Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/acaa6cac-78e5-391d-b573-5f87ae34c65e.roa
File:                     acaa6cac-78e5-391d-b573-5f87ae34c65e.roa (raw, json)
Hash identifier:          y3Y3JMbEKoNTTX9ZDqwKbVckkoZJe27B/Nz/H08shY8=
Subject key identifier:   A7:FA:B2:EA:B2:34:03:69:DB:F8:F8:DB:1C:AC:08:37:CF:6B:57:FC
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849B14A0E3CD43E1283CFA81580
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/acaa6cac-78e5-391d-b573-5f87ae34c65e.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        2001:4f8:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0e:3c:d4:3e:12:83:cf:a8:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=b2e8e227-a3fa-4e19-a132-00611af1a291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:90:51:2c:f4:ea:98:9f:b7:b4:1d:92:0e:
                    85:f7:3b:e3:b6:6e:cf:d6:46:ff:42:25:16:2c:ae:
                    00:10:cf:cd:34:0c:74:5b:87:24:24:d7:ab:cd:c2:
                    f8:ff:7d:98:c5:c5:85:e7:45:be:b6:18:74:95:b3:
                    a8:6a:37:e6:91:c1:df:ed:ab:7f:47:3a:e9:de:cf:
                    a6:a2:6b:fc:c6:d5:58:65:cb:bb:a8:27:3f:4d:da:
                    f6:a6:30:78:3e:9b:2c:aa:38:0c:3d:06:4b:e8:20:
                    0f:bd:56:3b:95:87:64:c8:06:f9:fb:f4:5b:15:3a:
                    27:e2:33:cc:07:c9:ed:28:fc:fb:16:ba:10:6e:f5:
                    23:b3:60:4c:90:37:84:50:e2:1e:b2:a1:42:3a:90:
                    ea:dd:43:94:2e:3f:df:ac:97:54:9a:84:a6:c3:da:
                    c8:dc:97:f4:e5:c4:f7:00:63:a8:4d:33:27:c7:16:
                    09:44:63:54:95:74:71:a9:bc:e6:88:a3:a8:35:65:
                    45:d4:69:96:94:86:ce:85:4f:06:0c:39:c5:67:39:
                    1a:73:31:1b:3c:f7:41:2e:d0:91:b2:46:bf:f8:8c:
                    c2:cc:ab:ec:c8:d3:b4:6b:db:e2:8f:81:1d:d7:b1:
                    2e:9a:b8:b9:40:ab:e5:ee:c3:2e:86:ae:e0:7a:32:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FA:B2:EA:B2:34:03:69:DB:F8:F8:DB:1C:AC:08:37:CF:6B:57:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/acaa6cac-78e5-391d-b573-5f87ae34c65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:b5:c8:30:a5:0a:25:64:fe:30:22:40:b7:ef:70:d7:fa:
         da:dc:40:c7:23:65:03:da:f3:5e:73:7a:9c:a2:1e:ca:e8:ca:
         18:f9:16:19:41:ac:0e:73:51:27:fc:10:d8:9b:06:47:25:d3:
         80:f9:1c:bf:ba:f6:11:04:ca:94:37:95:f2:31:db:f7:d0:6c:
         29:93:ee:77:e9:fe:ec:ec:6d:c6:f7:bf:bd:3f:0f:f6:d1:a8:
         2e:84:ce:0e:ca:41:f8:e4:51:bb:8e:52:cd:b3:a7:f5:11:45:
         d1:8d:e6:e5:05:db:28:52:0d:70:bb:b7:e1:37:b1:eb:5a:c0:
         bc:32:13:a7:44:08:68:76:e5:8d:a8:55:f6:84:43:2a:87:79:
         58:bb:de:b8:5a:9b:1c:79:75:e8:59:1c:f4:7a:89:1b:56:18:
         12:4f:58:bd:43:bd:0e:c7:44:e7:52:e2:65:f2:6e:e1:46:ac:
         3e:d4:d9:09:75:db:e8:23:46:69:f2:b4:20:ca:f3:98:56:74:
         eb:49:5b:14:4b:36:e8:56:f0:9b:08:fb:42:cc:4c:98:0a:8c:
         74:6f:02:82:f4:cd:70:a8:58:53:bf:b9:36:64:0b:f7:f0:ef:
         06:84:3e:f1:2a:7f:69:d3:49:08:35:87:10:70:5f:f6:98:27:
         98:f9:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:30:26 2025 by rpki-client