Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa
File:                     4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa (raw, json)
Hash identifier:          nOVvEmbQKn7ZlZ3VVB6DR7KIuJwrLP5RUb2Fr3k21Ug=
Subject key identifier:   1A:6D:62:0D:AE:32:3A:45:D5:F4:48:B8:30:53:73:58:02:61:D3:4B
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584ACF70FAFF7C3C3B024AFDDB60
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        2001:510:304::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fa:ff:7c:3c:3b:02:4a:fd:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=d068443a-fc6c-4080-9754-f3be003b1ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:c4:6d:c4:f0:52:ab:4e:16:67:f1:67:81:
                    84:fb:8d:e2:26:ec:23:bc:c8:61:cf:21:9e:40:25:
                    13:5e:69:5d:88:85:4e:13:5f:e9:2e:60:df:c7:5c:
                    8a:1b:44:db:98:86:18:4f:bd:48:fc:b8:a2:53:b6:
                    d0:81:c0:82:2d:5b:80:9c:e0:1d:f4:32:af:86:98:
                    bd:52:5a:ea:fb:29:e8:fa:66:07:40:23:88:53:45:
                    95:2e:be:92:99:b7:60:c8:6f:28:a6:11:2a:f2:3c:
                    56:ed:19:7b:9e:c9:95:95:72:e1:ab:4a:93:85:bb:
                    70:30:0a:c9:5b:b3:ba:48:32:96:78:5d:84:b5:f2:
                    b4:72:1a:05:e8:49:74:89:5e:55:12:5d:69:56:5f:
                    5c:91:85:b8:6e:e5:0b:03:75:da:db:63:97:fb:37:
                    83:4e:16:0b:7f:b9:ed:c0:5b:85:02:3d:0a:2b:f7:
                    ae:37:d0:41:93:cc:94:66:4a:95:af:43:12:29:7e:
                    85:f3:3a:66:7d:b9:e8:ee:22:70:0f:48:24:2b:5c:
                    a2:f7:cb:26:d9:c6:53:fe:b2:56:76:21:19:78:9f:
                    ec:41:31:60:bf:5b:f1:b9:4e:a9:ea:01:be:a5:d2:
                    e2:17:23:db:a7:b3:b5:30:b9:3a:42:8c:90:06:ce:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6D:62:0D:AE:32:3A:45:D5:F4:48:B8:30:53:73:58:02:61:D3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:304::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:5f:e5:37:a8:cb:b0:d4:ed:79:bf:a0:b7:52:d8:a6:50:
         f4:75:3a:ca:e4:f0:ef:1b:7f:63:50:25:55:31:c8:bb:81:2d:
         94:da:f5:6b:34:42:1c:17:3d:38:41:03:3f:a0:d2:42:d5:9f:
         5a:ae:de:59:f8:08:eb:5e:6a:c8:02:c7:74:cd:91:76:99:63:
         62:b6:ec:1f:1c:21:3d:63:f8:1c:7f:0d:ac:a6:ed:db:79:10:
         04:ee:c2:69:f1:4e:5d:84:95:cb:1a:22:90:4d:29:38:77:4b:
         a3:0c:94:46:c4:2d:86:cb:a5:b0:29:a2:27:ac:a2:2d:73:69:
         b5:c9:16:a8:52:ab:75:04:2f:55:58:4f:91:4b:cb:8b:7a:78:
         42:24:ab:83:13:b4:23:ab:9a:43:6d:a7:13:3c:ed:ce:6d:98:
         0f:60:ed:a6:0b:76:1c:29:da:07:68:3d:dd:7e:f5:af:8b:8a:
         f1:43:ed:90:33:17:7b:30:49:a4:e2:fa:3d:b7:a4:13:6d:79:
         d6:b8:fa:c5:b0:75:8c:7a:73:8e:a2:6e:39:d1:d3:f5:65:84:
         2a:bc:60:30:8c:60:24:e4:24:0e:3e:13:4e:83:1b:68:5c:9f:
         7f:ff:31:14:e3:1f:df:38:57:af:ca:e9:31:ca:e3:3c:aa:bf:
         72:39:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:51:10 2025 by rpki-client