Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa
File:                     cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa (raw, json)
Hash identifier:          s6pi0d+/PCcPvBY3tH3PBw+7o780c7Ltz/8hdXhDXPk=
Subject key identifier:   02:4F:19:74:BC:53:2D:CE:1B:2C:DB:65:B3:FA:C7:7B:CE:31:D7:09
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F4328584A3A1575E89B8272853B029080
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     177
IP address blocks:        2001:48a8:68fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:75:e8:9b:82:72:85:3b:02:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=6af70a0a-6ceb-4232-97c7-1a779e2a6395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:e7:d4:70:ad:5a:ed:91:9f:f2:ff:01:0f:
                    30:d9:67:85:63:64:5c:18:f8:26:de:dd:22:bd:de:
                    17:8d:3c:0d:24:6b:40:e8:0c:80:6e:9f:d0:07:43:
                    53:5e:92:f1:a0:f7:af:59:7a:f7:d2:d4:c8:53:a2:
                    45:98:8c:3d:1d:fe:72:4d:3e:32:82:d1:1a:82:93:
                    7c:42:5e:56:46:5f:c8:f7:71:2d:13:7e:7a:4d:30:
                    fe:02:ef:42:68:74:46:2b:7e:4d:3b:08:5a:62:92:
                    52:e0:56:d6:0f:b5:63:fa:b0:c3:1f:d0:00:34:f5:
                    a1:ed:e4:88:dd:7e:8e:ff:ce:de:dd:db:8d:04:45:
                    2a:04:91:21:75:3e:dc:70:51:a1:fa:43:31:61:7b:
                    ae:f0:d7:99:74:a6:f5:ba:2b:54:2f:b3:f8:d3:b1:
                    64:16:d3:08:30:72:c0:dd:cc:c5:f4:78:6d:20:e6:
                    21:55:e5:3d:db:93:46:2e:a9:dd:40:3f:61:3a:f4:
                    c9:46:02:af:d3:d2:7f:7a:83:a9:09:81:1d:65:a4:
                    a9:0a:b3:02:6d:48:d6:a9:f3:2e:88:ff:f7:7b:e2:
                    56:b4:c6:97:f7:e4:fb:3e:d2:fa:59:e7:37:10:85:
                    8a:51:be:c0:a9:3c:8d:f7:98:91:dc:02:0b:9c:18:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4F:19:74:BC:53:2D:CE:1B:2C:DB:65:B3:FA:C7:7B:CE:31:D7:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:68fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:10:af:61:cc:43:42:be:ef:cc:e8:b1:d3:d6:1f:f8:ca:64:
         4d:8f:c0:7d:d0:75:7f:e4:14:7b:cb:8c:1e:68:3c:37:0b:8a:
         6c:cc:e1:f3:54:e8:34:ef:fa:ef:a7:28:d6:71:1e:17:56:c1:
         2e:a5:74:bf:8b:0d:87:8c:e2:90:c0:d5:35:8a:a6:93:19:e7:
         95:e5:76:41:a2:30:65:4a:6c:76:97:8a:b1:de:9f:d6:2a:c1:
         d0:93:09:37:1d:69:65:fe:e5:21:48:d4:e4:9c:b3:ae:2a:7d:
         b6:83:01:17:45:58:4b:e2:4d:32:05:43:38:3b:73:b6:3d:dd:
         58:39:4d:80:20:4d:d1:32:8c:ca:06:7c:bd:d3:2b:f6:ad:b5:
         00:7a:65:06:fc:1e:63:84:2e:36:e9:bb:cd:f4:4d:34:2e:39:
         0c:1c:6c:21:54:5e:3d:03:ad:ed:a1:d2:1e:a8:54:3f:85:23:
         40:89:7d:bd:89:62:1d:d1:2e:6a:54:97:b8:9b:93:0f:06:6e:
         5a:68:e7:95:b0:6b:b1:73:f8:d1:31:16:23:be:60:a7:27:5c:
         c3:8d:1b:31:a6:f4:e0:8a:8c:08:d5:bf:88:6f:17:a7:f8:35:
         e3:09:c6:ce:c7:a7:6f:33:12:58:a3:e1:78:28:26:13:5e:5f:
         14:72:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:17:02 2025 by rpki-client