Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
File:                     4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (raw, json)
Hash identifier:          JZYZ+BSpqfqW+VbSfUtpVVitFOb7jCN1stt017H9k/I=
Subject key identifier:   18:78:34:16:33:56:2F:BD:59:48:9D:F1:E4:58:53:10:50:F1:25:1E
Certificate issuer:       /CN=d4cafeea-cee5-442f-9f6c-530abebc6186
Certificate serial:       010D0C9F43285849E4EFC4A4398D91C4EF68B210
Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     396328
IP address blocks:        2607:c0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c4:a4:39:8d:91:c4:ef:68:b2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=1037c21f-74bb-4e07-ba88-f972931d65e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:82:8d:f7:43:cd:de:0b:d2:72:ae:0f:9b:
                    fa:30:eb:51:1b:34:d1:83:0f:9a:d2:02:75:a5:84:
                    42:cb:56:01:51:38:18:f2:e6:96:8c:87:01:ea:4c:
                    1f:13:3d:c7:d4:42:e9:ba:45:ff:72:84:5d:4f:32:
                    8e:3a:8f:1e:ee:be:a3:ad:c1:23:a7:77:03:33:ce:
                    34:45:23:08:0e:f5:f3:56:d7:b1:5c:59:f6:75:34:
                    c6:68:07:d8:ab:8a:92:e8:c5:5a:24:37:40:bf:75:
                    ee:78:a8:0f:c7:35:eb:65:2b:f7:4a:14:48:84:b1:
                    bd:29:0b:a0:62:b0:cc:56:44:0b:10:68:e3:4e:99:
                    a8:29:dd:ae:3b:b6:bf:7a:27:05:26:8c:4d:47:5b:
                    a0:b4:f6:89:fa:c8:19:fb:a7:aa:25:27:4a:59:b0:
                    74:f4:9e:52:78:f5:f1:b3:71:5a:d9:69:cc:d5:f3:
                    80:01:34:bc:00:64:d8:9f:ae:2e:5e:44:bc:ff:f8:
                    52:9a:f4:aa:ff:87:bc:b9:fc:ec:0d:b5:99:0b:74:
                    e6:bc:33:24:15:f4:a7:df:b3:4a:a6:53:b9:c3:98:
                    6a:98:0e:75:db:a2:91:78:cb:da:49:30:86:eb:79:
                    65:57:b8:e7:38:2b:f3:e2:a4:cf:dd:0a:b0:4b:62:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:78:34:16:33:56:2F:BD:59:48:9D:F1:E4:58:53:10:50:F1:25:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl

            X509v3 Authority Key Identifier:
                keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:af:03:e3:97:6f:64:27:ce:f6:9a:9e:e6:76:57:9b:f2:
         b7:0a:d2:f2:d6:78:f4:a6:fa:bd:d1:45:67:b1:58:93:2b:70:
         5a:55:e5:ad:6b:fc:25:fc:83:a8:23:73:0b:b9:a1:d1:46:ee:
         71:fd:31:ad:1e:f0:68:75:e5:4f:c3:ce:63:57:f7:b5:57:58:
         fb:38:5b:d9:ab:76:46:41:24:94:09:c2:26:e4:bb:36:b6:46:
         7d:86:ce:01:81:0e:d8:52:70:ee:0f:2a:42:e1:03:05:72:4e:
         bb:7c:ff:66:b3:2e:87:cc:68:b5:0a:47:34:42:57:1f:9a:57:
         f3:ae:57:9e:e6:ce:92:d3:8e:e4:2d:bc:cf:6b:9a:95:9e:90:
         5b:d9:44:7d:fb:20:48:4a:f2:7b:51:30:32:87:85:b8:72:3a:
         64:0a:44:9c:d5:1a:db:d5:88:42:86:bd:8b:e4:cc:8e:59:0d:
         6e:42:c6:cf:48:7e:46:c4:3a:d3:00:d3:57:34:8d:80:62:09:
         ca:f4:25:d9:0e:99:74:84:c1:0a:b7:08:46:e5:6a:8b:33:94:
         20:b7:e1:5b:88:42:37:eb:e6:9e:ec:a1:41:c3:56:6f:4e:39:
         94:7f:cb:e6:ca:10:3b:2e:99:c9:33:6a:14:dd:18:1f:b4:80:
         fe:0a:fd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:31:27 2025 by rpki-client