Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa
File:                     4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa (raw, json)
Hash identifier:          0wirI7210haLL3CQr/MnM73wIsilBAIg8epVUnkYQKM=
Subject key identifier:   77:6C:92:DE:94:E9:1B:2A:82:9F:21:5F:F9:8A:83:A9:5F:CB:CC:21
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F43285849EEB4FEAE6EB29614682B9B00
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     376
IP address blocks:        2001:510:304::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:fe:ae:6e:b2:96:14:68:2b:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=cdd7865e-627b-48ca-b42a-fe13872eeda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:86:91:15:4f:a9:6b:29:d7:f2:79:30:43:
                    c4:00:04:49:f3:49:50:e1:df:80:82:4e:3e:b0:b8:
                    91:d1:d2:35:4a:c9:01:a7:a7:ff:40:44:58:bd:2b:
                    f4:92:14:f1:b0:bb:e1:9e:a1:4b:0b:9e:bd:c0:c8:
                    58:0e:9b:05:f0:4e:7b:ff:26:dc:9d:f3:44:3e:77:
                    11:a9:16:30:b3:57:5b:d4:ad:31:77:c8:79:5d:80:
                    60:25:dc:0c:44:3a:a3:15:9d:3b:14:e0:ae:92:4f:
                    dc:18:5d:7e:f5:41:66:db:7c:aa:4d:4f:d4:ee:bb:
                    a4:92:72:93:66:cf:b1:34:f2:f8:fe:b8:dc:9e:7c:
                    aa:5f:70:cf:1a:6d:58:8a:fb:42:64:b9:60:39:2b:
                    0a:e8:7f:c5:31:a0:4a:a6:2e:47:44:c9:c6:8c:47:
                    1a:92:c1:94:0f:d5:2a:d4:0d:38:21:eb:2e:9c:51:
                    23:8c:ed:21:cf:fb:6f:e4:e8:d3:a6:af:19:b4:c8:
                    3a:ad:77:1f:1a:1e:3b:57:41:80:d5:e6:04:bc:9e:
                    dd:f9:87:e2:50:1a:63:b7:01:c5:a5:d7:6a:ab:cd:
                    e3:76:c4:a6:b5:70:d1:46:6a:16:53:0a:40:88:81:
                    42:60:2f:f0:2c:87:cb:8b:32:ff:16:08:34:77:fc:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:92:DE:94:E9:1B:2A:82:9F:21:5F:F9:8A:83:A9:5F:CB:CC:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/4458ad5c-7ca2-3eeb-9f93-ed2a8fb300ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:304::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:1b:94:27:44:81:18:dc:9f:0a:d7:5c:66:35:2c:28:25:
         2d:c8:5a:7c:6d:0a:8e:d5:32:e6:26:1f:a0:d2:fa:8d:c3:54:
         36:ab:35:f5:f1:0a:3e:c6:ab:d3:54:61:82:8f:b6:04:c6:92:
         22:d0:62:de:eb:d8:10:7e:19:7f:58:45:b7:08:79:ee:b1:17:
         e7:ab:f3:c1:e8:6a:9d:d4:74:7a:b1:50:e3:23:35:50:50:0b:
         71:2c:95:db:c1:c8:73:01:ea:a1:3a:fb:c2:e3:fe:23:ac:ee:
         17:c5:e4:eb:69:00:d3:77:be:ca:c6:8d:9b:3c:70:88:19:9f:
         9d:74:05:21:3e:9a:9c:48:fb:cd:a7:8b:0d:f0:5b:a6:33:bf:
         d4:1c:76:9c:80:ce:a3:1a:5e:1b:6d:23:48:a9:6e:4f:f6:ad:
         0b:c9:fb:b8:ec:c3:7c:74:6f:5c:71:fb:e3:5c:39:b4:6b:42:
         ff:a3:59:70:7f:fe:05:c2:ba:1c:2c:22:e0:9b:d7:5d:91:d0:
         81:1a:70:83:68:f9:13:84:a7:0a:2b:62:29:42:ec:0b:f8:30:
         c4:b6:92:d6:39:d7:f7:51:78:54:8c:1c:c9:01:0d:ee:92:16:
         b7:9c:d0:ff:08:85:e5:9b:5f:17:9d:1d:15:2f:2c:43:cf:e9:
         d2:58:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:35:22 2025 by rpki-client