Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa
File:                     4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa (raw, json)
Hash identifier:          EOSpQ80CrPjSvHCRLmBhkv9dD+DxVDyrTaZ25XdfJ2Y=
Subject key identifier:   96:83:26:B8:7B:BB:0C:D9:D7:6C:19:13:99:AF:70:BC:78:5A:79:E7
Certificate issuer:       /CN=c500ad14-2d08-4542-9008-f15b1b862fc7
Certificate serial:       010D0C9F4328584A4110626388E5F97DA35C8A00
Authority key identifier: 5D:A9:0A:32:F7:BE:90:78:5E:23:16:99:3F:6C:BF:46:3A:E4:9E:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     6596
IP address blocks:        2001:48d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:62:63:88:e5:f9:7d:a3:5c:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c500ad14-2d08-4542-9008-f15b1b862fc7
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=e064f1b4-5374-4584-9a33-02a09af1664d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:07:b9:81:7e:5e:e1:6f:be:70:5f:75:0c:80:
                    23:2e:f0:44:8e:e0:ca:e5:96:79:8d:af:96:4e:6c:
                    b5:1b:2b:13:0a:ab:a3:da:09:f1:df:47:20:e0:07:
                    59:ff:54:e0:95:d7:4f:4b:79:cd:a8:5f:09:eb:93:
                    13:6c:f1:fd:91:7a:aa:e2:f6:b1:cb:53:cb:73:02:
                    39:44:f9:55:f0:0b:a6:13:94:88:7b:59:75:63:1d:
                    73:3c:e8:cc:83:88:73:6d:c9:21:0a:68:a7:3a:cc:
                    26:dd:5c:3b:50:61:bf:fe:7a:5c:b0:bf:ba:2f:76:
                    a6:57:c9:d4:c1:09:3d:be:b6:5d:53:95:a9:49:68:
                    3a:9f:ce:3f:59:bb:5c:e6:59:ae:04:35:ce:bd:63:
                    ba:c2:31:98:e2:84:00:eb:24:61:14:bf:e5:75:f4:
                    22:5a:23:2a:50:08:5d:5d:28:49:e6:62:19:a8:ec:
                    44:a9:8f:5d:87:66:50:40:9e:61:2a:96:6e:16:20:
                    54:7a:10:a8:a7:6c:60:b0:3e:1a:df:ed:92:79:04:
                    90:14:ad:98:48:fd:17:19:71:3f:7c:7d:a9:57:91:
                    09:bb:d0:f6:31:58:b1:32:08:31:d4:d9:18:2a:44:
                    a0:3e:8c:9b:b9:7f:d7:ba:69:ff:c4:78:77:63:1d:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:26:B8:7B:BB:0C:D9:D7:6C:19:13:99:AF:70:BC:78:5A:79:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A9:0A:32:F7:BE:90:78:5E:23:16:99:3F:6C:BF:46:3A:E4:9E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48d8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:cf:94:67:fa:7d:fd:07:a9:57:83:68:0a:ce:c9:de:54:
         e0:6d:df:54:3b:68:fb:fb:7b:77:a5:87:fa:99:a7:9b:6f:24:
         b9:8a:c2:06:f1:c0:62:6a:40:58:d5:84:1d:00:a8:7f:b0:4c:
         e4:d4:cc:4d:fc:ff:af:07:3f:e1:54:d6:b1:ba:c1:1d:2d:5c:
         7d:3c:4c:df:7a:a8:cc:5b:86:a0:b5:0d:6f:38:dd:d4:d6:42:
         ae:57:fa:6e:db:a8:d5:1b:0e:1d:93:36:26:0b:1c:93:1c:1a:
         89:1d:5b:8b:ac:18:dd:85:cb:92:30:ee:ab:12:31:8f:d6:53:
         90:30:de:fa:c7:07:a6:a6:27:90:db:c8:40:f7:56:1c:54:55:
         59:83:74:e5:fd:4c:ce:c6:20:2b:88:6c:94:d9:eb:0f:1d:a4:
         3f:71:95:68:71:09:55:0c:5e:b8:85:80:db:5a:b7:cf:8e:cb:
         30:20:7e:77:b7:1c:dd:10:cb:a8:7e:e1:ae:61:34:1a:de:07:
         de:53:96:67:d6:23:74:25:f0:12:3f:2a:18:2e:de:b1:46:85:
         97:9a:67:2d:5b:16:55:f6:cc:29:f8:aa:22:53:0a:d2:c5:b7:
         13:6c:3c:6d:87:c4:8d:0f:87:2b:7b:bf:00:03:2e:58:88:7c:
         af:1e:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:59:00 2025 by rpki-client