Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/c4e19c46-1665-3ce1-9921-99462b0247f9.roa
File:                     c4e19c46-1665-3ce1-9921-99462b0247f9.roa (raw, json)
Hash identifier:          x2atcyTWFIt9oZHJaYOGFKmWZ7GHa1KXL/5H5oahBOE=
Subject key identifier:   C4:44:EF:3A:43:2B:0A:6E:1C:41:77:B5:2B:92:3C:E8:D4:2A:C2:0A
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F43285849D1651479BE2854ED208CDD20
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/c4e19c46-1665-3ce1-9921-99462b0247f9.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     8002
IP address blocks:        2001:458::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:14:79:be:28:54:ed:20:8c:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=58c5f2ee-de30-4a7e-82e3-5224be847fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:83:12:ed:e6:6d:67:0b:32:2e:45:ff:aa:
                    5b:8f:04:2e:de:ab:28:0f:39:09:b4:1a:ec:c3:e3:
                    57:fc:17:17:4d:be:58:01:42:78:3e:b9:fe:dc:8f:
                    0d:54:c7:23:73:ee:cb:c5:b5:fb:e8:9c:02:ce:26:
                    95:9e:32:c9:cc:84:5e:62:6d:32:58:39:7d:bb:6d:
                    58:60:cb:c4:ec:ee:77:2c:07:fd:d9:cd:52:5d:73:
                    e0:25:a8:f0:ab:dc:f3:24:b1:70:af:d4:b3:64:df:
                    c9:f8:1b:c6:c5:12:ea:4a:d4:10:d4:73:6a:95:bf:
                    ee:c7:53:6a:b5:ef:86:a7:05:54:9d:81:de:f7:2d:
                    3d:77:18:2a:13:6f:08:8b:39:d2:07:63:ff:51:90:
                    97:28:ee:d5:b7:9b:97:ae:31:24:44:3b:75:7e:db:
                    ae:11:00:47:3e:66:00:61:26:eb:96:63:ac:af:7e:
                    92:9a:8d:92:03:c8:e4:f3:f3:83:78:11:f4:71:35:
                    3d:f2:02:9f:60:6d:56:1f:c0:19:64:a4:e0:6d:8c:
                    af:82:0b:3b:0c:94:5e:8b:78:57:8c:e1:5b:aa:9b:
                    a0:5f:5a:ee:eb:94:cb:e5:28:1c:61:c5:9f:e7:6a:
                    0e:8f:44:98:68:f1:f3:04:b5:e5:0a:fe:36:cd:04:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:EF:3A:43:2B:0A:6E:1C:41:77:B5:2B:92:3C:E8:D4:2A:C2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/c4e19c46-1665-3ce1-9921-99462b0247f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:458::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a3:5d:11:49:14:8a:0f:f8:b8:4b:02:bd:5f:4d:a5:ad:55:
         39:ab:1c:5b:38:78:d0:ae:59:9b:bb:ad:fa:6b:d9:63:94:7e:
         17:89:df:0d:fd:81:31:84:c4:fe:31:14:ca:67:25:8c:d9:6b:
         2c:ec:e8:13:8f:c0:ff:51:1f:83:a4:0d:87:a6:63:3d:d7:c9:
         99:17:20:6c:ee:88:a0:53:91:e2:4d:32:dc:0c:80:ee:de:e5:
         c1:93:03:aa:82:f1:3f:0b:ed:76:f1:63:85:7c:da:60:c5:06:
         3d:ff:39:45:3d:27:0d:b9:68:db:3e:f2:c7:39:d0:95:70:27:
         81:19:f0:52:ba:01:df:53:ce:c7:97:5f:23:ba:e7:67:ce:ca:
         8f:ba:8c:48:ac:46:bb:43:f6:38:f1:c6:fc:89:30:4c:d6:9e:
         b2:b7:26:6a:12:e3:55:dc:98:6a:8e:e3:ac:ef:eb:d5:b5:e7:
         ea:3a:b7:1b:2b:c3:d5:24:34:37:1c:01:5c:06:3a:be:81:91:
         0f:8a:c7:7a:2f:c8:0d:4b:a9:e7:ac:6b:e3:68:09:05:74:66:
         6d:37:3a:65:e5:0a:6d:bb:1b:8e:69:05:0c:4b:85:37:80:aa:
         a5:9a:89:e6:8b:21:89:c6:86:03:fc:a2:38:ba:34:5a:a2:cc:
         22:81:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:21:59 2025 by rpki-client