Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa
File:                     9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa (raw, json)
Hash identifier:          L6lFCr6yqLGm8EL//I9CR9Tl+IwIPWhWt7YVYobupO8=
Subject key identifier:   1A:DE:1A:F5:97:E1:BA:AA:71:45:D1:56:86:38:75:FB:25:2D:28:AD
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F43285849C20A1B298535D2F8702B2948
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     149020
IP address blocks:        2602:fa08:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1b:29:85:35:d2:f8:70:2b:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=bd975cc9-e96f-4ae0-9215-d2494a295104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:74:a2:d4:41:71:75:44:b9:fb:be:75:e5:
                    31:a3:1f:0e:f8:55:6d:25:9a:10:13:7c:a8:aa:12:
                    c2:bb:01:24:a2:99:b8:f7:d9:33:86:9b:b9:ad:0e:
                    72:fc:8f:27:ff:b8:81:06:48:e2:7a:d0:59:61:23:
                    8d:cd:89:83:a8:f1:1f:90:d6:eb:74:72:28:57:19:
                    4f:8b:23:da:f5:e5:a7:2d:58:bd:8b:01:90:89:79:
                    cf:05:1a:7d:63:be:b1:3f:40:39:0d:0d:32:33:20:
                    3f:b8:b2:92:51:41:e3:b4:d4:33:4b:2c:ea:c8:94:
                    4a:93:ed:ca:ec:24:c6:a0:c6:ec:73:34:c2:43:27:
                    f6:fd:ae:01:6c:72:03:25:f2:97:ba:27:d0:a8:30:
                    55:ba:6d:7b:a3:00:96:59:cb:a8:99:c2:4b:f9:54:
                    6a:09:27:57:97:9a:a3:51:be:66:76:b6:ef:4e:21:
                    36:37:bf:85:78:7b:07:f1:ec:0a:a1:88:80:ba:35:
                    6b:6f:bc:37:72:ef:03:53:7a:c3:ec:cf:9c:9e:2b:
                    60:6c:e8:0f:9a:56:9c:d7:af:57:65:b1:07:b6:d6:
                    f3:90:d2:d0:da:a3:73:5b:7d:98:ca:33:5c:82:68:
                    c7:b9:44:4e:db:ee:2e:f3:f6:8a:38:5b:5b:c0:fb:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DE:1A:F5:97:E1:BA:AA:71:45:D1:56:86:38:75:FB:25:2D:28:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:97:09:60:4a:72:6b:1d:86:a8:30:d1:a4:6d:65:d5:d3:df:
         79:c7:2b:cf:bd:cf:59:89:7e:92:96:15:1c:21:bd:9b:86:60:
         62:77:9a:53:38:fb:5d:14:4f:3a:c0:91:88:94:dc:00:b9:fa:
         f7:64:d1:79:ab:ed:8d:ae:87:8b:17:85:61:8c:b6:89:ce:06:
         7d:98:f0:77:18:9b:9b:b9:47:0b:b9:d7:08:14:f9:dc:0d:1c:
         79:f1:4d:a5:4f:61:2a:68:f5:de:b9:6d:be:8c:a6:8d:70:62:
         4e:5a:01:38:51:70:8d:fb:54:34:f7:74:8b:bc:d2:9f:2b:a9:
         41:68:4a:84:fb:05:27:4b:e3:09:79:31:97:46:bc:7f:23:88:
         8d:37:0a:59:0c:05:1d:55:45:18:f4:d4:59:dd:b6:2f:9b:14:
         b2:ce:29:ca:80:67:f6:d5:0b:45:0b:0e:52:87:84:0c:68:55:
         b7:a3:bd:ef:50:e8:00:4f:d9:11:78:c5:25:8a:aa:5b:5f:9d:
         f8:97:84:85:e8:3c:5c:b3:00:1c:9f:b3:fb:cd:2c:d0:36:75:
         93:73:31:bf:bb:f1:49:c3:7b:0e:7a:9c:e0:0a:fa:99:08:5a:
         82:2f:31:7d:09:cc:91:43:a3:c4:2a:ae:34:13:ad:07:43:94:
         2a:20:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:26:27 2025 by rpki-client