Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa
File:                     d521baba-5d18-3439-8cfc-c5189dded826.roa (raw, json)
Hash identifier:          CKHQI9Bar63iprx8zOj6uspGrvVbfMsn3u7k8cW/Hfc=
Subject key identifier:   7A:1D:DE:5F:87:58:D0:23:8C:CA:5F:E5:82:8B:9E:B7:4B:5A:B7:5B
Certificate issuer:       /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial:       010D0C9F43285849E91FA86CD1C677073D517F00
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     11472
IP address blocks:        2605:8480::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a8:6c:d1:c6:77:07:3d:51:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=38c0941e-bff0-4edc-b807-26098cb55fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:e4:29:0c:8b:9c:79:f0:f9:91:c2:ad:84:
                    80:6f:9f:46:00:bb:79:1f:aa:2f:bb:89:e8:a6:10:
                    d6:44:44:30:e6:5b:da:b1:f8:8c:09:fc:14:55:a8:
                    33:e3:87:97:c9:89:9d:b4:17:04:d7:e5:b6:2b:89:
                    bf:d1:ea:3b:b4:8c:b9:cc:5a:e5:9a:a5:5f:a9:c2:
                    e0:12:2d:4a:55:6e:c0:f8:74:e3:e4:fb:13:43:a1:
                    70:51:c2:0c:d7:c6:33:16:30:b0:be:87:7c:5e:68:
                    a3:4e:53:e4:d7:f8:21:81:c6:c8:6c:4e:90:bb:77:
                    a3:33:85:a9:e6:00:3d:69:72:e6:b7:b3:72:85:63:
                    86:2d:7d:b0:09:2d:63:72:12:03:8d:fa:8e:a4:91:
                    59:4c:16:dc:66:16:b9:cf:f9:3c:f2:32:43:ec:9d:
                    57:0b:81:88:dc:7c:52:8f:5d:b1:a6:d0:6c:ad:6a:
                    ba:85:da:d5:63:72:69:3c:60:57:3d:7b:ab:b0:c0:
                    77:55:2d:de:03:1d:c0:90:5f:6d:25:bd:a1:8b:13:
                    93:88:3c:84:c8:36:d7:ac:2e:cb:d4:f5:8d:3b:7b:
                    14:b2:b1:fa:4f:4f:79:2b:d5:d3:f3:41:3e:12:d4:
                    43:2d:6a:b7:2a:d0:da:b6:c3:b5:8e:1d:a0:9f:c6:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1D:DE:5F:87:58:D0:23:8C:CA:5F:E5:82:8B:9E:B7:4B:5A:B7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl

            X509v3 Authority Key Identifier:
                keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c1:f5:a8:9c:b1:61:be:f3:47:23:d8:37:08:c5:e2:30:f5:
         5a:6a:f7:0f:0e:83:68:a7:35:fa:df:fa:16:93:16:dc:5d:ba:
         9a:73:4f:a0:6b:d7:6f:57:91:ba:3f:da:f7:9b:51:75:30:3a:
         72:82:a2:30:2e:57:e8:82:83:e1:39:d1:a6:00:5a:ff:cd:95:
         c3:3d:ed:b0:91:fe:79:ff:18:cf:0c:c0:1f:5a:a0:f6:c6:28:
         49:76:67:ad:44:8c:d0:e0:8d:0a:5b:05:f1:55:8d:e3:8d:e8:
         9a:ad:6a:19:eb:9a:16:b6:5d:74:a4:18:94:cc:ad:32:a4:1f:
         cc:f4:ac:bf:82:1a:d2:db:9b:cb:66:26:ab:7e:27:38:91:7b:
         4e:4d:ab:18:36:af:21:a6:ce:36:89:bd:1b:3d:36:54:86:12:
         65:27:7f:1d:01:1a:ad:38:5a:2f:c1:54:ac:f0:e0:11:72:65:
         3a:cd:55:42:4a:39:85:37:b0:88:79:30:92:ac:8e:bc:0c:6d:
         62:d4:4e:d6:28:51:e3:7a:7e:66:7a:0b:91:90:4a:a3:de:4e:
         ed:a6:37:88:e2:28:af:61:96:3c:70:2a:a3:01:8f:ca:3b:4a:
         bb:91:7e:a2:a3:42:15:f8:f2:48:e7:d2:1d:f2:ee:77:7c:c4:
         1f:00:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:26:26 2025 by rpki-client