Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/483dc8f9-7915-347f-b63e-fb753177e883.roa
File:                     483dc8f9-7915-347f-b63e-fb753177e883.roa (raw, json)
Hash identifier:          KA4lpnUPCAna9aXeqsOWPI5Ds2Y3BaDRLJsjCx87fi8=
Subject key identifier:   ED:09:FA:71:72:89:C9:D8:21:75:0C:06:29:C3:84:DB:34:9A:C5:C4
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F43285849A24D1947D6D55229FA298140
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/483dc8f9-7915-347f-b63e-fb753177e883.roa
Signing time:             Thu 24 Apr 2025 16:10:07 +0000
ROA not before:           Thu 24 Apr 2025 16:10:07 +0000
ROA not after:            Wed 23 Jul 2025 16:10:07 +0000
asID:                     8987
IP address blocks:        2610:108:bf10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:4d:19:47:d6:d5:52:29:fa:29:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Apr 24 16:10:07 2025 GMT
            Not After : Jul 23 16:10:07 2025 GMT
        Subject: CN=445c37d9-df04-44af-a0f3-132200bbb33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:26:b5:87:12:af:d8:4b:75:2c:b0:11:d1:
                    78:a2:47:9c:a4:6a:dc:5c:05:d1:4b:2d:94:96:4f:
                    c5:4c:5e:2c:f8:6f:f1:d3:59:75:f9:a2:43:54:78:
                    c3:23:7b:11:a4:75:61:03:21:ac:f7:23:8e:0e:ae:
                    44:60:f6:eb:b1:d1:d3:47:f8:a8:8e:99:c1:f9:3d:
                    87:4a:5e:cc:ec:01:2c:65:4f:fd:fa:6c:9a:5f:e2:
                    9e:4d:77:24:7b:47:24:45:70:af:0d:4a:1e:f7:1f:
                    88:48:05:68:d6:4a:0f:e9:80:b4:aa:50:33:40:e0:
                    90:30:fe:7f:b2:d7:ad:87:2b:68:4b:7b:d4:8d:da:
                    53:61:4d:b3:49:7a:b3:f9:75:4b:0a:e1:f9:e6:de:
                    8d:9f:ca:3c:28:45:f1:ee:9d:f1:bb:53:45:5e:12:
                    52:fa:8c:17:92:24:fc:b8:71:ff:97:ce:31:a9:48:
                    da:4a:ab:b5:43:77:63:b8:c6:a9:90:69:48:7e:da:
                    35:86:8c:07:85:45:5c:2e:14:6c:44:df:bb:9e:81:
                    a3:d4:2c:80:a1:f2:8f:eb:0a:17:4b:67:a0:40:cf:
                    2d:c4:91:3f:ea:ee:e0:5a:8e:74:30:61:9a:7e:ee:
                    ec:8e:6a:b1:a9:e6:52:a3:21:09:8d:6a:14:23:b3:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:FA:71:72:89:C9:D8:21:75:0C:06:29:C3:84:DB:34:9A:C5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/483dc8f9-7915-347f-b63e-fb753177e883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:bf10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:00:aa:f7:47:82:80:ff:4f:c3:96:b6:69:16:c9:fe:da:5c:
         1a:04:b5:1e:2e:38:fe:05:c5:25:dd:9f:50:36:2e:8d:06:97:
         ac:05:b6:c9:08:e9:19:3c:90:bb:48:af:58:f5:6f:a2:02:8d:
         51:8e:b0:3c:c7:c9:16:23:6a:ac:9e:39:f7:0c:b5:5e:0d:af:
         94:66:cd:a9:18:b3:ff:17:e5:19:bf:e9:49:88:c7:26:83:11:
         3d:41:57:db:0a:40:58:05:31:a7:3a:a9:57:89:cd:12:c9:4c:
         79:52:da:00:70:d5:e3:b2:19:96:78:62:b1:42:70:36:eb:fd:
         a1:96:68:96:d0:59:ad:c0:73:2e:7a:c2:7d:6d:17:81:4b:94:
         86:51:9c:95:15:78:23:d8:2e:dd:1e:29:40:0f:3d:5a:34:a7:
         0b:b4:47:b5:87:e1:34:80:43:75:e2:05:c5:ce:a6:99:92:cd:
         21:f3:61:c7:b9:16:2f:f6:86:e8:1a:db:98:6b:ad:78:df:7c:
         43:2f:72:3c:2f:a6:a9:e2:05:17:ec:3d:66:30:a2:a1:78:26:
         6c:34:38:be:89:bf:c0:f9:94:89:93:db:01:68:f4:d4:de:e6:
         e2:b6:1e:fa:4c:6f:8a:10:e9:e0:a9:28:d6:16:38:af:c9:b7:
         72:6d:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:09 2025 by rpki-client