc:27:cc:52:a0:81:56:0c:07:e4:99:9e:90:
                    87:24:8b:a8:03:63:b1:76:f8:fe:ab:12:86:39:32:
                    23:8b:1a:80:2d:f4:00:e6:77:83:03:45:d4:44:94:
                    ca:5a:96:18:1a:ff:e0:be:1c:6c:e9:46:ba:e3:33:
                    0c:6a:ec:86:bd:ff:61:6e:37:3a:b4:66:b2:08:78:
                    e7:86:65:0d:fa:9a:c8:4d:4a:40:1e:d6:45:71:e9:
                    8f:1f:40:fc:cf:fe:ed:b7:ee:36:0e:85:af:e9:ad:
                    20:39:02:bc:9c:aa:7b:9a:1b:a9:c5:3e:1d:2a:90:
                    f2:ac:38:54:5f:e2:e7:47:5c:aa:84:be:e5:a7:e1:
                    d2:8e:5a:57:34:b4:92:5a:b6:5a:fa:70:cb:49:f8:
                    cb:8e:d5:22:69:8e:82:11:1b:61:ab:33:14:d0:60:
                    71:38:6d:3f:41:ad:20:19:88:88:f0:5b:47:ab:5e:
                    ad:71:7b:be:df:a8:1d:4f:0c:73:9a:75:eb:8a:05:
                    7b:0c:26:66:1b:bd:df:25:57:a1:7a:b5:ae:f8:ca:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2A:C6:94:69:0C:E3:75:41:4B:5F:67:8F:25:10:3D:50:56:74:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/80d67ced-c907-3e27-adf6-d578795268a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl

            X509v3 Authority Key Identifier:
                keyid:DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e1:df:6b:43:40:3d:f9:a2:eb:c2:1a:e2:88:b2:6a:12:f7:
         b6:39:4a:d1:d1:2e:d7:c4:50:23:f5:ae:0b:05:6c:87:a2:97:
         9e:32:c5:88:28:0e:f2:ac:aa:89:69:dd:8e:62:b7:e6:f3:cd:
         46:c1:7d:0f:f2:4a:04:c4:48:f5:c1:93:e9:db:7d:28:3e:d0:
         f6:43:7a:af:63:2e:a7:ea:45:1e:53:72:32:1c:ae:a0:37:cf:
         c4:08:d8:e0:77:c6:32:9a:62:6f:4b:88:b5:94:fc:f1:ec:d3:
         52:ca:88:83:40:a4:38:6b:c1:b8:15:57:05:bd:7e:62:91:b9:
         24:c3:7e:68:61:58:46:ff:20:9e:2a:54:c4:1b:02:31:c9:4e:
         aa:dd:b5:46:7d:e7:9b:bc:c9:5d:f1:7a:84:36:1b:1d:16:52:
         f9:d5:3f:bc:ea:50:7d:ea:94:9c:86:1d:db:7a:d4:b8:47:49:
         9d:90:57:b0:c5:f3:39:4a:fe:e8:37:5e:4b:4e:61:57:3f:bf:
         94:96:a4:9e:38:44:cc:40:28:55:d1:3d:3d:2f:7b:c3:df:a8:
         94:78:b4:bc:e0:75:76:cb:4f:8a:13:c9:8a:08:fe:06:0a:d2:
         9c:a5:79:14:7d:ae:4c:f9:71:39:79:80:f5:e8:7d:ee:1d:5d:
         e2:38:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:26 2025 by rpki-client