Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a179c3b5-b48b-3b7e-895e-235af5396a91.roa
File:                     a179c3b5-b48b-3b7e-895e-235af5396a91.roa (raw, json)
Hash identifier:          pyP+Gm9KdKtrbnMzNeR39c/y0+Vu/4sr8qgDu4QorY0=
Subject key identifier:   41:39:1C:87:AB:12:E1:D8:96:5A:89:0C:16:80:28:CA:1E:93:0E:95
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85FA4C11640630CE9BD6E80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a179c3b5-b48b-3b7e-895e-235af5396a91.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     19092
IP address blocks:        2607:f1e0:5000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a4:c1:16:40:63:0c:e9:bd:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a4d3e3bd-83eb-4885-b929-42b58f105304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b6:85:df:05:0d:ce:00:1f:29:08:dc:4c:34:
                    8a:3d:fa:e5:73:52:95:54:84:af:bf:28:1b:62:c1:
                    30:61:a2:17:4a:9e:b9:58:f2:dd:ab:b6:28:97:b6:
                    e7:3e:0c:e8:6e:f1:3e:ba:78:4b:75:db:21:94:4e:
                    e3:43:b1:a7:e7:11:0b:79:db:f7:b0:0e:68:79:67:
                    9d:95:7d:bb:a1:5d:06:b7:15:55:a1:7a:3f:1f:cf:
                    dc:aa:7c:e9:78:79:34:6e:26:42:33:11:8d:23:41:
                    f5:d3:5c:ad:fe:a4:68:f1:0d:d0:5d:3f:7a:0d:50:
                    62:17:3b:bc:83:f6:43:59:b7:ce:71:f3:c9:d7:e6:
                    8b:43:32:2c:1f:72:4a:e9:c1:0a:0e:ab:de:f1:1b:
                    71:83:21:5e:be:07:56:5c:63:a2:80:41:35:b9:5a:
                    60:9b:95:a5:fb:16:ab:eb:a6:90:12:40:22:87:9f:
                    6e:ed:0f:5c:e6:a4:ab:3f:c6:dc:05:45:7a:e2:3c:
                    73:95:c6:41:9a:ce:d9:21:f8:ac:40:22:1c:aa:53:
                    67:d9:16:de:5a:59:4d:1b:43:8e:0a:bc:eb:22:50:
                    f6:a6:28:9e:c2:8f:36:96:c5:98:a7:47:37:b4:f4:
                    4b:cb:03:8f:22:54:79:c7:bd:23:8d:0a:ab:52:72:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:39:1C:87:AB:12:E1:D8:96:5A:89:0C:16:80:28:CA:1E:93:0E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a179c3b5-b48b-3b7e-895e-235af5396a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1e0:5000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:5a:f2:b0:cd:f1:5e:9f:9e:54:95:98:49:7a:0b:6a:1f:
         5b:66:d0:15:87:c2:a7:7f:eb:95:46:9b:1c:f4:b4:a3:2e:47:
         fc:6c:38:a9:07:38:34:bf:bd:78:13:c2:74:43:fe:2a:38:e6:
         1d:e8:7c:15:6b:b1:00:ae:92:bf:c9:2c:fd:da:01:3a:4b:01:
         e7:d9:58:38:dd:b2:36:7c:84:a9:3b:bd:62:6c:2e:e8:3b:bd:
         82:8f:4d:6e:3d:f9:cf:eb:f9:64:98:5c:3b:b4:43:6c:82:69:
         7d:8c:29:e8:cd:af:ee:06:4e:c2:dd:22:8c:4a:ac:c6:f0:60:
         6b:e4:b4:4a:8e:ea:cf:ee:8c:c4:34:76:c5:02:a8:3e:5c:32:
         d6:06:6d:27:de:f1:01:03:76:2d:39:68:12:ff:5d:f7:d2:98:
         3f:48:d5:a4:ae:80:0d:ff:b1:76:5e:4e:84:6d:09:58:36:25:
         0e:12:12:69:d0:f7:78:70:6b:39:b2:a7:dc:c6:66:83:56:b8:
         cc:24:e7:86:12:39:21:a3:1c:b3:d6:66:d2:34:10:7e:99:e1:
         72:c4:14:56:54:a5:23:b1:61:8d:3c:d3:84:5d:a8:74:cf:4e:
         c5:c3:3b:f0:3c:43:41:99:e6:1a:ff:e1:88:af:bc:d4:03:47:
         73:a8:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:44:41 2025 by rpki-client