Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa
File:                     d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa (raw, json)
Hash identifier:          T4+Q5X+f5dUYlKSmSimU3UErpqqJcm1HsF3M/E967MY=
Subject key identifier:   C1:57:1E:54:03:AD:1F:E9:C0:50:49:97:63:36:7C:47:47:BD:9D:29
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849B844B898137C0B8ABA2A2F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa
Signing time:             Fri 02 May 2025 13:01:00 +0000
ROA not before:           Fri 02 May 2025 13:01:00 +0000
ROA not after:            Thu 31 Jul 2025 13:01:00 +0000
asID:                     17025
IP address blocks:        2001:438:38::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:44:b8:98:13:7c:0b:8a:ba:2a:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May  2 13:01:00 2025 GMT
            Not After : Jul 31 13:01:00 2025 GMT
        Subject: CN=8e8dffca-0377-4fc4-9c80-7cd0c62e2ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:37:1c:75:26:cf:19:88:84:ef:52:91:63:
                    c4:59:01:a6:18:d7:30:ad:78:6a:7f:59:2e:9b:55:
                    6e:33:73:c0:cd:e8:55:c0:ee:7b:14:0d:39:4c:78:
                    38:27:03:68:31:4f:2c:9c:c4:4a:93:8b:cd:19:8b:
                    56:62:d3:3d:82:c8:b2:a3:3c:fa:7d:b1:e0:ad:b7:
                    5f:55:c8:d4:9c:cb:f0:46:79:b4:37:b9:50:62:4c:
                    7d:77:81:f9:eb:a6:82:61:1b:11:89:db:10:0f:32:
                    da:c1:65:20:83:eb:a2:18:76:14:e8:2c:79:9e:a7:
                    94:be:45:19:7f:0e:b4:44:06:fb:d8:25:00:70:a2:
                    20:ca:38:10:f1:47:2f:ef:67:68:cf:11:ae:05:31:
                    17:7a:07:d4:96:61:d6:90:73:1e:bd:1e:6a:f1:ae:
                    47:26:59:9b:96:b2:a5:b6:c5:6d:a2:a5:56:9a:d9:
                    89:c9:e1:05:32:25:95:40:14:a0:94:02:d7:31:f9:
                    1e:39:2c:b8:21:7a:9d:e3:aa:67:00:01:67:b7:60:
                    2d:83:34:ab:cc:64:c6:8c:3b:f9:c0:b5:3e:48:f4:
                    7a:a6:16:d7:2b:74:c6:28:59:9c:4e:d7:4b:22:23:
                    29:29:c7:1a:8e:1a:95:e0:7b:1c:01:ab:4d:45:61:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:1E:54:03:AD:1F:E9:C0:50:49:97:63:36:7C:47:47:BD:9D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:92:d8:60:47:dd:3a:07:56:b5:6b:82:80:33:19:f7:d7:6c:
         d0:94:21:28:14:a0:17:9a:3b:2f:c8:f1:be:a3:b3:f7:2f:b1:
         cf:bf:b8:e2:f9:43:a4:8b:a7:14:4a:be:4b:76:28:e6:5e:ef:
         6c:7d:b1:f7:51:cd:e8:8f:c8:1c:8c:a3:5c:35:bb:e1:07:c7:
         4e:c8:b1:80:14:da:7a:65:48:d4:28:72:0b:bf:9f:ee:66:95:
         f7:f8:b5:56:f5:8c:16:58:e3:e5:a0:2d:39:34:99:6e:b9:8c:
         2f:f3:6c:6e:3c:85:c3:96:b4:fb:c9:36:2d:4d:a3:ad:5f:77:
         e1:30:c1:1b:c7:e6:50:3c:90:6d:63:1a:86:07:c9:a1:54:0c:
         e8:92:31:82:80:84:61:96:c2:f2:7c:b2:ac:4e:5d:0f:de:70:
         59:37:79:78:f5:eb:5d:b1:2b:d4:1b:3b:e5:67:08:79:b3:24:
         7f:63:e6:29:66:df:3b:84:a5:e5:45:70:fd:10:a8:4f:aa:59:
         c2:87:b7:99:c0:fc:64:83:bb:a0:34:75:bd:63:0e:e7:a4:a5:
         a7:fb:06:dc:23:54:d9:87:2d:e1:ec:49:bd:fe:0e:6f:88:e8:
         67:2b:ed:1d:d5:99:30:4c:09:b6:10:09:b3:26:b8:ba:47:ab:
         7a:df:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:00:01 2025 by rpki-client