Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/47cea827-0473-3f58-8628-fdfb7998c419.roa
File:                     47cea827-0473-3f58-8628-fdfb7998c419.roa (raw, json)
Hash identifier:          4P8CFJ8H1DMesu1YT+91pRYfgKVUtfmLF7ZLu1jCtl8=
Subject key identifier:   B4:F8:44:E0:37:DB:BD:64:D1:E5:16:A1:DB:69:5A:C1:55:4D:B9:D0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858494B6407A28EE3B2956E999E40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/47cea827-0473-3f58-8628-fdfb7998c419.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2620:11a:c01d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:07:a2:8e:e3:b2:95:6e:99:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=d7702a99-e8f6-493e-8402-2705dd1d0636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:dc:84:80:75:bc:bd:ff:c2:7a:12:b3:f3:
                    b6:b9:01:44:c2:15:e4:8c:c3:46:71:7a:d5:a2:91:
                    cb:e1:d0:b2:02:72:08:67:3a:7a:0c:6a:b9:9e:bd:
                    fa:17:3e:a1:f4:4f:12:f6:92:75:5b:52:5c:ee:f0:
                    2b:ad:9b:4d:6d:e4:7f:a8:27:d6:77:f0:23:67:63:
                    63:0f:a7:5b:6a:39:02:ad:36:c9:67:86:82:c1:0a:
                    ce:bc:9e:83:bf:55:ec:44:fc:7a:28:d6:c4:88:db:
                    41:a6:c1:35:71:fa:7b:15:81:80:d6:99:c4:f3:be:
                    dd:60:f2:5b:ba:35:0d:92:b0:83:4e:9d:28:98:dc:
                    21:82:80:0a:0c:04:8b:2a:78:45:43:b7:b6:67:bb:
                    c8:9d:89:31:fe:36:9a:10:39:54:84:ec:68:3d:71:
                    06:9a:e9:f1:35:c7:30:e8:05:a9:f1:0d:62:70:32:
                    21:d0:28:b4:78:7e:4c:a1:26:ff:0f:d6:ef:a1:45:
                    36:3d:42:f5:3e:50:bd:a6:28:8d:2f:32:6e:53:19:
                    e0:e7:6b:e6:63:f4:d0:6b:95:af:9a:cc:8e:e2:fc:
                    61:84:21:ba:1f:e6:4b:ed:dd:7c:98:90:3f:fe:70:
                    d2:29:e0:0a:87:14:54:10:8c:c7:5e:70:6f:5f:41:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F8:44:E0:37:DB:BD:64:D1:E5:16:A1:DB:69:5A:C1:55:4D:B9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/47cea827-0473-3f58-8628-fdfb7998c419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c01d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:30:02:10:7c:38:16:49:e0:72:a8:a5:2e:3f:6b:c5:36:1f:
         fb:a6:e4:d7:94:a8:2c:c8:db:aa:f3:ac:6a:f9:c2:84:44:75:
         c7:2f:9f:a2:8c:23:28:fa:56:9f:42:e4:b3:85:c6:6a:66:3e:
         f1:bc:cc:b7:34:c1:bc:a3:46:10:a3:a1:be:47:6d:40:66:2b:
         4d:5d:34:35:e7:d5:4d:74:4f:95:1c:7d:7f:89:b4:08:89:74:
         60:4c:58:1d:e1:21:07:88:21:da:48:b5:87:65:a9:4e:e0:8e:
         f4:e4:17:24:3c:69:95:ee:44:0a:04:33:60:24:74:f6:d4:55:
         10:4f:98:0d:1b:7a:ba:fc:50:39:77:95:c8:95:54:44:3a:65:
         ff:a3:68:ed:f1:47:02:81:1f:ca:4e:ac:44:69:44:f3:1c:1b:
         30:12:a4:90:72:5f:94:e9:46:9e:83:3d:0f:87:b8:a9:eb:6d:
         6f:8e:1e:b5:88:5a:79:48:b4:77:f1:4c:a3:71:af:7e:88:ef:
         4f:c5:5f:21:94:05:4b:22:4f:96:a2:47:42:21:b7:2d:a1:bf:
         65:19:a2:d3:2b:46:27:e0:cf:89:ac:84:83:49:0a:fe:5e:1f:
         d7:28:19:0c:56:65:39:3e:9c:d6:89:a9:46:a2:39:cd:a5:25:
         ad:9d:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:55 2025 by rpki-client