Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
File:                     9d0b6b72-0245-3b5d-b7db-598515453663.roa (raw, json)
Hash identifier:          Sq6CJ2f/w6LdYH1vdP3VMlkP75L8BTU3ryMjuSlyWE4=
Subject key identifier:   85:AC:02:96:B4:72:E8:C5:14:73:40:56:FB:79:FA:69:59:14:59:E6
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F43285849912F2DEE82772B9EA93B96C0
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     237
IP address blocks:        2001:48a8:7800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2d:ee:82:77:2b:9e:a9:3b:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=9b6374e8-4ad5-42a4-b935-3b3c59ca733b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:db:bb:8a:56:1d:38:94:6f:22:84:1c:d8:
                    d7:6a:30:29:24:f6:a1:30:0e:7e:7a:73:ad:30:98:
                    d5:93:c8:69:de:8f:75:c1:98:b2:e7:8f:7f:66:bc:
                    73:1d:e2:f6:1e:bc:56:4f:61:4e:51:ee:d2:ba:65:
                    20:e0:d4:16:11:68:2d:b8:b5:01:c2:26:8b:33:6b:
                    99:35:75:85:46:4e:f2:82:5e:e7:82:0a:4f:52:de:
                    f6:40:c4:51:fb:62:99:f7:ae:79:88:0e:68:24:4b:
                    ae:6a:21:dd:ea:a2:f3:34:38:f5:87:9f:61:cb:64:
                    2b:2d:df:f2:47:40:c7:96:d7:3f:a7:44:c6:c4:fc:
                    93:fe:3e:0e:73:f4:cc:a2:c6:fb:c1:37:05:be:1f:
                    a9:b6:5e:79:4e:d6:93:65:dd:cf:00:1c:24:ff:24:
                    c4:50:b7:ac:c0:57:bd:8a:fa:17:f4:64:e3:a4:32:
                    72:93:a4:cb:d5:5b:c0:69:40:9d:7d:61:3c:e4:a4:
                    b9:64:d7:51:c4:8f:a4:21:10:d3:0c:06:9b:7e:a2:
                    26:02:44:66:0d:c2:b0:d5:53:7c:8c:de:6b:74:f9:
                    4f:12:06:88:b0:ec:a8:c8:30:18:46:75:03:87:ea:
                    be:23:a0:ff:e4:67:b6:98:0d:20:65:14:52:33:55:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AC:02:96:B4:72:E8:C5:14:73:40:56:FB:79:FA:69:59:14:59:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:7800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:f8:25:fb:95:2a:93:03:30:e8:34:b3:cc:c1:f9:cf:b3:
         8e:34:da:ec:6e:a2:86:bf:78:84:01:23:72:58:67:04:a9:9d:
         73:ab:1c:b9:e0:e8:51:73:a1:5a:ce:53:e7:0b:f6:32:f2:94:
         40:91:e4:84:97:96:a1:5c:59:74:78:0a:b6:71:21:88:30:df:
         fc:b9:05:2b:41:1c:c5:2c:88:d5:df:a4:aa:c9:a4:df:59:d2:
         6a:0d:2e:4e:10:07:0a:04:1c:17:f4:81:a3:09:53:87:b2:bf:
         67:4a:df:05:c4:a4:f8:d9:bd:6a:6c:49:24:f6:c0:ab:c7:45:
         e9:ae:f6:b3:37:9c:d3:70:eb:3c:de:a7:e5:8c:33:04:ef:f8:
         4c:61:e3:55:80:76:26:73:48:57:ca:cf:a3:fb:3f:53:da:da:
         3c:e1:74:02:74:b0:80:25:83:e2:88:a5:a2:b5:7d:8d:31:7b:
         3d:c9:99:b5:5b:26:9d:6f:89:cd:46:f6:cb:01:40:81:59:e0:
         4b:96:d8:37:ce:16:04:e0:0f:af:13:86:e3:dc:51:e0:e5:f3:
         e5:0e:c9:5f:15:56:20:48:99:5c:76:93:8e:ee:79:7e:db:77:
         47:e8:cd:4a:ad:00:e9:8e:0f:5e:7f:3c:ab:12:df:78:38:ee:
         b8:a1:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:59:02 2025 by rpki-client