Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/ab147fd7-029c-3df4-8c58-9a64ca17cc5d.roa
File:                     ab147fd7-029c-3df4-8c58-9a64ca17cc5d.roa (raw, json)
Hash identifier:          sAo/9/dr+YH2kuKbooP4TgsfxPbfm7LbiMgsKz/8lBg=
Subject key identifier:   E7:48:C1:39:5A:89:C5:6E:61:80:F8:B3:D6:88:79:BF:9D:DC:09:6A
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584A18953DB6CE2279687FE9BF40
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/ab147fd7-029c-3df4-8c58-9a64ca17cc5d.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     376
IP address blocks:        2001:510:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:3d:b6:ce:22:79:68:7f:e9:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=35f1994f-bf98-4479-9b50-9049c76442fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:ef:01:dc:05:1f:7f:b4:38:c4:17:51:83:
                    99:f8:d3:ca:84:4a:ac:45:fa:82:3a:2f:b8:11:0a:
                    7c:8e:86:57:d2:16:7b:95:68:46:5d:b9:b2:34:fc:
                    1d:aa:a2:e2:30:f7:14:79:22:51:77:5d:96:55:8a:
                    3d:14:46:2c:26:a5:89:13:ec:a1:92:33:7c:ef:be:
                    a2:48:b0:e3:d2:01:c9:59:aa:fa:d3:48:d3:ff:fb:
                    73:d8:f6:c3:81:e6:eb:cc:7d:4a:49:4c:95:cd:07:
                    8a:80:16:ed:d0:2c:d6:f1:1f:f7:17:5b:54:56:20:
                    bd:09:5b:d1:09:33:36:e1:dc:2a:21:dc:a7:44:dd:
                    52:49:7e:d0:eb:01:04:93:88:88:5b:ac:8e:6f:59:
                    c8:5a:c6:b9:f7:89:d4:2c:83:1c:58:a8:6a:4f:33:
                    87:b1:b2:f0:a9:63:0f:4d:cf:85:70:15:22:fe:92:
                    20:be:ec:59:54:e1:fa:79:0e:08:87:a8:51:5b:30:
                    ca:4c:2c:b8:4e:ed:b3:af:95:9c:36:a1:67:88:93:
                    36:b3:a1:79:62:07:de:21:fc:bf:cd:38:2e:da:53:
                    86:b4:e6:47:8b:d8:dc:69:b9:9a:3e:72:17:75:17:
                    24:b1:3c:ec:c8:f3:0b:8d:30:be:a4:f7:f5:55:6f:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:48:C1:39:5A:89:C5:6E:61:80:F8:B3:D6:88:79:BF:9D:DC:09:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/ab147fd7-029c-3df4-8c58-9a64ca17cc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:105::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:28:5b:ec:e4:64:ef:37:0a:2e:79:c6:c8:8b:bd:d3:9d:30:
         2a:16:fa:c6:1f:cb:f7:7f:85:5f:7a:e7:86:08:2b:36:27:85:
         a3:17:15:6f:9c:eb:4f:5e:70:1b:ce:13:23:0b:aa:ef:54:34:
         96:bf:21:08:3a:7b:1b:87:3a:19:12:d9:d8:ef:02:4a:82:3f:
         aa:c9:71:0c:55:7b:85:d1:71:77:aa:85:76:8c:39:91:89:57:
         4b:71:91:a7:be:4a:e8:6d:ba:79:42:56:53:e9:cd:2c:f2:8e:
         6c:38:35:9f:36:ab:59:29:9d:ec:5d:d0:76:4e:b0:a1:d0:8b:
         50:e2:a5:6b:17:25:b6:2f:81:b1:45:1d:a9:34:a8:7f:e0:e8:
         52:cc:fe:fa:5e:24:fd:93:b3:5f:01:f8:5c:59:57:60:f9:04:
         cd:1d:f5:aa:40:19:16:82:a6:8b:9a:e6:a5:6c:93:1e:48:57:
         1a:d4:81:50:ba:51:97:1c:9d:fe:aa:a2:d9:ce:c4:41:03:83:
         ae:7c:11:a2:ec:d6:37:14:76:87:4e:47:80:72:6a:37:49:c4:
         c4:8c:8f:2d:d2:cf:7a:27:ee:40:30:92:7a:13:83:ec:09:1e:
         75:cf:a6:9d:e2:23:5b:48:d4:eb:d9:04:34:ab:a5:66:f2:1e:
         9d:5f:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:25:01 2025 by rpki-client