Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa
File:                     9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa (raw, json)
Hash identifier:          PGrOsBQkeerWQ2lnJss0Tvfwbv47ReBAoE1aYDxcBkM=
Subject key identifier:   6C:16:40:E9:F8:C7:35:00:1F:33:EC:B0:95:E5:8D:32:B6:B6:BF:61
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F43285849B57A0BE29A275D639C944E40
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     393732
IP address blocks:        2620:11d:500c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:0b:e2:9a:27:5d:63:9c:94:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=4f5224bd-3152-4294-86c1-b150e033c7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:88:77:3e:f2:7b:ec:0c:3b:5f:1c:5f:9e:
                    fe:d1:35:65:00:ec:d1:3c:53:1b:41:4d:e3:28:e7:
                    e5:1f:59:c2:7f:ba:7c:68:ad:47:aa:1d:7f:c1:1e:
                    a6:ba:0a:ce:ba:7d:06:25:e0:26:b4:15:83:d3:08:
                    dc:94:16:80:16:1c:30:25:e6:30:55:89:fe:e1:6d:
                    f1:e8:f7:61:47:5f:d2:d1:2c:17:fa:67:21:86:e8:
                    35:d3:f1:bf:39:17:67:13:1d:8f:31:34:a0:40:75:
                    88:fe:13:8c:1c:89:cf:e2:46:ca:8d:5f:a0:0b:e1:
                    27:3f:dc:f0:69:1e:05:32:52:b4:5b:59:c6:07:a4:
                    2e:7c:2e:38:28:1d:1e:2b:9a:b4:af:3d:14:3d:2d:
                    df:ae:4a:a2:04:07:6d:fe:1c:8a:97:e4:57:ae:7e:
                    14:ba:e5:76:d0:ca:d4:ed:ba:08:23:84:89:24:e7:
                    e6:40:e0:e0:63:f1:ac:c8:47:16:0d:7e:0e:da:64:
                    be:37:35:17:7d:b2:a5:cd:b5:e0:e1:fc:39:40:1e:
                    f5:cf:5f:92:7a:6b:3d:6f:73:27:86:42:d6:35:39:
                    ab:02:85:e0:cf:51:52:93:c9:b4:77:3d:3c:68:57:
                    f3:c8:f0:86:94:13:2e:43:52:e9:d1:86:8f:83:95:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:16:40:E9:F8:C7:35:00:1F:33:EC:B0:95:E5:8D:32:B6:B6:BF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11d:500c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:74:8a:2b:4d:0f:16:ce:bb:94:04:4d:2b:14:db:96:e3:
         09:3a:82:0c:61:cd:1d:ca:8f:e4:a4:d4:76:53:5e:a4:63:47:
         9c:40:6c:a0:3a:c5:3d:31:62:e9:07:d9:fe:6b:21:21:36:f4:
         e6:ce:fd:33:14:2d:7a:f5:ed:cb:d6:af:77:4a:06:01:e0:5c:
         d2:26:1b:f3:7e:81:7b:ee:e2:b9:a2:6b:ef:8c:6f:5c:2a:7d:
         9c:a3:6b:3d:b9:3e:0a:4f:01:18:c8:4c:de:fb:6b:ac:ce:4b:
         37:6a:d3:39:46:13:4d:c3:09:7e:c9:29:98:ea:e6:6e:a4:2b:
         7b:b4:76:3e:84:e1:2a:5a:d3:0b:ca:6a:1d:f3:fb:81:8e:55:
         97:6b:f8:2a:be:cd:72:b6:69:c2:a2:70:50:de:6c:ca:ed:6e:
         6e:55:ef:f7:ad:fd:ba:33:a5:db:0e:15:cd:e7:b0:8d:9c:4f:
         f9:2b:eb:65:62:75:d4:49:cc:c5:43:6b:00:e0:f3:f4:fe:a0:
         d2:65:47:85:92:92:a1:8d:c3:80:ec:8c:d5:28:3a:5f:6b:6b:
         7f:d4:d0:52:57:7e:a8:d3:84:16:1f:95:b7:06:5c:d4:a7:d4:
         6d:c3:59:f7:5f:16:23:09:21:77:76:89:f5:5d:15:c6:22:23:
         fa:4c:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:55 2025 by rpki-client