Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/93b066ca-0987-36a6-a9bc-ba7330a612e8.roa
File:                     93b066ca-0987-36a6-a9bc-ba7330a612e8.roa (raw, json)
Hash identifier:          pgLi3UmurT+2baGjPNSbAm3wiM+VjkLS6bc1WhJOfs8=
Subject key identifier:   D6:45:87:C9:97:5F:FD:61:91:49:B1:25:F9:05:27:AE:70:0F:9A:C3
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F43285849C20A04E32E6CE8DC17D8CB00
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/93b066ca-0987-36a6-a9bc-ba7330a612e8.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14315
IP address blocks:        2606:fc40:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:04:e3:2e:6c:e8:dc:17:d8:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ab51a258-fd1f-4eaf-ab6c-7c09f832b71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:27:9b:4a:e8:a6:68:08:e1:53:85:99:c9:
                    8c:db:4b:c1:b5:bf:48:1b:ce:2e:bf:69:b6:64:c8:
                    4a:d8:1b:e2:fa:a6:90:5f:18:57:2e:67:3b:80:18:
                    69:93:3e:1f:88:df:87:dd:c9:14:f9:60:2f:ce:5d:
                    d1:26:20:ef:6c:f0:69:54:4e:ce:b9:ff:75:81:de:
                    b7:69:d4:3a:84:f8:3d:80:94:5b:9e:9f:17:88:37:
                    10:bc:37:7a:8c:e4:b8:db:fd:d6:45:f6:37:5a:18:
                    31:f0:03:ef:7e:fb:99:92:59:8c:65:89:d0:7e:69:
                    7a:95:7e:6d:7d:6d:68:27:8a:9d:84:80:42:d5:f7:
                    b3:de:77:a5:e7:86:c1:eb:02:9b:44:38:f6:64:91:
                    e6:fb:6a:52:dc:8e:0a:5c:ef:f1:7f:2f:fe:51:2e:
                    79:e7:bd:90:b7:a3:ab:89:ef:9d:ec:26:90:cf:06:
                    88:76:4b:88:e7:fd:49:29:e0:48:d7:2f:b5:3b:e4:
                    0b:c8:6e:90:30:fc:87:12:27:f7:10:40:4f:b6:80:
                    90:19:95:c4:3a:44:77:79:30:00:47:c3:f7:56:96:
                    7d:6c:7c:7a:e3:f4:07:c0:f1:88:bb:85:5b:47:b4:
                    77:4e:5f:bd:1f:57:1c:99:8e:e4:db:de:1c:fa:5d:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:87:C9:97:5F:FD:61:91:49:B1:25:F9:05:27:AE:70:0F:9A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/93b066ca-0987-36a6-a9bc-ba7330a612e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:a6:75:a0:c2:7e:6a:be:a7:0d:87:90:5f:bd:0f:c2:14:
         e0:91:66:cb:cc:a6:6e:52:c7:59:f2:4a:fe:05:a2:c2:70:0f:
         85:53:b1:33:6c:16:1f:c6:6a:75:b4:f7:fa:b1:2f:b2:7b:66:
         77:d3:38:d3:8c:14:5d:0e:d2:02:80:43:1c:8a:0b:c1:21:23:
         ba:fd:0e:9d:ec:30:bf:4c:89:98:e3:2d:87:6e:19:37:02:ed:
         da:ae:f7:54:66:75:46:6a:70:17:2d:2d:44:28:44:24:ce:fe:
         ae:1b:5b:3d:56:66:3b:cf:49:b4:f4:db:aa:dc:9a:8e:25:fe:
         ad:94:33:c9:39:37:c6:5d:eb:24:ee:5a:29:65:f9:c4:1e:ef:
         5b:be:c7:11:e8:05:f9:47:5d:a5:5a:3e:e8:11:2a:3d:c4:cc:
         31:76:b8:b0:f1:fa:7f:a0:f6:94:cf:0a:e8:b5:8a:04:2b:c3:
         84:8f:b2:c3:06:46:38:2f:0c:9b:06:78:03:62:fd:35:dd:2b:
         f7:ef:a5:e9:0f:8a:18:ad:0a:59:94:aa:67:53:e4:e1:ad:80:
         73:66:6c:c0:78:f7:c9:d1:fa:08:3b:44:bf:18:0a:ae:a4:02:
         a0:8f:4f:ac:ab:af:10:cd:46:2b:01:3d:2e:6e:3c:f3:b2:ed:
         90:a3:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:43:26 2025 by rpki-client