Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa
File:                     5433bf49-ace7-32ec-afe1-9e8653412767.roa (raw, json)
Hash identifier:          QZvQMPKBkHQejTV1cvu+TXH3gb39fyb5Ie1AkrKkAEg=
Subject key identifier:   0D:FE:4A:E6:35:F0:60:F7:4E:53:31:5C:51:56:3B:7B:51:E8:43:E8
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD795B8122D87C0F24E80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:1089::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d7:95:b8:12:2d:87:c0:f2:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=a0d7d268-23c7-4227-92d2-a0abfa205b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:42:06:ec:48:de:e6:11:89:27:0e:7d:11:
                    76:13:10:9f:96:95:d7:29:7f:f1:6c:7c:29:0c:be:
                    4c:6a:f2:7b:6e:75:5e:79:df:9d:a5:c0:11:d7:04:
                    2f:a8:5a:43:13:82:11:d6:8a:78:ea:08:97:1c:74:
                    cd:f5:44:89:d4:8f:20:09:f0:e2:df:50:55:7a:34:
                    09:34:89:ed:da:80:23:a7:bd:c4:53:3b:91:b8:37:
                    31:c7:2a:4b:cb:b8:ae:30:a5:16:1e:e8:18:e3:ac:
                    b2:2a:b2:5b:68:81:bf:94:2b:36:83:6f:72:96:0c:
                    d7:f7:d9:35:a4:18:8b:31:a4:ef:b9:b1:47:14:6c:
                    49:4e:96:9b:9e:21:b1:2a:7e:d5:3c:ff:33:1c:e2:
                    37:06:6a:82:00:6a:01:cd:c2:44:0b:fc:f7:c3:1b:
                    66:07:c3:a2:f9:3b:bb:c2:2c:c3:e6:f9:73:f8:13:
                    0c:20:a2:7b:5c:be:30:2c:cb:9d:e4:11:87:59:b8:
                    9b:39:f7:50:d2:37:f2:6d:75:92:03:b8:e9:dc:8f:
                    05:0f:60:35:8a:bb:f4:af:4c:66:f9:06:ca:4d:77:
                    cc:c1:58:6a:66:97:40:fe:43:62:9b:9c:18:27:dc:
                    0b:c3:b7:3e:31:09:a5:0a:97:69:9c:22:e7:df:22:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FE:4A:E6:35:F0:60:F7:4E:53:31:5C:51:56:3B:7B:51:E8:43:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1089::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:72:95:6b:13:1b:c7:03:a1:89:5f:5d:cd:88:b4:db:f6:a6:
         77:d0:60:4f:ed:c0:1c:8d:2f:e9:0d:6f:d2:7e:69:9e:35:5c:
         59:2a:a8:89:d1:c4:02:23:da:eb:0d:c7:f7:2e:af:ef:7d:9c:
         63:80:24:f8:1c:91:a3:03:96:fd:57:02:6b:0e:92:3c:37:9e:
         c1:12:f3:4c:a8:d0:70:eb:48:36:ea:27:3d:c1:89:30:28:91:
         cf:04:4b:e3:5d:a1:11:93:8b:60:52:72:44:13:ab:5d:8a:4f:
         ab:fa:7c:90:52:c1:01:94:c3:33:24:aa:9c:9a:f8:ac:b9:7e:
         a5:8c:41:cb:dd:04:15:4a:63:c1:08:98:9e:b0:74:52:c0:d8:
         16:be:6b:cd:ee:41:b9:e8:8e:89:c8:29:99:8b:bd:19:87:40:
         d4:21:bf:70:79:b8:1e:4a:ac:70:b8:14:ee:70:ef:27:b8:5d:
         e2:a5:60:9c:72:ca:70:db:e2:7c:2e:9a:08:a0:68:c9:66:51:
         49:1d:6e:8a:70:6b:f9:eb:0f:0e:68:fe:9c:49:e8:ae:59:64:
         62:75:07:d0:ff:57:b2:2d:52:58:97:d7:d7:b4:3c:7a:46:70:
         ca:b9:76:89:3a:4b:c1:8b:d3:c4:71:44:0e:b1:7b:84:f9:1a:
         71:c5:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:51 2025 by rpki-client