Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa
File:                     7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa (raw, json)
Hash identifier:          ih1JRHHJWfWPnxE9aTtKxMgcwkW7mJf6hp/GdvmmOCw=
Subject key identifier:   54:CA:50:1C:FD:C8:A4:45:0C:F8:BE:F9:F5:A6:2E:C4:96:AD:07:F5
Certificate issuer:       /CN=4c6110af-3017-4d96-90e3-d18a76894aa0
Certificate serial:       010D0C9F43285849B9AA01DABDB62380D4400DC0
Authority key identifier: 1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     394333
IP address blocks:        2604:51c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:01:da:bd:b6:23:80:d4:40:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6110af-3017-4d96-90e3-d18a76894aa0
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=2ac4a4f1-3ea6-4a12-a84b-25523d8e55b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:b2:d8:3f:7d:b0:a3:3d:5d:78:c0:5a:7f:
                    af:2f:0a:a3:2e:bf:5f:cb:a7:1a:4d:ee:e9:63:57:
                    e5:a2:c1:92:c6:10:cf:c4:c1:da:f1:5d:33:8b:75:
                    ac:d9:5e:8b:01:73:a4:8b:5c:06:61:08:3c:f8:14:
                    74:75:45:63:7f:1d:2f:98:5c:3d:90:eb:47:f3:ce:
                    5d:db:07:1f:4d:62:9a:79:0c:08:7f:e3:e9:6e:ce:
                    af:a5:4b:d3:c1:1e:c0:92:9f:21:45:99:ef:af:cf:
                    d2:c5:b6:80:68:3a:22:44:2c:3b:b4:32:e3:2f:2f:
                    c6:9d:99:cb:5c:ea:c6:b2:a4:c1:14:0e:f2:4c:c3:
                    73:30:48:44:3b:33:7d:ae:c5:d9:e7:27:ff:68:1b:
                    ef:80:60:f6:44:32:5f:ec:bd:29:d1:44:3a:d0:c3:
                    94:cd:89:f3:d4:14:8b:08:51:c4:e2:d4:77:33:4e:
                    15:19:64:ae:04:d0:0f:98:44:95:b2:5d:dd:2a:bf:
                    d7:d7:11:4b:17:20:71:fa:94:cf:c2:7a:cf:22:1f:
                    bf:e0:2d:ed:cf:82:d4:88:10:6b:61:cc:73:e8:1b:
                    43:2b:4d:e3:1a:ec:65:7f:d4:6e:5d:aa:53:f3:25:
                    b7:33:be:ec:ba:0b:ab:11:35:ca:bc:88:63:21:ae:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:50:1C:FD:C8:A4:45:0C:F8:BE:F9:F5:A6:2E:C4:96:AD:07:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl

            X509v3 Authority Key Identifier:
                keyid:1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:51c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:cd:a8:7e:2e:0e:72:be:cc:04:26:62:26:d0:1e:d2:40:
         bb:2e:7b:57:27:b4:5e:41:85:2a:72:2f:65:a7:93:0d:ef:07:
         ae:b7:1e:eb:f4:a2:66:51:1c:e7:c3:73:2d:e6:5c:86:9e:d9:
         67:4c:7f:d8:d1:f0:54:ca:99:df:99:93:06:97:77:ac:a2:0c:
         b0:03:43:db:cf:e3:c3:09:ff:87:8e:5e:21:85:f1:13:1e:df:
         0c:75:93:f0:3c:3a:e4:b7:4d:97:04:fa:78:f8:82:36:cd:8a:
         ea:b7:69:6c:a6:a9:bf:0c:cd:39:10:05:ce:05:0a:bf:74:4a:
         dc:4f:f0:11:97:ea:79:ed:73:df:d5:a3:9d:78:d3:5b:f5:e2:
         91:fd:39:48:3d:29:ac:3f:b2:5b:65:7a:26:89:c0:aa:cb:f5:
         81:6b:7a:74:7f:21:4f:ea:fd:eb:56:73:61:7f:2b:70:e6:98:
         ae:9e:5b:8e:2c:ab:65:dc:bc:66:e8:21:0c:81:37:a5:8e:ca:
         d8:31:b8:b8:cc:0b:dc:e1:da:52:2c:66:c7:cd:fb:56:7e:47:
         c1:01:d5:30:ae:69:52:31:b8:16:e8:7c:27:0f:15:91:c7:03:
         0b:03:8d:9b:6a:b6:af:17:95:6e:ca:c8:a1:99:14:70:e9:af:
         9a:2a:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:12:10 2025 by rpki-client