Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa
File:                     d55e0fe8-e623-358e-8724-18bd483855d9.roa (raw, json)
Hash identifier:          EG2jnwTbtxRUssAnuM2ApjoW+/o1MA9aP90/DN7pGno=
Subject key identifier:   34:AE:8C:A1:03:DF:FA:5F:08:AF:D7:D7:7B:8E:F1:56:86:34:03:9D
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F4328584A189544C2F3EB8BCFD0846780
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2620:133:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:44:c2:f3:eb:8b:cf:d0:84:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=cda34161-63ba-4d3c-b00e-0120daefef78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:89:5d:25:e2:d0:e0:6d:4a:32:22:95:40:
                    81:18:f7:83:5c:cd:86:6c:85:0a:ef:05:bf:c5:56:
                    49:fc:7f:02:28:13:4f:ba:28:4d:26:45:d6:84:f6:
                    b2:44:1e:7b:ac:5c:59:81:df:6c:62:80:df:ae:fa:
                    65:f0:30:01:28:e3:8b:96:39:6f:04:cc:df:e5:86:
                    df:05:8f:16:fb:0b:dc:d6:14:70:0b:75:1b:82:d0:
                    a8:39:c5:48:80:39:3e:42:4f:81:17:f6:c3:48:8c:
                    f7:cb:d3:66:22:ee:a5:ff:db:75:1d:47:08:f9:58:
                    d3:43:b0:8b:28:a8:26:e7:9a:12:12:74:39:d4:03:
                    e0:9c:23:2f:1f:0b:71:57:d3:1c:9a:53:78:60:bf:
                    cb:7b:76:4a:d6:b5:34:88:bb:de:0b:28:77:a3:05:
                    03:7b:8a:3b:41:f4:21:a4:51:78:ec:2e:47:47:e5:
                    d4:a7:26:53:d6:2f:1d:f5:ea:c9:bc:37:28:b2:0b:
                    08:ec:47:a6:43:82:cd:93:b4:40:c2:d1:86:26:6b:
                    32:3e:b9:81:90:91:c6:a7:08:11:26:58:76:d0:19:
                    42:32:03:a4:32:31:d5:a9:f4:be:8b:21:0e:f7:75:
                    b9:43:a3:5c:62:f8:cb:20:63:96:58:29:c6:8a:81:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AE:8C:A1:03:DF:FA:5F:08:AF:D7:D7:7B:8E:F1:56:86:34:03:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:133:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:22:08:33:00:0b:3c:d7:5d:26:b5:27:8d:fe:b0:ac:ab:14:
         a5:fc:b2:6f:61:ea:26:ce:79:66:74:5b:8f:99:7d:3e:1e:ef:
         35:cf:bb:46:e7:cd:6b:9c:97:50:6e:1b:53:71:2b:3d:13:24:
         14:24:02:36:cd:7a:2e:a0:48:bb:32:57:cb:78:9d:51:18:b7:
         e1:78:13:cc:54:c5:5b:d4:61:2d:54:6f:20:f3:84:82:97:3f:
         49:39:a8:0e:62:d4:75:0d:59:86:4f:12:5f:12:01:71:0d:3f:
         c0:c1:78:9a:3a:51:b0:fd:83:3c:92:fe:23:ce:84:52:55:3e:
         c7:90:12:c6:95:f0:56:23:3d:24:8b:3f:c8:a9:2d:58:4c:46:
         24:22:83:17:71:b1:75:7d:ad:22:49:51:20:e8:0f:dd:b7:e0:
         2d:d4:a1:30:11:1d:7d:36:dd:89:d7:7d:a9:99:0c:f1:40:d1:
         02:71:1c:d6:4d:77:e2:82:1c:2d:62:43:0a:1f:e3:2a:f4:a1:
         8b:35:12:8a:bf:19:70:26:55:16:c2:4a:ad:fd:7e:2f:e2:e3:
         85:82:94:46:47:34:39:73:68:0d:da:fb:7f:3b:a2:5e:9c:ab:
         e9:33:e8:5e:64:e8:d4:f3:3b:5f:22:2c:76:7e:13:7f:1f:a3:
         6f:e0:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:39:39 2025 by rpki-client