Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa
File:                     4e47fdbd-610b-37cc-80b9-6379095faee1.roa (raw, json)
Hash identifier:          eFEvIQwYCvQUf/bIQEvLm3gV+51DFhoN/J9YC72HC0M=
Subject key identifier:   B0:E7:49:F8:A0:27:AA:68:BF:E4:6B:FD:15:99:60:31:11:0D:27:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF462552EC1016B147E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f4:62:55:2e:c1:01:6b:14:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=04c3b4bb-e50f-4dfe-b3b9-079907c6545f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:12:36:78:22:e5:bb:5b:06:e0:40:18:05:
                    4d:21:b6:3a:4c:f1:07:2e:b0:7a:4f:e1:ac:c4:3e:
                    16:88:65:66:a1:3b:1e:83:33:05:e4:b1:e3:3b:5e:
                    be:eb:79:2c:67:0a:84:25:7d:50:50:cd:38:02:b8:
                    12:84:b5:21:87:57:38:3a:df:c1:1a:71:1f:20:d3:
                    23:6e:c1:05:64:17:c5:6b:c7:7e:28:05:ce:2f:95:
                    3d:85:53:3d:38:1a:9c:b4:16:f5:36:4a:4b:b3:4a:
                    4b:08:1e:29:cc:87:92:75:66:5c:9a:6e:af:53:5e:
                    a8:08:51:93:5e:cd:e2:1d:0f:b7:f6:b5:4a:55:89:
                    cf:fb:50:58:65:03:b9:11:2a:58:cf:f7:2e:66:dd:
                    84:b8:2c:b6:f9:64:64:0d:a3:b2:45:15:18:69:1f:
                    bc:2b:c6:c1:ac:d2:e2:34:92:cd:6e:3c:38:13:f9:
                    fb:9e:84:b3:55:60:99:ee:96:3c:77:41:86:1e:fd:
                    6c:be:92:35:bb:2d:a1:13:38:a7:2d:bf:5a:b4:1c:
                    c1:66:92:f3:1e:4c:de:17:06:b8:76:ad:64:18:56:
                    1a:8d:56:70:10:2b:cc:10:5b:82:27:d1:c3:56:59:
                    97:ed:98:a4:29:e4:35:2b:44:24:08:87:b8:0e:f3:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E7:49:F8:A0:27:AA:68:BF:E4:6B:FD:15:99:60:31:11:0D:27:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ca:cb:9f:48:63:1e:fa:61:92:cd:45:05:06:9a:22:2d:94:
         74:57:e6:bd:14:e0:99:50:2f:4f:51:f9:ff:14:1a:87:1a:c2:
         da:db:27:cf:15:32:4f:c2:88:e8:59:47:f8:de:0f:12:d4:cf:
         47:6e:73:54:c0:31:3f:b8:45:10:e3:bf:cb:31:75:d7:67:78:
         e5:80:73:c7:b3:30:6a:59:76:29:2b:e6:56:d0:29:79:6e:45:
         2a:59:0a:ce:b2:0e:fd:bd:fa:51:d8:39:d0:3f:ea:04:5f:b4:
         13:66:97:8c:9d:62:4f:22:f3:7c:aa:11:2e:5f:8e:4b:fe:77:
         b2:30:b5:f0:48:7b:65:b8:4f:df:32:4f:61:71:ef:5a:85:71:
         f5:25:47:c6:b9:0a:5f:60:5d:11:2a:a5:45:73:a2:41:62:7f:
         c9:4d:7e:b0:1d:ae:17:20:ad:57:b6:1b:03:79:21:42:0d:96:
         be:a9:6b:5b:de:ae:a6:27:be:a5:50:af:5a:13:dc:39:f8:dd:
         dd:77:b6:a7:86:fd:4e:b5:48:1b:1b:98:1d:c3:1f:09:f2:05:
         60:5a:c2:6d:36:99:e8:1d:d3:81:4d:61:81:81:9e:6c:80:9d:
         89:3b:c1:d7:0f:18:90:20:9b:b5:c0:0a:50:7d:bb:3f:c2:a0:
         12:29:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 07:53:17 2025 by rpki-client