Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5484b7da-9ab1-386c-8006-35325c06912f.roa
File:                     5484b7da-9ab1-386c-8006-35325c06912f.roa (raw, json)
Hash identifier:          lUti0TqbGrsrmKUiRk0zV7ipEADh4b+Dyic3CzunaZ4=
Subject key identifier:   90:81:9D:CD:94:A0:28:7A:7D:9E:AB:B7:F7:D6:5F:0D:13:9D:44:A4
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848F65BCF03EE173289EFDFE840
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5484b7da-9ab1-386c-8006-35325c06912f.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     30133
IP address blocks:        2001:500:63::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cf:03:ee:17:32:89:ef:df:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=ceb6048a-9217-465a-bd4c-ada00ea43348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:f2:14:e5:3c:1b:bd:eb:44:8d:b4:9d:07:
                    c0:6e:6e:6b:11:8c:29:40:b2:0b:be:7b:d5:95:39:
                    e6:16:2a:a4:0b:a9:8a:c7:bd:69:3c:8d:12:45:e3:
                    ab:14:00:1a:7a:25:68:5c:d1:c7:16:78:18:d6:fe:
                    3e:1c:08:1a:37:e7:ab:d9:68:85:52:84:45:61:f3:
                    42:ac:d1:ae:e7:73:ca:8f:c5:d0:c8:a9:62:7e:59:
                    15:29:91:94:76:22:dc:c5:f0:25:af:2f:31:c3:80:
                    ed:83:ca:6f:93:c3:7c:1a:80:01:a5:a0:b5:da:aa:
                    94:74:f4:d5:92:b5:30:ad:3b:28:4c:86:41:59:36:
                    4b:6c:da:91:eb:de:b0:b5:ec:5d:63:f8:88:46:36:
                    3c:8c:39:83:35:e0:bf:26:b1:90:ea:2e:22:ee:f5:
                    e5:9a:f8:10:da:a6:71:11:a5:85:54:fa:5b:dd:03:
                    aa:95:86:aa:cb:7a:0e:47:16:f8:82:5e:bd:cf:11:
                    66:99:d9:99:f8:d4:ba:3b:b2:36:dd:72:a7:55:59:
                    06:0a:ef:37:bb:84:16:e3:d5:87:91:6a:c0:96:f5:
                    a5:22:7d:c3:14:49:a8:e0:f2:63:65:b3:2c:40:62:
                    1c:47:e5:41:a6:c5:fd:44:c2:f2:d2:55:f2:78:cc:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:81:9D:CD:94:A0:28:7A:7D:9E:AB:B7:F7:D6:5F:0D:13:9D:44:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5484b7da-9ab1-386c-8006-35325c06912f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:63::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:08:15:5f:51:43:17:c9:f7:8f:16:c6:4c:45:57:b9:39:7d:
         82:29:7f:33:66:48:f3:1c:1b:7b:0a:0e:06:e0:bf:c7:08:2b:
         13:d5:e6:9d:9b:1d:2c:ff:46:1d:57:35:3e:cb:4b:74:6e:e0:
         9b:26:10:6c:95:82:fe:56:73:f8:9f:82:65:0b:73:14:ca:9a:
         c8:2f:f3:6d:f6:c7:fc:f8:5e:e8:b7:a0:e8:a1:e2:0d:23:f1:
         77:db:0f:2c:15:b5:5b:d3:ba:b6:4e:a6:05:20:03:6c:9d:ec:
         82:17:f9:86:ba:d4:d2:a8:3a:53:a3:0f:f7:0c:50:ca:05:b8:
         b5:da:38:6e:23:7f:36:a5:0d:49:d5:7f:37:cc:2e:98:53:8e:
         2b:0e:db:62:27:12:ce:ce:bf:b2:3e:7b:b1:df:1b:9e:4b:3d:
         21:45:70:be:05:31:94:d1:72:3f:86:c9:ce:a9:c7:f9:b6:30:
         52:04:db:6e:7d:94:6c:65:e9:eb:f7:c9:f6:40:37:69:79:1e:
         39:73:ff:1f:3a:44:5b:4f:d2:1e:de:21:6c:21:15:a2:3e:b9:
         7a:af:bd:83:e6:35:7e:55:d8:19:17:b2:ec:23:72:12:3e:85:
         7b:67:05:1c:4e:40:9e:5c:a2:c0:3c:41:32:aa:65:f1:ce:d1:
         ae:cd:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:40:57 2025 by rpki-client