Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
File:                     fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa (raw, json)
Hash identifier:          0L720LMHGPW2sBdjScVFtdhReyUJHgRBMEqefkjaNDQ=
Subject key identifier:   72:D1:15:83:EE:99:4A:8F:33:EE:83:3E:E9:BA:78:F4:41:13:C3:3C
Certificate issuer:       /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Certificate serial:       010D0C9F43285849E22535FEF4F1C27A752F1EE0
Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     0
IP address blocks:        2001:505:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:35:fe:f4:f1:c2:7a:75:2f:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c5794b9f-5efb-4328-9d89-3ed1128e8e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:16:f9:7d:f3:f6:ed:24:c6:e7:37:ed:7b:
                    4e:ed:df:ff:40:80:69:b6:4a:cd:53:f3:41:3f:ce:
                    9c:10:d2:e8:bc:43:d5:8c:50:21:eb:40:76:4a:aa:
                    cb:de:ab:81:25:76:49:7b:15:d2:56:0b:fe:c3:54:
                    c7:a4:aa:88:2c:bb:f3:27:2d:1f:34:da:14:4b:21:
                    a4:8b:92:9c:10:c8:36:cf:7f:d9:e2:f2:00:67:12:
                    79:a5:06:35:5b:e3:e5:27:bd:7e:01:78:01:9c:6b:
                    aa:3b:a1:17:aa:93:5d:db:d1:7e:d0:82:9a:e5:67:
                    0c:a6:e5:8b:33:0f:aa:a8:18:ce:0b:e7:20:33:20:
                    fd:42:f1:d4:2e:e3:a4:01:1d:ce:93:97:bb:7e:17:
                    15:8c:b9:47:7a:14:a7:ad:b7:c2:e4:3a:35:f9:11:
                    f8:9b:be:be:5d:e3:3b:2c:84:db:d6:3d:be:5f:9e:
                    b6:67:08:47:46:75:ae:c3:6e:2b:84:e3:b6:fb:9c:
                    7e:7b:cb:40:66:93:cc:dc:0d:8b:64:8e:e4:4b:8d:
                    9d:c4:d0:c6:4c:dd:38:7d:0d:08:25:2e:ac:f1:88:
                    d3:b1:fb:e9:f1:37:c7:01:b4:a3:ae:17:51:76:3c:
                    c7:cc:0f:60:3f:bb:8f:ea:0a:f5:a7:75:d6:90:31:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D1:15:83:EE:99:4A:8F:33:EE:83:3E:E9:BA:78:F4:41:13:C3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl

            X509v3 Authority Key Identifier:
                keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:505:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:39:fe:9a:a3:ca:5a:4a:7d:2e:8f:21:92:82:8b:5e:f8:b0:
         5c:27:c1:3b:91:dc:39:1a:3e:66:9d:65:14:e7:e2:24:f5:d2:
         cc:74:50:2e:7b:1d:a9:f8:1c:31:13:a7:b1:50:a8:cf:15:3e:
         79:a3:66:58:bc:6d:fa:0e:02:84:f0:f8:55:b7:39:60:1c:25:
         e1:6d:ef:0a:6e:8b:ac:ac:b2:6e:2e:f5:5c:c9:ea:de:81:11:
         cf:f4:54:43:0d:b8:5b:9c:5d:85:6a:60:47:c6:73:3d:d0:f1:
         45:85:46:86:f6:b9:24:dd:08:f7:53:c3:81:57:fd:49:b5:76:
         89:c3:21:9c:9a:e9:ae:5c:aa:92:13:e4:48:48:31:bf:5a:ff:
         57:c0:65:6e:89:d2:e5:4d:d3:48:43:20:ea:5c:91:3c:d6:84:
         4c:53:0d:11:ce:fd:c8:d6:bc:e5:9c:4e:2f:cd:bb:79:75:99:
         5e:46:d8:42:45:2c:a5:35:f0:74:43:9d:9d:33:27:18:76:1b:
         c0:2f:db:70:49:7f:80:97:a6:1b:08:ca:2c:70:16:02:e6:90:
         5b:90:3e:c5:db:a9:4f:36:50:77:ac:b7:e9:d7:61:50:5e:66:
         85:a2:b3:0e:6c:d2:a4:a2:88:a0:70:fb:b6:ff:a8:af:20:1d:
         e6:07:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:06:44 2025 by rpki-client