Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa
File:                     f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa (raw, json)
Hash identifier:          V5xlf5JGDQCtCg1gAGuwuUXkz429S63mZWSQz0luEK0=
Subject key identifier:   53:E4:B4:40:C9:0D:46:D7:D1:46:48:5A:C2:3C:21:71:7D:DF:91:64
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F43285849EEB4FDF02A1C03FBCEC0D980
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     376
IP address blocks:        2001:510:302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:fd:f0:2a:1c:03:fb:ce:c0:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=b1085e6e-1933-4a07-afda-b92f0a08d66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:f9:93:3e:33:4b:1f:93:20:49:4c:5d:73:
                    8b:98:2e:90:c6:42:87:c7:aa:30:90:04:9e:e2:66:
                    99:c3:da:34:f0:19:6c:b5:65:96:4f:67:5b:6d:59:
                    06:09:aa:26:f9:02:ec:af:ce:a5:cc:7d:df:af:18:
                    4a:9f:17:26:37:c0:4b:de:97:3c:ab:06:d5:d7:00:
                    38:7d:86:1e:6d:81:eb:ac:89:9a:c6:b9:15:be:57:
                    d5:66:4f:01:aa:62:fc:3d:40:1d:bc:28:3a:fa:75:
                    a4:b6:6d:98:0c:64:4d:f9:7a:e7:a1:57:0b:7c:9c:
                    44:c5:6e:76:54:98:5a:76:8c:31:17:d4:e1:54:2f:
                    41:bd:46:61:de:7a:af:da:35:09:ea:fe:8b:f1:ee:
                    53:22:2b:ed:56:27:84:3e:62:9e:de:1e:ad:e8:bf:
                    3f:c2:88:ce:05:3d:92:a9:5c:88:31:98:8f:24:a7:
                    16:62:94:e6:23:3a:c8:10:25:9f:0f:40:b9:48:a3:
                    88:ae:96:6b:52:7d:e0:fd:75:85:0d:4e:67:3f:aa:
                    af:d6:3b:0c:e2:62:a7:ba:5f:ce:0e:a1:d2:33:a1:
                    40:c8:45:5d:78:42:34:6b:a5:ed:f9:29:2d:a8:b9:
                    e3:2e:74:fd:72:68:3b:e0:c6:7a:82:90:a5:34:b4:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:B4:40:C9:0D:46:D7:D1:46:48:5A:C2:3C:21:71:7D:DF:91:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:302::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:df:46:30:6e:aa:78:38:fe:50:4a:32:af:3d:92:40:b6:cd:
         19:55:f8:e1:9f:57:a5:7c:09:ba:9a:b5:85:92:82:33:9b:d8:
         c2:e2:a3:c2:4e:1a:a2:ec:7c:5e:fb:2e:0b:9d:4b:cc:da:85:
         0b:9f:a9:5a:63:cd:4b:cd:95:22:da:24:07:c0:4c:fc:68:91:
         72:ff:80:59:e6:19:3f:da:bf:f9:08:ef:17:b4:82:29:12:ee:
         43:6a:f6:18:15:78:38:d7:34:50:b6:c7:f1:8b:44:77:e0:d4:
         29:b1:b0:2a:08:0e:87:95:84:02:ee:9e:ad:fc:10:96:c0:f9:
         30:1f:e1:6b:3d:fc:c2:9e:9d:fc:c8:02:84:39:13:30:67:94:
         df:f3:ef:74:79:28:1e:a7:a6:e3:88:3a:31:fb:e7:63:e1:17:
         ca:8b:77:54:8d:fb:88:97:bd:aa:8f:19:64:23:e2:3e:4a:78:
         a8:62:a1:50:f8:77:1c:38:0a:d5:01:10:06:28:fd:e4:aa:53:
         68:9a:f9:2f:4a:10:ff:a7:f6:58:83:e2:b3:9d:8a:45:be:48:
         db:c2:c2:d7:a7:80:72:93:0a:ba:c7:8f:1d:08:6d:44:b7:65:
         ea:27:b7:5a:63:93:08:8e:c8:70:48:f1:00:78:35:ae:ee:fa:
         3d:3d:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:23:54 2025 by rpki-client