Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
File:                     42446862-1602-3fe1-8bf3-b4a41f6898f6.roa (raw, json)
Hash identifier:          sdRAjmzvT88PtM/OSkAdL58vciIgvbHAz+j3x+f/IZ8=
Subject key identifier:   9E:81:10:16:15:84:F0:D9:8A:A6:B6:F6:65:E0:59:7B:78:B7:69:58
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858499C59E50C036EF0BB02E11040
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     54138
IP address blocks:        2604:c980:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e5:0c:03:6e:f0:bb:02:e1:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=f24e39ac-e90f-4364-b96d-2c56f5bccf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:08:71:fa:6e:53:c2:54:76:ff:76:60:ac:
                    e6:de:1b:3d:f3:7c:69:d4:fa:06:c6:55:a0:d2:44:
                    2d:fd:8a:aa:fe:e4:99:b7:0c:2b:95:04:ba:1d:d5:
                    ad:8e:e1:56:04:04:81:81:3a:0c:10:01:bb:5c:4a:
                    0b:19:01:b0:5b:20:41:a8:18:0d:4b:5d:b4:5b:d5:
                    8e:5b:de:ab:89:65:e8:e5:91:17:de:0c:4f:e3:11:
                    03:1a:0f:d8:cb:d3:88:45:07:a7:94:27:de:a1:74:
                    8e:97:59:95:75:e4:6e:4f:75:eb:fc:1f:78:e5:88:
                    42:01:57:f0:e0:a3:2a:59:d9:68:3a:c0:f3:ab:85:
                    0a:92:e2:3a:fa:51:b2:f2:f3:16:b1:91:a3:46:e3:
                    72:ab:aa:0a:9e:be:9f:b9:54:a0:e0:e2:0b:24:a0:
                    2d:a3:51:54:2a:75:cc:f6:03:31:90:61:54:ce:b7:
                    f2:c7:28:9e:18:db:a5:bd:93:6c:c8:be:5d:af:1b:
                    88:c9:a7:b7:71:8f:c2:54:ef:55:3d:e8:a5:7c:63:
                    d5:0e:29:9b:47:e7:95:cc:f9:33:a1:09:90:82:08:
                    ee:7e:4c:c5:6b:53:e3:6d:72:3f:ab:2a:84:57:11:
                    61:81:62:08:58:3b:99:a1:b7:a9:e7:0b:f6:d1:30:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:81:10:16:15:84:F0:D9:8A:A6:B6:F6:65:E0:59:7B:78:B7:69:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:25:4b:7b:3a:61:1a:3d:94:8c:23:a0:03:11:2e:41:9b:df:
         54:c2:26:cd:33:92:64:43:b7:bb:78:17:1d:df:3f:9f:06:c6:
         24:90:eb:6d:5b:09:36:4c:81:78:0a:44:f2:54:fe:be:d6:f9:
         6a:0b:c9:3a:de:ca:a6:d1:f0:cc:38:fa:64:89:b0:c5:5b:d4:
         e3:14:f4:f3:92:fe:80:68:63:0f:67:82:f9:c2:ce:5f:92:14:
         ed:5b:d0:0d:8c:07:eb:0f:c8:85:7d:6e:94:d3:ca:4e:19:67:
         59:f4:fe:1f:c2:f8:5b:b1:0c:22:eb:ab:7a:d7:87:7d:b6:ae:
         94:01:67:bb:5e:af:d7:70:b9:28:64:77:c5:1b:f0:c8:42:cd:
         17:ff:ff:19:68:4f:45:39:1c:d6:28:62:b2:b6:52:3f:78:1f:
         fe:f5:70:98:12:a7:64:58:b7:ce:0f:98:b2:26:5f:8c:ca:35:
         69:25:ec:f1:c8:06:ae:d9:fb:d0:bf:51:bc:73:ff:ef:a0:77:
         9d:56:70:16:64:17:b7:05:43:30:84:a6:e0:93:be:38:98:a5:
         8c:78:e8:93:39:d8:8f:ed:96:57:89:f3:51:1c:8e:58:32:58:
         b1:64:0a:bf:a1:70:2e:1f:12:d0:ca:0d:17:86:bb:49:c9:ac:
         a2:d4:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:21:13 2025 by rpki-client