Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8350e2d1-b203-361a-95fe-f76850e40fa3.roa
File:                     8350e2d1-b203-361a-95fe-f76850e40fa3.roa (raw, json)
Hash identifier:          Qz66kmG+QfovvnweYnXRYLePKUuqjcT6w16FcgMnjuU=
Subject key identifier:   D0:F5:12:E6:3E:21:05:66:3B:7A:FE:2F:B2:66:9C:8C:27:91:AA:DE
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD7A3490257AD9DF4B300
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8350e2d1-b203-361a-95fe-f76850e40fa3.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:108a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d7:a3:49:02:57:ad:9d:f4:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=85453295-416b-403e-a89f-86a4800bbf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b3:fb:8d:7f:ec:23:d6:a4:aa:6f:9e:7f:0c:
                    5c:4e:ee:cc:38:85:08:4d:0e:95:55:4d:df:b2:fc:
                    2f:ae:81:bd:83:72:31:1d:41:1b:47:4c:15:4a:41:
                    de:d4:4e:b6:06:79:e1:33:4b:f2:93:41:62:07:8f:
                    21:db:83:8d:f2:64:6a:bb:59:53:37:69:cd:70:9a:
                    41:3e:34:f7:47:6e:dd:94:5f:10:cd:fe:57:b5:9d:
                    bd:06:7c:ad:36:f4:a3:35:8a:cc:4d:32:7f:19:be:
                    50:b1:7f:98:dc:d8:e0:c8:36:4c:35:1f:a9:20:0e:
                    40:41:05:36:11:67:8c:99:7c:4c:ca:cb:44:f1:dd:
                    c7:d4:6e:92:9b:37:c9:33:75:06:13:fc:53:ee:78:
                    cf:29:7d:e6:a8:d9:de:b3:bd:ba:ea:a0:81:7c:81:
                    83:a3:ef:11:80:b4:dc:3c:3f:d6:6b:e5:3b:e7:9e:
                    6e:9f:ab:13:cd:d0:01:8c:80:70:fd:f8:60:4a:00:
                    38:dd:bf:dd:fc:d8:e9:56:3e:e1:ff:0c:2d:fd:14:
                    0e:98:61:bb:35:84:73:8b:6a:db:9c:ff:6d:8c:44:
                    3d:50:fa:c0:6a:52:a5:b6:bd:7d:4d:cc:a0:7b:7b:
                    58:bf:f6:f7:f9:f6:01:6c:1b:d7:d8:87:d0:72:34:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F5:12:E6:3E:21:05:66:3B:7A:FE:2F:B2:66:9C:8C:27:91:AA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8350e2d1-b203-361a-95fe-f76850e40fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:108a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a8:84:9a:fa:74:b2:6b:78:b7:8d:a8:cf:cc:26:ef:1a:2c:
         4c:1b:41:09:a1:79:6e:e0:45:94:65:97:03:ee:37:e7:c6:cd:
         ce:c0:62:ce:01:c1:20:57:ad:c7:d3:05:aa:e3:52:42:b5:93:
         86:d0:df:7e:44:27:95:a6:f7:ca:a8:c6:f9:94:87:d2:b8:35:
         7f:2b:88:34:f3:4e:e9:d1:f9:eb:60:2b:9c:be:68:05:eb:44:
         72:fc:e1:15:4e:18:d5:a5:a1:77:00:f6:84:21:a3:70:22:f7:
         71:38:27:a0:4d:84:d5:98:99:1a:41:47:15:ed:73:d2:04:df:
         86:ed:64:56:c9:2a:ac:be:b2:03:05:8d:73:b2:64:e0:44:1f:
         17:a7:75:45:e8:a5:7d:39:6b:7f:42:fa:43:11:af:19:2c:1b:
         12:e9:01:1d:48:9d:87:b6:82:c9:18:01:4b:7a:e8:29:90:3c:
         45:2c:28:c9:1f:9b:dd:eb:d8:b8:60:11:04:2d:c5:58:6e:e9:
         c9:39:53:47:16:b1:63:29:33:ab:54:53:83:3e:1b:84:ad:df:
         a1:a5:61:18:35:b4:92:e3:05:78:82:c3:b0:d8:ec:04:28:14:
         93:a6:35:5f:ef:cc:c0:07:f3:5c:a1:51:5b:12:58:43:22:e6:
         16:40:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:50:57 2025 by rpki-client