Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa
File:                     49bb57ad-c203-3730-8b14-98e563f4635e.roa (raw, json)
Hash identifier:          Pc03QovjowXGYOdycCTmXTSiVSxF16RcEAHG0HyruO4=
Subject key identifier:   5E:9A:08:46:86:D3:DB:8C:1B:50:2A:64:AB:DB:A1:76:FF:4C:8F:58
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584A0F925AE6593D95139475E6A0
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa
Signing time:             Mon 02 Jun 2025 19:32:46 +0000
ROA not before:           Mon 02 Jun 2025 19:32:46 +0000
ROA not after:            Sun 31 Aug 2025 19:32:46 +0000
asID:                     271
IP address blocks:        2607:f8f0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:92:5a:e6:59:3d:95:13:94:75:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun  2 19:32:46 2025 GMT
            Not After : Aug 31 19:32:46 2025 GMT
        Subject: CN=e29494be-a254-4618-bf16-e3230177640a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:84:f2:e6:0d:73:33:ca:ac:db:66:bf:70:
                    e5:50:29:a5:cc:42:83:0c:22:e3:09:72:c7:6e:c7:
                    83:14:23:a1:b7:8e:f8:4f:87:f1:e7:0a:b5:65:ed:
                    02:95:f6:2d:03:52:cc:32:4a:5e:9d:78:91:5d:ae:
                    b2:fa:ba:9c:e9:4c:c2:d7:e7:52:8d:70:89:ce:16:
                    cf:32:11:48:b5:e7:38:b7:7c:02:83:48:f5:19:33:
                    aa:df:2b:8f:4e:34:65:07:e2:e7:89:12:bd:4a:68:
                    ee:ee:4f:d2:b8:a0:56:52:22:71:04:4c:f1:0d:dd:
                    a9:88:fa:1d:21:ed:b7:42:0c:28:98:f1:5c:b6:59:
                    01:91:a0:98:b7:99:1f:82:44:8a:e8:36:e3:75:ee:
                    e1:aa:b7:d2:ad:bb:6a:a1:ae:6f:8f:a8:9b:64:62:
                    2f:77:3c:dd:7b:3c:f1:dd:eb:d8:eb:1b:17:db:fb:
                    71:9a:37:a8:89:cd:b0:3c:e4:1e:12:d3:2d:71:af:
                    9c:7b:e9:92:c3:31:96:0e:88:18:cf:5b:3c:ae:99:
                    dc:aa:08:b7:81:e9:9c:c4:30:9c:71:1d:9e:68:ae:
                    13:27:91:76:80:5f:79:23:6e:49:65:3b:48:1a:e6:
                    8f:45:88:3d:ff:b6:ea:69:98:64:99:32:88:36:5c:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9A:08:46:86:D3:DB:8C:1B:50:2A:64:AB:DB:A1:76:FF:4C:8F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:16:17:5a:cf:79:c6:69:df:de:15:31:6a:aa:4e:03:57:fe:
         1d:d3:c7:72:78:25:cc:4e:6a:fa:b3:5d:3c:a3:9e:2c:5b:8f:
         fb:56:ef:c8:72:97:87:a9:4e:23:bb:d7:cc:44:09:e4:ba:96:
         7b:6a:15:fa:d0:2f:d7:c3:27:8e:35:b3:fc:d5:44:5f:6a:df:
         5d:6e:3d:36:b6:e8:dc:3b:70:95:af:09:35:29:37:8a:72:fb:
         74:ab:95:e8:3e:c4:d7:2e:b1:a1:a8:8d:ed:d5:52:b6:3b:92:
         64:1f:c2:73:ed:63:9b:b3:98:8a:e4:8b:fe:ad:60:32:f4:23:
         3d:62:1c:ae:76:d7:04:75:47:04:8b:aa:b5:b0:1f:e0:56:90:
         cd:ce:51:f7:cc:c0:cb:a9:81:de:06:62:b6:25:6d:df:86:63:
         7f:bf:e0:73:ac:e1:20:b8:e4:d9:80:c0:9e:0f:06:24:3b:d1:
         39:02:27:65:bf:16:80:24:c7:ed:65:43:c1:3a:fa:c8:8f:6b:
         8f:1c:fb:d6:95:6f:c0:fc:a6:5f:23:0b:f5:76:e5:31:ef:cc:
         62:78:7d:32:fd:68:12:74:08:94:88:53:13:99:32:e6:ab:77:
         2a:d7:75:89:7b:ff:20:de:4b:e3:6c:6e:d2:28:1e:a2:f7:57:
         ca:3f:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:23 2025 by rpki-client