Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa
File:                     74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa (raw, json)
Hash identifier:          2VJ4I8imIO08nXB/t9PK3JVOpBxNzlQdLImSsRWgMio=
Subject key identifier:   CB:B2:A8:0D:95:AB:A4:F4:8C:7A:BF:33:8F:69:64:A3:1B:E1:B1:E5
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F43285849B6DF5113DCB826B6BF19F34C
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     396981
IP address blocks:        2620:8c:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:51:13:dc:b8:26:b6:bf:19:f3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=a56b329a-043d-4ff8-aa17-122982e3bec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:2c:91:c5:b8:c8:42:46:4e:b9:65:b7:c3:
                    ee:a3:35:e7:0a:32:b8:71:67:bb:6e:e9:8a:b8:16:
                    0d:c5:dd:0a:d7:de:33:5c:ce:63:59:d5:c0:2d:3f:
                    6e:8c:46:02:07:75:8d:d6:bb:31:31:e8:6f:e7:db:
                    5d:fb:6e:74:e4:05:f1:5f:cb:15:4d:79:16:95:bc:
                    84:3b:87:03:ec:1a:b2:12:2e:fe:46:e4:d9:55:a3:
                    3b:b6:74:ae:ae:b1:7b:7b:19:9e:30:eb:ce:de:1a:
                    b5:18:89:2d:47:ee:0c:b9:c3:ab:1b:44:87:27:d9:
                    5d:92:49:7b:60:ab:e7:77:19:6c:d4:cf:d3:4e:fe:
                    01:4b:7a:6f:04:2e:6e:da:9a:36:dd:a8:d4:7a:f4:
                    3d:35:ab:d9:e0:70:68:ee:6c:29:41:be:95:cf:cd:
                    6b:c7:96:2b:16:be:07:23:a9:76:02:bc:13:ec:66:
                    f9:ee:5e:eb:bc:99:8b:59:c7:6b:46:46:d2:89:3b:
                    3f:08:61:58:f7:84:6f:6f:27:ca:be:0f:35:f7:03:
                    24:24:d3:77:4c:0e:e6:72:56:f1:a8:5a:72:a9:2b:
                    6e:3b:04:e5:b4:fc:67:af:1f:cf:47:d6:ac:66:8d:
                    45:55:5f:e7:7d:3d:b5:a0:97:47:c5:a5:5b:f5:50:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:A8:0D:95:AB:A4:F4:8C:7A:BF:33:8F:69:64:A3:1B:E1:B1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8c:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:32:5f:1a:b8:22:28:81:0b:42:56:67:c9:08:6e:8d:fa:
         ee:e1:3d:0b:3e:da:58:33:d5:5b:2e:fd:93:22:ba:5a:c0:c7:
         1b:34:96:87:02:f7:e4:17:0a:c6:53:a4:bd:52:75:92:8f:8a:
         35:29:c2:8d:8b:42:de:57:d5:9b:0e:09:d7:f9:16:d8:b5:07:
         b9:eb:30:e5:59:25:89:7f:8d:95:15:7c:5f:38:e2:4d:61:06:
         15:91:f8:47:72:75:c8:7c:dd:32:09:a8:3a:3c:10:ed:fe:49:
         39:6a:ce:33:5e:e0:6f:f0:17:9e:3c:cb:69:29:a4:3b:59:df:
         eb:c8:94:12:25:01:69:e8:d4:38:0b:d9:82:8a:f8:9a:43:3a:
         25:7c:ad:7e:89:8f:8d:7f:5f:4b:56:fe:ec:1f:7f:d4:f5:14:
         f2:42:6b:45:7d:21:94:c5:a4:33:f4:b8:48:e1:08:2b:fd:9f:
         30:dd:6c:b4:cf:94:c7:08:c9:ff:44:94:ed:39:e1:ba:ab:fc:
         fa:2e:31:05:5f:ca:66:09:0f:f1:ab:19:77:20:ce:77:06:b4:
         75:94:5a:07:59:01:36:c0:09:10:18:94:77:6c:c3:46:45:8b:
         a0:34:d4:85:30:51:ab:41:f5:9f:53:3e:26:6c:0b:bf:90:12:
         c7:9f:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:41:43 2025 by rpki-client