Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
File:                     9d0b6b72-0245-3b5d-b7db-598515453663.roa (raw, json)
Hash identifier:          Tx6cQ2eordaq0s29/IsrEFL1z1enjRfCdJRTOCCS1Uo=
Subject key identifier:   F1:20:FD:18:A5:95:E8:3B:4D:E9:8D:3C:82:4D:D8:41:C9:B9:23:B8
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F4328584A7085F348212B6EC4B6B6CE40
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     237
IP address blocks:        2001:48a8:7800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f3:48:21:2b:6e:c4:b6:b6:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=b489cfea-29a7-4db7-b0fb-e6301f9c7586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:83:7b:21:e8:99:17:a3:8e:7a:fc:7e:3e:
                    79:e6:05:1c:a4:ad:24:3a:73:8d:49:a4:04:2a:bf:
                    fd:34:ab:84:d4:48:3b:81:8e:7b:96:00:0a:50:54:
                    45:56:8a:30:e5:51:be:6c:c3:e4:cd:01:2b:9c:22:
                    50:c7:1c:ed:27:f3:e2:d6:d9:cb:87:40:cd:df:3c:
                    5c:02:8b:d1:4d:5a:c3:71:84:90:e3:38:95:eb:b2:
                    20:36:7d:b8:11:d1:11:2e:5f:44:65:5e:8f:51:f3:
                    44:10:5c:ec:78:dc:9e:76:20:af:b7:4d:b6:58:e5:
                    6c:01:55:ca:3d:63:7e:6c:7a:a6:97:cf:ea:fb:27:
                    66:11:e4:cf:9e:91:a9:e3:8e:90:9c:98:bd:d5:e6:
                    97:b8:f4:be:96:03:31:14:c1:47:d4:81:99:d6:d9:
                    50:36:80:ee:0c:52:13:73:75:f7:14:cc:aa:71:d7:
                    28:3f:b8:e3:67:82:ce:98:b9:e1:03:5f:10:87:07:
                    83:4b:6b:6f:3e:46:4f:79:59:c6:f6:a3:4a:cf:1e:
                    61:11:55:6e:f2:dc:8e:06:d8:23:bb:c7:e8:9d:ed:
                    76:f1:ce:d1:ae:bf:a0:d1:9c:03:90:d3:a9:ae:89:
                    8c:fc:e1:74:6f:47:50:51:76:cd:4c:f9:be:14:37:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:FD:18:A5:95:E8:3B:4D:E9:8D:3C:82:4D:D8:41:C9:B9:23:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:7800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:12:71:06:8e:ce:49:44:46:64:b5:0c:a4:e3:aa:fc:85:29:
         c2:c4:be:d4:94:cb:ff:31:90:de:92:3a:41:2e:3c:7e:ca:89:
         8b:1f:be:e7:0c:46:aa:a6:21:2d:61:2d:2f:44:ab:8a:10:15:
         05:77:f5:09:87:ba:bc:6f:b5:41:de:02:e1:f2:f5:bf:44:3d:
         7d:ce:e3:ec:82:be:f4:4a:3f:26:87:6b:95:f6:cf:7e:b8:12:
         3a:6e:2f:e7:60:04:01:7b:75:b0:a6:15:67:0f:b5:ac:c2:ab:
         b2:a4:59:02:6f:49:f6:f6:d5:53:75:02:35:6e:0a:93:22:52:
         04:ad:1c:f7:62:22:95:65:7a:49:65:96:57:38:62:93:68:bb:
         c8:bc:01:ed:b6:cf:78:e8:96:7f:aa:e1:d8:e6:4d:ea:cc:2a:
         a2:cd:0a:3d:a2:8f:68:49:3c:99:94:0c:f5:1c:c5:cf:5d:91:
         0a:ac:6f:1d:d3:44:2d:4a:10:85:e0:52:c9:51:32:3b:d9:44:
         16:74:ea:76:2a:c1:0e:72:ae:32:ab:b1:f1:6c:07:00:a9:53:
         b9:5e:d0:3f:0f:1e:eb:48:fa:07:a7:f1:8e:d6:c8:10:b6:0b:
         10:25:30:42:c8:fd:db:c5:53:93:89:35:eb:70:39:ff:ea:30:
         61:3c:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:44 2025 by rpki-client