Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/485238eb-befd-3155-b2f1-2742ca094bfa.roa
File:                     485238eb-befd-3155-b2f1-2742ca094bfa.roa (raw, json)
Hash identifier:          RLCXN6D9eyPcPzvuoCr+cMHizk1u8TCDsQ6wWhQToao=
Subject key identifier:   4E:DE:A4:C4:61:8B:1B:A1:48:23:9B:58:02:AE:7B:B6:4B:8D:6B:88
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F43285849DF95E04B29879D71ADC22600
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/485238eb-befd-3155-b2f1-2742ca094bfa.roa
Signing time:             Fri 16 May 2025 15:01:04 +0000
ROA not before:           Fri 16 May 2025 15:01:04 +0000
ROA not after:            Thu 14 Aug 2025 15:01:04 +0000
asID:                     15290
IP address blocks:        2620:a0:200e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:95:e0:4b:29:87:9d:71:ad:c2:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: May 16 15:01:04 2025 GMT
            Not After : Aug 14 15:01:04 2025 GMT
        Subject: CN=97716b78-28ff-40dd-b7ad-771c36ddcdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:20:44:9f:55:43:b6:e4:57:19:41:20:2a:3a:
                    5e:ac:46:17:61:28:ca:8f:c0:02:7f:13:7d:fa:7a:
                    27:47:c1:25:d0:2f:df:9f:32:a7:17:f5:6d:92:6e:
                    04:4d:e5:4f:cc:e7:14:e5:d3:5a:57:ea:e0:99:f1:
                    65:be:2a:46:d0:56:80:da:74:59:51:0a:8d:1d:f2:
                    ce:6f:eb:51:61:8e:24:aa:a7:a8:cc:a5:0d:d5:21:
                    c9:2b:26:30:8b:b4:a5:96:17:34:48:02:57:eb:5c:
                    06:18:2e:a5:b0:6a:27:ee:63:19:49:ad:a0:5c:65:
                    82:17:f2:5a:98:65:44:25:24:f3:86:07:d7:89:44:
                    77:56:b5:71:1d:98:78:f0:cc:e4:96:a4:97:66:e4:
                    96:9e:e5:9c:47:00:ea:44:dd:e8:34:11:eb:1d:7b:
                    f3:6e:ce:be:4f:83:0e:0e:10:d4:d7:f2:16:2b:90:
                    a8:71:3e:77:80:06:74:d6:d2:0f:28:f8:86:a4:30:
                    91:00:b2:d9:24:62:3a:22:5e:0a:28:17:81:9b:fd:
                    52:44:25:09:11:c2:e9:20:5c:2f:03:f8:32:1b:43:
                    27:2a:dd:ad:78:2f:c2:0c:95:a8:69:17:08:d9:3a:
                    05:46:56:42:69:8e:f1:6b:89:c3:f4:47:51:f5:25:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:A4:C4:61:8B:1B:A1:48:23:9B:58:02:AE:7B:B6:4B:8D:6B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/485238eb-befd-3155-b2f1-2742ca094bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:bd:49:3d:17:83:5d:4c:80:b6:a5:33:34:89:d5:1c:e7:
         cc:a5:b3:5d:c3:1e:ec:ab:33:0b:bc:97:6a:fd:88:39:6e:a5:
         66:3a:83:36:14:b9:df:48:57:1a:61:1f:89:1f:c9:9a:49:40:
         07:14:57:af:e5:f9:e6:20:49:09:81:8a:92:47:da:06:98:e0:
         5e:17:8f:b7:c5:66:09:a0:69:b1:1c:db:30:f4:56:70:7a:89:
         ee:34:af:55:a2:c8:79:c6:21:90:f0:ea:23:04:5a:e4:55:8f:
         4a:ca:8b:74:f8:c2:21:43:ab:3a:9a:02:a2:a5:9e:a6:4e:55:
         48:49:d5:7b:68:76:ed:ce:9d:c6:be:e7:02:28:00:2c:fd:3c:
         4c:82:f4:76:1b:4d:c0:0f:bd:a1:c2:36:1f:0b:3b:5d:3e:39:
         6c:15:44:5b:78:29:2f:a8:ce:45:a7:8b:22:a1:b3:c2:c5:9b:
         9a:3a:fe:e3:d0:27:ba:b2:0a:82:fa:02:ed:0a:99:fc:7b:c0:
         45:0c:b6:f9:86:b7:d0:cc:fd:11:b0:b8:86:a7:00:d0:aa:ae:
         2a:d1:d2:b5:eb:dd:76:c0:77:82:46:1a:42:d7:88:15:5e:f4:
         8a:0f:8e:16:71:59:c3:05:5a:de:0f:da:b6:fc:ad:21:b7:c6:
         1b:c1:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:48:48 2025 by rpki-client