Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7cdb8f10-6a22-3a69-8c04-5145783a0e7d.roa
File:                     7cdb8f10-6a22-3a69-8c04-5145783a0e7d.roa (raw, json)
Hash identifier:          GqbAV9LMsT72+/ffZEbSryrroCLwZwAXRBo5/mxsMhc=
Subject key identifier:   56:BD:FC:F2:A4:B0:30:C2:D8:08:0C:75:79:3D:3E:6C:53:88:EF:FB
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F43285849EEB50287FFD84B8C079F5900
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7cdb8f10-6a22-3a69-8c04-5145783a0e7d.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     376
IP address blocks:        2001:510:c010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:02:87:ff:d8:4b:8c:07:9f:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=c7f30c87-78cc-4fe0-88a2-34acb73318ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:68:c8:90:b9:a8:e0:f8:86:c6:c5:97:58:
                    54:a4:f5:f0:c7:f5:da:b7:b2:5b:bd:19:8c:77:0c:
                    21:f9:c3:38:9f:d4:f4:11:7b:f4:64:f5:70:6e:8d:
                    c8:9c:6e:40:d6:99:9c:80:aa:d0:fa:bd:db:91:2e:
                    0f:81:ea:4a:bb:18:97:c7:02:11:3a:f3:8c:d7:f7:
                    af:80:14:25:27:d0:87:85:62:3e:af:74:a7:e8:72:
                    63:f3:76:ab:9d:a3:45:f2:ac:56:b9:ef:8f:a1:03:
                    ea:f3:96:ef:a0:e1:62:79:bb:80:1e:b2:e8:61:6d:
                    f4:c5:93:3b:65:de:1b:0b:17:2c:1b:1e:a7:05:11:
                    f8:51:64:e4:d7:7b:f6:39:8a:14:a2:70:a8:f1:33:
                    fe:67:56:23:1d:0e:eb:f3:76:0a:df:bd:11:1a:41:
                    1d:d4:40:88:00:04:8b:a8:05:d7:66:54:e2:57:e2:
                    d2:81:b6:65:ff:7a:f9:cc:ce:a6:1a:83:48:00:51:
                    c7:76:13:24:c4:c9:64:36:da:c5:ce:ec:11:f9:3d:
                    13:c6:95:83:fc:37:5b:86:82:ef:f5:f1:63:64:af:
                    9b:3a:61:ba:8a:c0:6c:5a:0d:93:5f:4f:d0:20:09:
                    cb:3d:e7:82:18:2d:89:94:2f:88:b6:33:7c:4c:6b:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:FC:F2:A4:B0:30:C2:D8:08:0C:75:79:3D:3E:6C:53:88:EF:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/7cdb8f10-6a22-3a69-8c04-5145783a0e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:c010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:60:32:fd:ad:b4:b4:f7:cb:5e:56:52:ed:62:20:1d:b3:
         d1:a1:63:34:79:ac:05:19:37:c4:8d:22:bf:f2:d7:6c:b6:6b:
         64:54:9e:ec:56:f8:eb:c5:13:3e:63:9c:77:43:c0:25:8f:28:
         80:8a:ee:2b:56:04:cd:9b:b4:52:76:85:f6:41:dd:fb:62:4c:
         c9:03:8e:53:a9:87:95:24:c6:cc:68:a9:7b:b5:e4:8d:b5:ff:
         ff:67:b2:1d:ee:f1:d8:a9:8d:49:0e:15:a3:95:5c:5d:4f:34:
         22:b6:9e:d6:b5:65:55:de:d2:3d:77:c7:00:3d:ef:de:c0:92:
         48:b3:5e:fe:f7:f1:b6:40:14:74:93:e6:1e:10:59:bd:70:93:
         71:92:1f:27:0f:eb:3c:41:8d:a5:ea:17:4f:74:99:fe:57:9b:
         44:5b:73:38:b4:9d:8a:86:76:13:d6:56:1c:79:a9:fa:9d:d0:
         2b:31:75:cc:9e:c3:dd:64:b1:0d:ec:2d:67:91:96:1c:e6:a0:
         21:49:ae:17:64:26:84:d3:0d:98:3e:ab:ac:9c:17:29:29:7d:
         80:6d:29:a3:b3:98:d8:d9:a0:c8:5b:b2:e7:84:d0:38:d0:d9:
         d5:a1:f2:cb:a5:d5:c1:91:3d:d4:9e:fc:8f:d6:fa:7a:86:6e:
         0d:d9:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:49:31 2025 by rpki-client