Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa
File:                     ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa (raw, json)
Hash identifier:          VPdHRSRv7wKU3rq+wxrEQosS3ZJJ08ErPEVGn81u7aw=
Subject key identifier:   B2:73:B2:05:92:1D:60:2E:DE:94:E9:53:C1:F3:1F:0C:41:B2:E5:8A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A03A56A98D5A92113EC947F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     394505
IP address blocks:        2001:57a:f241::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:6a:98:d5:a9:21:13:ec:94:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=ca11d288-065a-463e-87bd-d67f84beacc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:8e:b4:ce:46:c1:70:cd:ef:e5:3c:7d:6f:
                    a9:6e:b4:bc:60:c4:c4:b7:76:5a:28:da:82:34:01:
                    5e:3a:76:83:e1:96:4c:f4:51:b2:84:87:3c:a0:6a:
                    86:7f:ba:56:32:0f:7d:df:2b:ce:9a:cf:cb:af:34:
                    48:d1:70:18:a5:af:af:5e:67:b1:5e:55:f4:a5:e2:
                    c3:39:73:39:bc:88:38:3f:fc:6e:2e:d0:d7:fb:94:
                    5a:11:01:3b:33:76:01:36:3e:8c:18:e5:de:73:9f:
                    c3:9a:c5:cb:d3:07:1a:82:b8:b0:1b:32:2f:06:95:
                    44:08:94:8c:83:99:46:74:65:81:2c:8d:db:e9:0d:
                    9a:66:26:55:ba:21:5d:e0:ef:f2:4a:bc:61:64:55:
                    53:cc:eb:b3:25:15:56:6f:f6:5c:d5:6c:8f:95:64:
                    4d:7b:7a:fa:52:ed:dd:aa:5e:26:88:f3:fc:51:dd:
                    42:c1:71:c0:17:74:40:6b:07:21:68:ad:cf:fd:c7:
                    be:bb:ea:66:9b:77:d2:c8:4b:20:b5:76:fc:c2:f1:
                    42:0c:c0:f1:7e:64:2f:f5:61:53:b9:e9:75:b7:c7:
                    c4:24:36:a3:b2:6c:e7:17:67:08:8e:3f:a1:2d:17:
                    d8:09:28:7f:82:53:b3:cc:e0:47:dc:cf:dc:6f:5d:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:73:B2:05:92:1D:60:2E:DE:94:E9:53:C1:F3:1F:0C:41:B2:E5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0b8560-2623-3553-bf54-5d8d8f3d2282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:f241::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b7:32:f4:6d:ee:5f:76:e6:be:9e:4f:bd:3a:7c:b9:a8:0c:
         39:fb:f2:4f:b4:49:1a:62:06:14:80:33:6e:02:c6:34:82:bd:
         99:f7:7b:d5:f0:de:8b:dc:2b:15:f5:e4:8b:ec:f2:bd:2a:0b:
         bc:b6:b7:a4:bf:2c:99:b3:f3:05:d5:15:ef:6b:dc:eb:c5:e1:
         23:b7:40:02:f8:bd:db:23:a5:f5:e4:f1:d8:87:ed:34:7f:83:
         4c:dd:16:62:0c:07:d8:05:3d:af:4a:a4:94:07:cc:b6:d5:a2:
         b1:88:50:08:24:73:ae:bb:a1:f6:94:55:9c:15:48:9c:77:64:
         93:6c:d1:c5:74:bb:69:dd:3a:20:82:a3:39:56:79:61:74:24:
         08:74:c6:ed:cd:05:d8:4d:f9:94:fa:a7:d8:0f:3b:46:28:e7:
         98:ff:0a:6b:e8:d0:4f:42:77:4f:7c:a6:a2:4a:49:4a:59:ce:
         f4:68:1b:99:78:13:71:34:0f:3b:96:4e:03:b7:34:e2:45:0e:
         ce:e7:3a:14:a0:cc:59:43:03:cf:4a:cd:9e:6a:20:65:e6:7b:
         85:1e:9d:8f:9b:bb:86:f8:72:b6:48:c3:1c:be:ff:be:9e:7d:
         bf:ad:5a:e5:49:23:72:68:45:66:6c:75:c1:c0:f0:61:62:49:
         f4:b5:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:30:01 2025 by rpki-client