Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4df1d515-3005-3cf1-b970-c70c61908197.roa
File:                     4df1d515-3005-3cf1-b970-c70c61908197.roa (raw, json)
Hash identifier:          zIxP7eUz4dZTvPkdjwx8pxZOVn/7Ex4Vp2M/0zgLRz4=
Subject key identifier:   C5:2E:2A:27:2E:44:58:CF:8A:48:DD:7A:13:FA:9E:83:35:16:6E:C3
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858499AF4837868838725952952C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4df1d515-3005-3cf1-b970-c70c61908197.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     54138
IP address blocks:        2604:c980:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:83:78:68:83:87:25:95:29:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=a3b55a64-fabd-4092-801e-368ded9e7dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:f0:82:38:e0:f6:ab:99:cf:97:63:92:bc:
                    01:3e:5a:16:93:2f:73:f1:d9:3b:2f:f6:4a:7c:05:
                    8e:f7:c7:dd:c5:60:b5:b5:fc:32:00:da:da:4d:cc:
                    a2:d6:03:01:13:45:ac:38:86:f9:45:50:2a:63:c1:
                    e7:cd:a2:20:61:dc:50:b8:5a:00:29:84:99:96:1f:
                    bd:ad:2b:e7:46:cb:da:28:d0:10:e6:e6:cb:47:78:
                    60:18:6a:e0:9d:18:67:7c:8b:6f:70:ce:20:3d:94:
                    dc:97:43:c6:9e:f9:80:a1:54:15:d0:d6:c1:ca:ef:
                    0c:84:74:32:9e:bb:13:dd:2c:b4:9f:2c:c6:1f:3a:
                    ec:64:34:62:80:25:df:80:91:b5:53:d8:ce:5c:d1:
                    ba:d0:28:1a:05:27:0f:a0:5e:01:38:d0:45:d4:18:
                    ff:fe:f4:03:a7:1a:0a:f9:78:6f:c5:00:1f:63:3b:
                    64:c7:12:7d:56:b9:6b:fc:ec:1e:3b:58:57:35:79:
                    e6:64:a2:0c:19:ed:24:92:5d:0c:fc:c7:4e:79:e6:
                    53:32:14:ae:42:58:ad:8b:2d:39:b3:06:5e:a9:10:
                    f6:34:c2:98:ce:92:85:9e:d8:01:20:b2:6f:68:eb:
                    d4:fe:e0:1d:81:0f:6c:ab:ec:28:73:68:0c:e7:0d:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2E:2A:27:2E:44:58:CF:8A:48:DD:7A:13:FA:9E:83:35:16:6E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/4df1d515-3005-3cf1-b970-c70c61908197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:65:e4:51:fd:6c:ea:fd:76:e7:b7:9f:d4:78:82:b8:2c:9d:
         26:15:ee:5a:c4:30:62:f3:15:29:a5:ea:70:36:fd:2f:ad:14:
         d5:c9:e8:07:1b:a2:35:3b:6f:7c:8e:9d:5f:62:dc:0a:6f:61:
         a6:0e:4c:c3:a0:27:06:c5:48:85:6f:34:9c:f6:55:eb:bf:f9:
         1d:a9:e3:50:2d:04:6a:15:2f:46:7d:eb:83:f8:cc:27:2a:2a:
         35:f7:53:0c:ef:81:8d:df:2b:41:f0:cf:e6:f2:73:c5:d1:b9:
         45:d6:44:9b:49:9e:fd:a0:4b:7a:bf:a3:08:5b:ec:8a:4b:d9:
         25:89:83:90:b8:28:40:24:b9:f9:a2:56:4f:68:d8:a9:ff:09:
         59:af:ae:db:10:da:e1:b4:ea:6f:4d:39:17:a4:68:25:9a:b6:
         fd:94:99:f6:33:4e:b2:1a:34:ae:11:24:3a:35:1b:97:79:0a:
         da:55:20:34:c9:61:4d:03:2b:ef:84:e8:13:c0:ed:d6:92:e8:
         ce:b6:00:95:21:f0:e3:c3:ec:41:7c:ff:19:36:7d:d6:52:ec:
         34:11:3d:b0:73:97:de:66:bf:13:94:74:59:ac:ce:24:97:dc:
         fd:b4:32:d0:b8:30:ad:77:af:8a:f9:04:c5:c7:75:a6:44:32:
         ff:53:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:10:18 2025 by rpki-client