Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5460827-1213-3452-8879-dabb791030bb.roa
File:                     a5460827-1213-3452-8879-dabb791030bb.roa (raw, json)
Hash identifier:          +IZufTcCZ6on1QyfywOqaOFe1doSJsUIv+IPq12q2nk=
Subject key identifier:   05:B7:5E:EE:30:F7:4F:AD:8A:B6:6E:B7:55:5A:C5:E2:05:71:D7:AF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B14A1BE927AA4993C4C7D800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5460827-1213-3452-8879-dabb791030bb.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        2604:cb00:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:1b:e9:27:aa:49:93:c4:c7:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=7ac111b2-1c94-40c4-b18f-4a31264a9810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:98:89:3f:ed:ea:04:47:b7:42:db:4c:e8:
                    5c:7f:27:6e:7a:76:0f:77:45:37:27:cf:7f:f2:ee:
                    2e:4c:37:f2:d5:2f:09:36:38:9d:d9:4a:a4:e0:88:
                    b8:ec:39:6d:00:4d:13:8b:2a:b5:4d:f0:9f:03:3e:
                    6b:29:26:36:c0:ca:fa:36:76:d7:49:46:78:ed:d6:
                    eb:6d:9a:f1:00:0f:a9:dc:09:3b:df:fa:5c:52:a4:
                    0d:3b:14:7e:11:30:35:d8:de:36:8d:92:70:4b:30:
                    93:ae:9a:f1:37:1c:7d:f2:fd:8b:3b:4b:3c:e2:1d:
                    4d:fa:ca:ad:b7:31:81:36:61:14:40:b6:c7:8b:73:
                    f0:e9:95:48:2b:d8:c6:bf:29:ee:7a:c4:5d:0e:a4:
                    f0:69:af:63:d4:62:fb:7f:c8:1a:25:0c:80:e3:b4:
                    90:eb:e1:0d:e5:dc:e4:7d:b1:43:64:b7:bd:44:26:
                    54:df:b5:6c:b8:3b:a8:38:bf:63:54:bf:1f:02:7e:
                    c5:a5:c8:1f:e9:87:e3:6c:ee:fe:33:7b:a0:8f:60:
                    f6:94:13:25:23:1b:1c:8d:1a:68:dd:9a:ea:06:9e:
                    7a:8c:6c:47:99:63:ee:18:51:2d:04:57:dd:f5:9d:
                    79:d0:12:98:d7:63:48:0b:98:b0:a3:b4:e7:0c:47:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:5E:EE:30:F7:4F:AD:8A:B6:6E:B7:55:5A:C5:E2:05:71:D7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5460827-1213-3452-8879-dabb791030bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:e6:40:d9:5f:b8:a9:5e:30:d8:48:10:c1:9b:3a:d4:bb:
         9b:f1:fd:7e:08:cc:93:62:02:2a:db:73:f1:fb:14:30:7d:c2:
         15:24:7b:56:69:a3:05:d9:53:57:e7:c0:5d:a4:de:8a:7d:d5:
         d7:44:5c:90:c2:23:1b:53:d4:3e:99:5b:7c:03:a5:7d:76:b9:
         71:48:98:c9:42:ec:f1:31:2a:85:5e:a0:02:22:cb:bf:2e:d9:
         d9:45:d2:9f:af:c4:df:79:0c:72:ac:31:89:91:12:88:e7:90:
         28:92:5d:5d:df:db:47:0f:0d:21:53:58:d2:6c:8a:19:12:6d:
         9b:e7:0a:f9:3b:e4:fa:15:3d:87:f5:83:90:99:de:ac:2e:d9:
         a9:0c:80:bc:2c:8b:46:f0:2f:fe:2c:9b:b2:38:6b:29:82:7b:
         0c:7a:5f:b8:8f:c6:09:65:3a:5a:cd:46:05:ad:69:57:9d:c4:
         3b:77:25:68:ac:6a:08:40:86:e1:9f:d0:ff:00:67:4c:f7:13:
         30:c3:25:ce:5c:90:39:8f:1e:88:a7:ee:06:a1:a6:94:fe:a6:
         10:32:a3:77:c8:b3:cd:61:49:1d:fc:10:fc:22:7d:34:35:30:
         0b:0b:13:98:94:f4:da:78:17:49:80:a9:d4:c3:6d:d9:89:67:
         2a:1b:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:22:22 2025 by rpki-client