Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
File:                     ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa (raw, json)
Hash identifier:          5KrwK/V689thfwkIiDTvYemk0Dh9R2CXusNmKd2YMlU=
Subject key identifier:   FB:DB:00:B4:E9:5A:35:5A:1F:D8:28:1F:DC:41:A6:47:9D:53:D8:75
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F43285849D594E78140D08B96AEE0E780
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     0
IP address blocks:        2001:504:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e7:81:40:d0:8b:96:ae:e0:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=2cda0986-a812-48e9-99ce-01b9f9778cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0d:19:be:ce:1d:ce:8e:0f:1e:03:8c:6c:b8:
                    f6:fb:d7:62:b5:a9:9f:0e:30:5c:aa:86:01:2d:b8:
                    42:a9:5a:f1:6a:1c:6d:26:ea:dc:03:b5:ca:99:f6:
                    9f:61:b7:3c:75:c3:aa:fa:4e:74:ce:5a:5a:19:1f:
                    85:f5:21:0c:7e:e3:c4:e7:82:10:01:73:15:66:86:
                    53:55:ac:66:53:39:07:91:cd:57:6c:de:57:ce:4c:
                    7b:60:33:12:e1:6e:8b:c1:30:32:fb:5e:15:71:46:
                    9d:d7:9f:cb:3e:36:d7:7c:10:b2:87:75:50:46:00:
                    9e:47:f1:d9:ac:3b:65:08:df:b5:d4:91:9e:32:a2:
                    eb:4a:33:7a:7c:bf:72:54:e6:7a:1f:e5:67:46:bb:
                    97:62:a4:6c:37:be:b8:02:7b:32:b1:50:d9:b3:a0:
                    74:64:55:32:b9:7d:2d:1a:14:65:6c:ba:6b:c9:af:
                    7e:e9:74:2a:34:4d:63:d8:a4:77:ec:76:e4:26:17:
                    44:7f:65:30:c4:20:07:e1:50:c4:bc:13:76:e1:1f:
                    a0:3d:bb:ec:cf:3f:ad:d3:49:fa:55:c5:aa:02:b4:
                    25:6a:ed:65:5a:e3:b4:86:52:06:1d:df:a9:87:dd:
                    38:5b:1e:e8:ba:3f:43:da:90:d4:1e:89:f2:90:0d:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DB:00:B4:E9:5A:35:5A:1F:D8:28:1F:DC:41:A6:47:9D:53:D8:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:95:1a:6f:0b:42:2a:3a:de:af:18:80:b2:47:61:75:61:
         11:e2:29:a3:a7:c2:86:a8:bc:bb:7d:b6:c4:be:01:35:74:d7:
         f1:40:97:c1:43:12:40:77:17:92:e7:f8:ce:0e:35:b3:01:4a:
         71:c6:97:b9:f6:73:7f:09:f3:d9:c7:15:d5:8c:f9:97:44:e4:
         b7:51:6d:d6:f7:12:2b:69:c9:1c:ed:ee:8a:17:a0:02:65:27:
         82:09:f1:b5:7f:fd:47:88:a6:d1:4a:28:2f:78:26:fa:86:34:
         5d:8a:ea:ff:f6:75:47:8c:c6:49:58:94:3f:1e:98:df:8d:81:
         8b:21:2f:f4:47:2f:98:5e:4a:53:ab:13:dd:c8:09:5b:f2:71:
         04:75:b9:0a:34:13:7f:52:04:d2:6b:19:ca:07:01:ea:c8:3c:
         45:bc:cb:7c:42:4e:61:24:bf:8a:91:06:3e:bd:81:99:c8:e6:
         48:56:24:73:e0:72:57:e9:c1:85:b7:78:90:5c:5d:55:4e:d0:
         18:bd:9a:ff:f8:cc:dd:2b:88:3f:e4:8b:a0:08:55:9e:68:b4:
         a2:ad:c6:4b:48:34:8b:91:85:a6:e0:7b:f0:14:20:ca:f9:0e:
         98:c2:4d:56:18:f1:31:01:10:b3:50:d2:e3:94:57:f4:b4:cf:
         cc:88:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:11:36 2025 by rpki-client