Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
File:                     ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa (raw, json)
Hash identifier:          VzHCLt/aAcXXd6cPQC1N8QKNYn7fqnDi0T4P3NVP188=
Subject key identifier:   24:13:83:58:A7:84:39:79:17:3A:64:65:4C:3D:EA:0F:63:46:78:33
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F43285849F17FD329218D74123AA5BB80
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2607:d540:fc0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d3:29:21:8d:74:12:3a:a5:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=0ad4d3de-7b26-4860-a543-418d9af0877d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:60:cf:de:f3:b0:4c:89:41:ef:4a:e1:25:
                    e8:3b:cb:1b:d8:c8:31:3b:e3:23:ab:01:64:b7:a4:
                    02:33:76:f2:a4:2c:e1:fa:ea:13:df:02:bc:f0:05:
                    ed:75:36:03:74:6e:87:a8:3c:6a:dd:2d:e0:7e:ea:
                    e1:ac:27:bd:bf:17:05:5b:2c:2a:13:1d:69:85:00:
                    28:0f:ea:03:05:44:39:b1:ba:86:58:9d:69:18:1b:
                    1c:9a:4d:3c:4c:2d:c2:bc:b3:2c:82:ca:4e:89:c5:
                    d0:4f:19:7d:67:cb:1c:31:fe:4a:8b:e6:e2:f3:3e:
                    8b:56:58:e5:a7:12:77:14:2d:fa:aa:2e:67:bc:b2:
                    4a:e2:20:b4:2f:5d:01:75:d8:93:70:44:93:f6:ea:
                    59:e8:61:f4:b7:52:30:54:23:8a:01:60:01:41:a5:
                    19:66:0a:91:72:2e:78:a4:16:46:b6:96:0b:eb:b6:
                    1d:5b:62:bd:ae:b9:71:bf:02:00:20:53:1a:e3:50:
                    6a:e6:0a:e8:52:ae:30:e5:7f:94:c8:68:0d:cf:bf:
                    0a:ae:c4:f0:e0:77:b3:71:f3:81:a7:68:0d:83:c4:
                    c4:e5:86:c2:e0:48:2f:9a:aa:c5:b1:e1:46:a7:d8:
                    39:af:cb:dd:56:a5:1e:63:36:4f:11:34:c1:1d:19:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:13:83:58:A7:84:39:79:17:3A:64:65:4C:3D:EA:0F:63:46:78:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:07:92:88:7b:e4:83:69:b2:37:3a:c8:94:ca:50:0f:37:c1:
         5e:cf:95:94:72:64:db:6b:00:be:b9:10:a5:69:44:c4:28:c4:
         d6:81:d1:f2:7f:04:1b:51:1a:d2:d6:55:b3:a4:00:05:8f:30:
         17:65:b0:f5:17:f8:ce:3d:b7:8b:26:cb:eb:ef:04:43:21:24:
         4f:04:a5:91:b6:73:8c:ad:8f:9a:38:ef:05:ab:67:dc:7b:92:
         e8:6d:c5:8a:6a:14:d9:26:5f:21:de:8b:ac:76:c0:c0:00:40:
         02:fc:f7:f3:1a:d7:fa:46:93:95:ec:9c:49:89:9f:40:44:83:
         0e:33:60:14:b3:6c:f8:ea:ed:8f:6c:f1:bc:f3:96:29:c7:15:
         fb:c9:a9:fe:8a:52:08:3d:3b:f4:97:8a:3f:c6:10:cb:4d:aa:
         e7:66:79:3f:62:c3:d6:0c:3b:91:9f:9e:56:bd:8b:a7:a8:69:
         6c:0d:2a:79:06:b1:95:23:ec:f8:fd:f3:f1:f1:0a:56:98:e6:
         38:4d:b6:3f:2b:00:0e:53:86:35:ba:14:d3:43:1d:e7:ca:f9:
         b5:16:c5:46:17:1b:36:9b:0c:f0:bd:a1:4d:f1:ad:21:d2:af:
         2c:86:4a:d6:bd:0b:65:a3:d2:4d:6b:50:9d:10:a4:f1:d7:9d:
         af:38:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:39 2025 by rpki-client