Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa
File:                     14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa (raw, json)
Hash identifier:          PrXj5srzbJ3sMky2868VS0dbW92puOoTpKTj3sKby/s=
Subject key identifier:   C9:5B:A3:B7:CE:E7:7B:8D:EC:7D:55:9E:67:FC:F7:6E:84:E2:E5:58
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584ACF70FA97EFD7C04257401F10
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        2001:510:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fa:97:ef:d7:c0:42:57:40:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=0830d66b-e7ef-4dff-962f-8f6ac18c3a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:76:f4:47:b5:db:a7:d9:da:bd:aa:94:a8:
                    e5:d2:0e:8d:d9:39:91:be:f9:57:66:95:6a:c7:99:
                    ce:e6:3a:c4:50:7d:b3:e5:46:59:f3:44:cc:fd:15:
                    12:6c:10:af:1a:f0:cd:5e:83:14:b2:bc:47:f4:8f:
                    d5:7e:91:84:53:72:85:03:6c:ef:65:e7:5f:25:9c:
                    9c:7c:c6:b3:fa:aa:79:7c:b1:c4:61:25:51:c0:58:
                    6d:9c:68:6f:15:d4:82:da:9a:74:de:fe:a9:da:7e:
                    7c:a7:e6:92:39:d1:55:af:15:46:fb:cb:c1:a1:ab:
                    d8:d1:fb:05:72:09:c9:e7:8d:24:5b:49:b3:23:95:
                    e5:22:79:f3:d9:d0:28:1f:4f:0e:77:63:a7:c8:5c:
                    09:07:40:20:9c:c1:42:3f:fb:a3:2e:82:b7:6e:c0:
                    e9:5a:e2:be:18:d7:2d:bc:11:f9:b0:00:d6:fe:7c:
                    dd:78:9b:63:0a:46:8d:d7:b1:26:56:dd:aa:9d:cb:
                    ce:81:ab:7c:17:8d:6b:79:1f:a4:e8:a8:f2:ec:c8:
                    d7:bc:78:e7:3d:dd:f0:fa:c0:98:60:fc:1b:b5:15:
                    79:29:61:1b:f2:ec:66:e2:cf:51:a5:dd:75:7f:4b:
                    ca:c2:d9:dd:ac:50:49:44:95:1e:30:90:6c:40:7f:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5B:A3:B7:CE:E7:7B:8D:EC:7D:55:9E:67:FC:F7:6E:84:E2:E5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/14b6b0e4-8c50-3a8d-b721-0f4023a0c65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6c:0a:e7:ce:2c:0c:01:fb:45:16:f1:80:bd:15:8a:3b:cf:
         5a:6f:62:2e:6c:fa:9a:c7:58:1f:d8:ce:e4:72:91:60:9f:b1:
         87:83:84:aa:12:20:84:ea:eb:75:8c:24:64:0d:3e:5a:d0:88:
         49:c5:0f:46:7e:cb:74:00:72:62:19:60:6a:47:0d:1c:44:5f:
         fc:17:1b:52:e1:47:2e:88:a5:ac:81:1d:e7:95:43:30:d7:57:
         c4:f6:14:12:5b:55:20:78:fb:3f:4d:ce:ac:9b:78:b4:bd:22:
         37:88:47:75:b5:39:d7:3f:ca:c8:ac:95:66:1e:ff:20:7e:51:
         09:b9:7b:3a:26:1f:28:65:ae:52:a6:6a:a1:b9:30:ac:6c:5b:
         9d:68:2e:2a:3a:70:a4:cd:dd:74:72:67:93:6a:bb:be:1c:8f:
         92:da:03:45:e7:ff:19:2a:fe:33:0a:56:1a:59:9d:c4:29:a2:
         55:bf:aa:46:eb:64:5b:68:65:45:04:36:d0:b4:1d:65:27:2a:
         fb:4b:37:d4:e5:69:1f:92:12:00:bb:aa:e1:30:6e:1e:9c:fc:
         bd:b3:1d:6e:71:2a:7d:6e:a0:b3:4f:df:fa:66:2e:2f:e3:43:
         90:92:7d:77:be:77:12:ef:26:a8:78:41:cf:06:d2:da:c0:e5:
         d9:16:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:31 2025 by rpki-client