Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa
File:                     3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa (raw, json)
Hash identifier:          1IPSefp3bTSaUnhCclOPRs2lkAoHDfznKff1eabPL9w=
Subject key identifier:   AE:D2:7C:A0:E4:84:76:0E:6D:33:E2:86:E4:09:DB:AD:18:23:08:E8
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584A1E2AA7EC9F0FAF54717D3FE0
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     0
IP address blocks:        2001:504:44::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a7:ec:9f:0f:af:54:71:7d:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=55162d0b-c63b-45ee-b484-262545b8fad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:f5:c8:4c:ac:cd:79:30:5a:2e:73:00:38:
                    e1:dc:7f:0c:69:ba:ef:e6:3d:24:81:93:58:ae:cf:
                    72:1c:38:40:7e:53:15:0d:b5:d0:4c:0d:dd:7e:94:
                    a3:57:3b:6d:4a:16:c1:da:d8:4c:b2:e5:e6:31:8a:
                    32:75:80:8b:70:ec:d0:b4:0e:96:76:27:d8:54:62:
                    f8:b2:d5:b0:98:dd:15:5d:36:d1:cd:78:ec:1e:4a:
                    c3:a6:68:ab:a6:a9:79:a2:a5:e9:ac:8a:59:bc:f0:
                    60:6c:3b:4a:f4:f6:a6:96:90:a4:f9:02:db:41:ce:
                    51:de:c6:18:85:f2:c4:18:92:c4:fe:c6:e8:47:d1:
                    cf:c8:44:fc:d2:af:ff:73:32:a1:2d:63:6c:e4:07:
                    e2:4e:78:79:41:93:28:06:3f:fb:30:d9:e2:d9:2d:
                    81:ed:d6:99:f3:11:b6:61:58:8a:6b:3e:b2:28:ef:
                    7a:59:31:0f:e7:81:d5:98:26:a3:ee:5e:b3:c1:71:
                    af:61:05:11:ab:dc:fd:83:16:d0:12:67:78:12:94:
                    cf:f7:c6:6b:20:a1:4b:e6:ad:44:6b:86:af:3c:8c:
                    cf:10:86:b4:5c:ce:9c:8c:2c:52:a1:4a:4b:1d:69:
                    a0:e3:2b:2a:3b:f2:84:75:dd:4b:b0:6f:9d:54:00:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D2:7C:A0:E4:84:76:0E:6D:33:E2:86:E4:09:DB:AD:18:23:08:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/3f9b2a02-9015-3eca-b6bb-ce876bc6abaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:44::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:39:f8:be:5d:61:e0:77:38:c0:4c:df:35:af:22:4a:fa:22:
         29:99:50:84:ab:86:37:91:e4:84:df:14:5f:35:76:0c:f8:22:
         94:14:8c:eb:8f:0d:c9:99:b3:e6:38:9f:f4:df:99:a8:8a:eb:
         37:9a:d5:13:7b:61:1f:e2:e7:e1:24:40:c7:37:11:f2:48:4f:
         e9:18:4b:d0:f3:14:87:31:ce:14:e8:ee:63:0a:6a:e5:9e:28:
         bc:fe:e0:35:fe:6c:e4:8d:ff:f8:78:2e:bb:72:e7:5d:60:1d:
         b7:02:47:0d:18:54:82:44:46:ca:f6:e4:75:e9:c0:e9:fe:e9:
         d3:53:80:7c:34:10:c2:04:65:ad:5d:c9:78:1d:f3:1d:3d:66:
         85:eb:fb:62:51:46:45:1c:95:fe:4a:59:42:a0:c1:95:98:00:
         3f:07:2c:46:1b:7c:3b:eb:18:7a:4b:63:c2:88:3a:08:1b:68:
         f3:bf:42:d5:18:b8:26:e8:c8:22:3f:81:c7:26:07:47:55:15:
         eb:e7:16:e5:5a:7c:2d:f6:f7:3a:0d:0b:b5:3b:2e:55:62:eb:
         8b:be:b9:5a:ed:53:bf:4c:49:2a:ad:2f:35:46:2f:46:cf:ed:
         b9:28:b2:3c:cf:c8:01:9b:14:7e:01:e6:00:b8:c6:27:34:3d:
         37:d4:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:23 2025 by rpki-client