Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
File:                     c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa (raw, json)
Hash identifier:          OfzFJ0xkOYEYhXO9Y+WtsmFaVkoy84SwRP55DdkImHk=
Subject key identifier:   D8:2C:FF:EE:72:42:56:37:A4:B2:BF:04:5D:68:A8:E7:34:71:CE:A7
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584949FE830212A53A796E062DE0
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     33083
IP address blocks:        2001:4830:c400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:83:02:12:a5:3a:79:6e:06:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=08b566fb-b389-4d5f-a7a8-d9799164f5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:09:c7:cc:e2:08:e2:47:a8:e1:29:77:12:
                    3c:fa:a4:56:9c:d0:94:b7:3e:f6:3a:cf:84:eb:27:
                    e0:99:a8:9a:6f:a3:61:cf:49:4a:e9:b8:21:4c:b4:
                    d7:07:d6:f3:50:3f:9e:29:39:b5:26:5c:5e:86:a6:
                    af:89:2c:77:4c:9e:f5:3b:cf:3f:12:bc:17:93:fa:
                    cc:eb:ea:76:c2:fe:30:ec:e9:fe:c3:46:3c:12:d2:
                    b9:1d:4f:25:3c:d9:5d:e2:54:dd:d1:72:03:20:b1:
                    e4:3b:c0:5f:88:78:da:2d:a8:ff:4f:a1:54:f3:68:
                    0d:4f:e5:07:88:4f:59:29:86:5d:a1:f1:93:71:5e:
                    1d:bd:5f:05:59:f2:fb:84:dd:92:d9:23:f6:5e:be:
                    a8:56:51:63:41:d5:55:10:33:ce:86:88:32:8a:cb:
                    6c:c6:c7:9a:b0:92:79:15:4f:3b:f8:93:0b:f8:20:
                    35:c0:2b:cd:1e:a4:97:de:55:f1:e9:df:b9:d9:e0:
                    14:48:f3:2f:e4:f7:e2:53:c8:ff:36:67:1b:f8:a4:
                    96:f7:ba:f5:17:51:61:18:bf:c1:3d:aa:d2:09:28:
                    00:5a:a2:85:cf:99:1f:e4:bc:c3:7d:f4:2d:e8:fe:
                    59:19:2d:81:9a:81:49:2c:4c:9f:8c:33:95:53:81:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2C:FF:EE:72:42:56:37:A4:B2:BF:04:5D:68:A8:E7:34:71:CE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:08:c7:a8:7a:55:1a:93:f5:8d:8b:bf:e3:f2:5a:34:8f:aa:
         37:66:56:ff:27:4d:49:a0:ab:77:d0:06:6d:7b:5b:0f:47:56:
         7c:73:1d:27:41:16:f0:21:12:80:df:72:58:e8:96:9e:f9:6e:
         b3:2e:34:33:6f:ab:7c:cd:83:f3:2a:59:6e:d5:a3:dc:57:cd:
         f5:02:c9:28:84:88:8f:ac:34:b5:f3:cf:65:5f:eb:7e:dc:aa:
         3e:7e:2b:51:bf:74:55:5e:c4:09:6e:70:ca:7c:35:18:f6:e1:
         97:b4:d1:3d:9e:07:f6:e3:b7:4d:45:0d:b4:50:ca:11:4d:55:
         c2:36:13:35:d6:00:3d:9a:9c:43:3e:96:37:4a:4a:fc:07:fe:
         4a:fc:1b:82:25:62:45:bb:59:e7:70:34:f1:90:b2:7f:0b:d5:
         7b:73:08:be:47:8f:5a:6f:4b:38:b2:e2:fd:76:c7:51:2f:b6:
         4d:0c:6a:22:fb:03:73:f0:b9:9c:c9:a0:21:25:5a:6b:5f:61:
         9c:74:96:d6:c3:e7:05:de:9a:26:8c:dd:e9:22:ee:80:11:89:
         11:de:f0:df:0b:c6:6e:c5:aa:a1:92:2c:71:6f:72:b4:8a:84:
         d1:9f:96:0c:0b:48:9d:49:07:16:dc:c4:18:7a:88:0a:2a:df:
         76:2a:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:40:43 2025 by rpki-client