Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa
File:                     5433bf49-ace7-32ec-afe1-9e8653412767.roa (raw, json)
Hash identifier:          x/kC25LxohuScv/9UqsS8nM5wqYEwUfonUQCCLdktS0=
Subject key identifier:   0B:03:C0:4D:F4:7A:7A:15:B7:9A:01:F8:E3:BD:A4:65:C3:97:D4:4C
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CA3B57AE388CE55B5580
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        2001:4c8:1089::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:ca:3b:57:ae:38:8c:e5:5b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=d73d0995-1d08-4137-9862-597179d486a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:b8:7a:f1:10:af:d7:08:b7:98:74:e8:c9:
                    13:5b:fd:8f:a9:fe:07:c5:fd:d7:21:b4:92:28:42:
                    d8:b4:54:ad:a0:e1:70:dc:78:cd:be:98:9b:ff:a3:
                    08:ac:58:51:93:da:92:34:40:90:97:dc:16:df:ea:
                    bf:b9:f3:73:d4:66:41:90:5b:86:b9:16:66:47:bf:
                    24:d5:e6:1d:86:42:be:ad:58:81:ca:f9:47:4f:d5:
                    62:1b:9d:58:40:5d:64:65:3f:dc:4a:82:af:56:4d:
                    83:ae:17:99:f5:9f:b3:c4:1d:41:13:4f:1a:db:d8:
                    c7:e9:a7:77:a0:9a:4d:ef:f1:89:2d:76:e8:8c:40:
                    7f:3e:52:92:0a:4b:44:30:4b:ce:47:21:4f:4e:b9:
                    9a:d0:20:0d:10:25:a5:2c:ce:8b:a6:5f:ad:92:b3:
                    78:e2:20:fc:f4:ec:c9:fe:bf:dd:8b:ac:e2:ce:5f:
                    33:0d:92:1e:a1:51:21:a0:c6:c3:2e:7c:f2:5f:85:
                    ff:9d:78:4c:3c:19:27:45:b7:57:02:54:fb:ca:96:
                    bf:78:d9:fb:cf:ed:8f:af:af:fb:63:06:a4:2f:2c:
                    41:f6:9c:28:91:11:a2:cd:74:e5:43:6b:57:30:4a:
                    d5:5a:94:ae:7d:2e:d4:a6:ad:3b:8c:3c:96:c4:b8:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:03:C0:4D:F4:7A:7A:15:B7:9A:01:F8:E3:BD:A4:65:C3:97:D4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1089::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:86:c6:3c:81:c0:b0:c0:94:2a:0f:6c:0c:db:7c:c7:e5:96:
         df:a8:77:70:e6:1a:4b:5a:42:75:0c:1f:53:74:85:19:39:06:
         89:f8:31:d4:7d:7d:a7:2c:dd:20:09:bb:8d:12:f4:73:d6:5d:
         9f:d0:6b:ed:a4:5a:ad:3e:af:0f:97:65:b2:e1:99:d9:8f:1a:
         86:5d:79:80:de:ae:85:0b:3e:59:1a:cf:2c:39:b5:be:76:80:
         f8:e3:ee:53:98:55:3b:2f:2e:2d:01:96:cd:39:31:df:43:ef:
         54:40:ea:24:04:6e:c3:5b:b0:a9:d2:73:2c:b9:39:08:ed:eb:
         90:4c:d3:19:12:b5:f1:85:59:01:47:08:32:17:d4:f3:82:fb:
         51:5d:4f:3c:26:35:96:a2:c7:0c:65:1f:8c:d1:be:09:51:e8:
         b9:a0:2e:a4:4e:7a:1f:f1:3a:ae:07:29:23:7c:90:00:64:2b:
         b9:c5:5b:91:8f:3d:30:0d:ba:f0:1a:7e:4b:4d:68:02:69:f2:
         b6:ec:ca:a2:e6:af:e8:6d:f1:58:54:8b:f2:d8:8d:04:df:a2:
         5a:a9:f9:7f:7e:dc:9f:61:70:cb:4c:51:03:95:fd:45:09:09:
         b9:73:da:34:22:cd:b1:06:e7:cb:45:d0:3a:1c:77:5f:09:6e:
         2e:97:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:11:05 2025 by rpki-client