Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa
File:                     1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa (raw, json)
Hash identifier:          8SlFjmH32kRE0J30dqDgqdfj0+2kZypW8V0B3Vd8Pn4=
Subject key identifier:   14:8A:3C:DC:AD:B6:E4:B2:24:EE:8C:B6:C9:D4:AB:B3:DD:CA:B2:2F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B14A209593A0DE7339EFFF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        2604:cb00:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:20:95:93:a0:de:73:39:ef:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=78ac9920-046f-4aad-947d-11c394f3aefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:af:6f:a6:09:f1:7c:57:6c:e5:e5:10:21:
                    4b:12:67:f6:f3:f9:78:3a:41:69:89:31:48:e4:1a:
                    6d:07:d6:e7:a6:fb:91:ed:96:df:bd:bb:27:c7:d6:
                    bb:57:73:b2:3e:06:ed:8b:e6:d1:59:c8:98:2a:9a:
                    1c:5e:89:ff:4e:ef:48:6d:c9:d6:dc:68:e1:45:52:
                    3e:aa:9d:4b:e0:d3:0b:c7:22:ee:5e:1d:ca:8b:50:
                    08:71:6b:17:66:2c:6b:86:6a:97:e7:b3:14:70:bf:
                    03:bd:ce:27:62:ea:84:6a:d3:30:66:6d:62:16:20:
                    8a:69:f4:62:9e:93:7d:3c:64:08:54:0f:98:b4:0e:
                    d0:8e:9d:76:f7:f7:0b:e7:28:ef:6d:fb:e8:3a:e0:
                    05:9c:14:4d:6c:70:33:49:2c:ff:67:8c:d7:df:00:
                    f2:3d:4c:c6:34:a1:c1:1e:fb:3e:e7:36:a1:75:37:
                    14:2c:29:de:31:2e:13:63:f5:1a:7d:33:27:dc:0f:
                    c2:bd:02:1f:50:0d:8d:25:c3:37:f8:68:f8:8b:a8:
                    59:d4:25:fa:72:c9:c9:21:89:9c:3a:54:09:57:b3:
                    10:f0:7f:18:a9:99:a9:df:65:ca:00:6d:b7:6a:d1:
                    71:5d:a5:9d:71:b3:39:1c:97:00:95:f6:91:fc:9c:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8A:3C:DC:AD:B6:E4:B2:24:EE:8C:B6:C9:D4:AB:B3:DD:CA:B2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:e2:5b:8c:b2:cb:a4:53:fe:0d:82:5a:bf:36:49:53:fb:
         a5:17:85:6a:ec:91:a5:f8:05:a3:ca:4f:51:e2:a3:39:3d:5e:
         01:02:f4:51:de:46:ed:ce:88:4e:49:37:c0:28:cf:1a:af:0b:
         2c:87:5e:d4:80:7d:8e:17:1d:8e:cd:50:03:73:e4:b2:78:70:
         0a:4b:cf:28:17:d8:df:55:1f:a6:b8:51:d2:06:5a:86:76:01:
         07:b2:b2:ca:b5:a6:49:07:68:b5:1d:78:9b:e7:4d:0e:e9:73:
         d6:dd:f7:5e:7c:24:30:b6:77:54:e4:3d:6c:e2:66:1a:f8:62:
         c2:60:85:b8:f3:35:6d:58:77:f2:84:df:d5:30:c6:ec:1d:89:
         cf:42:e4:e5:90:27:2d:82:2e:07:15:36:2f:dd:f9:9a:ac:57:
         42:74:1e:db:e8:66:aa:96:0b:2f:be:6e:64:a2:a4:e3:d0:c2:
         c6:ee:15:b8:6c:70:29:bc:f7:cc:4e:f7:4a:81:72:15:36:fc:
         23:6e:2e:04:70:ec:87:fe:09:32:f2:78:d9:ad:b5:ef:ff:d2:
         95:fd:4b:3b:17:38:df:86:49:6f:68:04:08:26:d3:c3:ee:c6:
         d0:db:75:f7:c9:0a:e9:a2:e5:7e:54:62:51:2c:14:ad:1e:ba:
         74:9b:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:49:07 2025 by rpki-client