Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa
File:                     4660259a-08cc-3371-90cd-23e520954c2a.roa (raw, json)
Hash identifier:          dRKcvCD+dcSm53cLrz07NdPazZXLNiflJjNpKxg2D8Y=
Subject key identifier:   4B:CF:23:BF:45:43:F3:44:05:BD:2C:24:DF:C6:D5:DE:42:69:38:A6
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584A29556183DCE0B383DDBBA720
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     18460
IP address blocks:        2001:49d0:100:198::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:61:83:dc:e0:b3:83:dd:bb:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=beb95f28-e776-40fc-9fa2-45ea293270f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:24:bd:64:b4:29:fa:dd:61:40:ff:84:6b:
                    17:5a:bb:85:99:c0:9a:a9:6e:6a:0f:39:d4:dc:87:
                    f1:71:61:e9:4c:cb:8b:da:b1:79:71:ca:6d:78:d6:
                    fc:a1:90:2f:61:f2:e2:47:86:4f:00:73:0a:e0:f9:
                    c4:c7:27:2a:38:20:02:d4:92:2d:64:bb:43:df:e2:
                    cf:81:18:b5:b4:df:4d:63:23:fb:b3:da:d8:29:3d:
                    61:32:7e:ac:f3:08:e3:85:90:80:0f:a3:52:a3:7a:
                    04:ae:15:7b:52:33:13:e0:8d:a2:3c:7d:0b:a0:41:
                    a9:05:74:f3:10:0c:77:20:ec:1a:ed:d2:d8:33:93:
                    7d:6b:47:0d:a6:18:4f:56:5c:d4:7b:2d:b7:4d:09:
                    8b:d3:4d:70:72:51:0c:4c:f7:82:78:22:1f:88:0a:
                    34:e8:10:93:a4:a9:cc:73:49:a3:30:8d:03:9f:64:
                    ef:79:0e:0a:43:67:7d:81:16:52:f6:f6:f8:94:3a:
                    74:98:47:dd:fe:75:3d:84:61:48:9f:3e:f7:cf:be:
                    f0:87:ea:6b:0a:58:c1:a5:1b:ff:5e:ae:ef:a0:52:
                    18:38:e1:10:b7:de:cf:02:79:be:05:48:fd:00:f2:
                    6e:05:12:e9:b4:ac:89:00:ea:19:3e:04:4b:5b:34:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:23:BF:45:43:F3:44:05:BD:2C:24:DF:C6:D5:DE:42:69:38:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:100:198::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:bd:d2:da:c1:76:3f:e2:b0:dd:bf:82:23:a4:9a:04:84:
         03:8a:7a:48:02:78:ad:37:72:24:f0:84:fe:b8:72:06:df:5e:
         9f:93:72:6d:dc:17:d4:36:3b:ff:2b:88:8d:29:5e:2a:98:c7:
         d4:1f:49:c7:51:7b:f3:c2:dd:11:3c:10:70:16:0b:4c:43:07:
         13:69:71:52:99:d6:4f:7b:e5:bf:4c:22:04:53:b3:84:26:bd:
         60:8b:7e:a8:23:2a:9c:42:1e:44:4d:5f:70:cf:17:eb:7a:db:
         06:92:03:d4:72:07:bf:fa:29:8e:92:6d:6f:5a:00:8b:7b:98:
         90:07:b6:13:8d:87:39:48:9c:b1:f0:26:a2:af:3b:3e:ab:fd:
         76:8a:bf:7a:ac:3b:9f:49:a0:38:80:2e:e8:71:8a:52:07:cf:
         61:7b:ea:fc:47:70:6f:52:f1:25:cd:e3:8a:60:99:fd:73:23:
         24:fa:19:75:3b:81:2c:cd:37:24:3c:ed:b3:39:9f:97:0d:78:
         ce:6a:9f:0f:30:75:0e:17:88:66:fd:75:99:90:1c:66:cc:6b:
         26:ad:ba:ec:40:6a:8d:5c:af:3e:e1:ee:c5:63:ce:cd:e9:0d:
         65:a9:4a:0d:e6:70:61:39:6a:9f:39:ab:5f:d4:82:99:fd:45:
         20:0a:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:33:39 2025 by rpki-client