Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/7d23444a-8e86-32b2-8c1a-a2f94126877f.roa
File:                     7d23444a-8e86-32b2-8c1a-a2f94126877f.roa (raw, json)
Hash identifier:          RZXwfHk46sAoD1se5AyJcn63R2h//e/HABO0FyDlZkw=
Subject key identifier:   D9:21:C4:64:D9:5C:03:A2:4B:5B:2B:DD:7E:D8:8C:74:BA:51:56:71
Certificate issuer:       /CN=27c1dec1-056b-4683-80a9-498890185763
Certificate serial:       010D0C9F43285849C4D4CBADBFF6823E5AFA0900
Authority key identifier: 5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/7d23444a-8e86-32b2-8c1a-a2f94126877f.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        2001:19e8:282::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cb:ad:bf:f6:82:3e:5a:fa:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c1dec1-056b-4683-80a9-498890185763
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=71eadef1-af38-47da-8fe0-87844980def2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:7d:f8:2e:ed:09:3d:35:98:fc:f3:68:93:
                    d2:02:61:f2:d4:88:cb:88:97:30:90:55:a8:08:28:
                    71:86:5d:6a:57:68:6d:41:f1:1b:70:d6:4f:f3:bb:
                    9d:e0:ad:f6:38:ed:58:c2:61:ab:aa:0b:16:c3:ad:
                    03:e3:bc:4a:7c:9e:62:b6:0a:46:11:24:e9:58:55:
                    80:a7:57:e8:ea:b4:21:7e:98:dd:fe:51:19:d5:fc:
                    d2:c6:a2:e4:d0:7e:85:03:43:c8:28:1a:c4:37:0b:
                    85:2c:c3:27:48:d8:f1:40:27:cc:08:36:da:a5:fe:
                    4c:e1:07:34:b4:26:94:66:4d:85:97:c3:7f:61:a8:
                    ea:60:83:b8:a0:56:a1:33:67:1a:d5:d2:e7:8f:fe:
                    87:e8:9c:6a:c7:65:05:25:cf:7f:e4:3d:48:98:9a:
                    8f:e4:f1:63:31:ee:72:e3:9b:92:80:9a:c2:ee:14:
                    d9:3b:22:bc:19:58:1f:0c:66:85:16:2e:12:bf:dd:
                    78:c4:c5:ff:34:dc:4e:3f:fb:d1:a6:62:2a:69:62:
                    35:05:15:e0:f1:60:f8:bd:ee:89:62:24:22:b9:1a:
                    3a:5e:8d:f9:4f:58:36:d1:b3:fc:ff:03:3d:40:2b:
                    95:71:69:9c:d8:1b:98:9f:ed:6d:36:92:43:97:ed:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:21:C4:64:D9:5C:03:A2:4B:5B:2B:DD:7E:D8:8C:74:BA:51:56:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/7d23444a-8e86-32b2-8c1a-a2f94126877f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19e8:282::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:45:aa:f1:1b:26:01:c9:9d:54:bc:9c:39:99:8c:3b:82:5e:
         22:d4:0c:70:05:51:2a:c5:08:8b:18:36:28:25:3d:43:b6:6a:
         56:de:64:60:fb:f2:94:10:3a:9a:2d:94:a9:c7:0b:61:e7:72:
         88:92:83:1f:f8:77:5b:15:7c:5b:4a:82:bc:75:02:c5:f1:04:
         5a:55:2d:1b:85:e5:fd:0e:70:bd:09:98:d6:fc:55:7a:db:15:
         92:7c:05:76:b4:6f:0f:fc:ee:25:e5:9a:5d:a2:6b:8f:d3:b2:
         1a:27:36:48:94:fe:75:37:3a:b2:99:09:da:4b:18:13:c5:11:
         66:20:f3:d1:fb:52:ac:b2:07:c8:34:0e:49:3a:0f:42:91:56:
         88:72:24:17:14:96:16:76:78:c1:7b:af:df:1f:ca:88:1f:bc:
         a2:31:0f:e8:30:6d:81:b3:6c:e7:b0:91:9c:e1:2a:b6:be:81:
         ed:55:c6:3a:9f:f5:48:4b:ae:6d:42:e8:a0:c9:ac:12:ca:6b:
         89:fb:f8:52:71:bb:63:4e:f9:8b:d6:0c:22:38:2f:c6:89:af:
         db:e4:e6:c4:c5:c4:ae:bb:19:80:4d:de:15:48:3d:60:7d:c7:
         fb:b7:ab:25:e4:73:ff:cb:07:b9:37:9a:7f:1e:55:6f:6b:6d:
         34:d8:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:22:16 2025 by rpki-client