Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
File:                     19707577-a550-35cc-9aa1-82013a93096f.roa (raw, json)
Hash identifier:          pexU6PC86pD3/LOp01Qcil6cnWOuuL3Egfmukv5DR3M=
Subject key identifier:   4C:A5:D5:06:14:A0:66:9C:98:56:03:F8:EA:CD:21:D9:25:FF:A1:CD
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F43285849B149EC31FE2C507E77CAEB80
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     14230
IP address blocks:        2001:49f8::/32 maxlen: 48
                          2604:9b00::/32 maxlen: 48
                          2604:ac40::/32 maxlen: 48
                          2607:fb20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ec:31:fe:2c:50:7e:77:ca:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=b9dc4e10-f1e7-4586-af44-5e14d2e9d9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:75:1d:a2:8a:a7:56:6c:bc:a2:89:22:50:
                    a4:e1:29:6f:af:82:80:9b:f7:25:99:3a:e6:00:f5:
                    91:7a:8c:06:37:1f:55:f4:63:fb:7d:02:ef:44:a9:
                    bf:ca:48:00:85:3a:e3:f8:97:6b:b7:b0:10:11:3a:
                    6f:66:44:80:61:cd:68:bb:fb:b4:a5:1a:70:9e:50:
                    d7:fb:44:02:34:ca:29:e6:d1:8d:f1:09:c4:c6:8a:
                    ea:59:56:af:e8:ad:1a:7d:87:4e:4a:01:ab:3f:b5:
                    dc:9f:64:45:4a:dc:0c:d7:2d:2f:a5:c5:e9:17:12:
                    fc:79:ad:09:cc:0a:d1:b2:56:2f:ab:56:98:26:bd:
                    c2:05:a1:d0:e1:b6:77:00:53:10:03:af:3f:f9:59:
                    00:2f:b2:7b:4e:e8:df:a7:24:96:5d:fb:0e:51:f3:
                    90:f6:2d:aa:1a:10:a6:71:59:a4:4d:2d:c7:5c:d3:
                    d0:f7:47:c0:1a:77:89:c5:fe:be:f6:93:38:9e:2f:
                    12:19:8b:ae:ee:50:88:48:d4:6a:80:56:69:02:95:
                    c1:db:27:51:04:24:3a:5a:f2:13:ef:f8:58:1b:c1:
                    30:8d:5d:34:ce:c6:ad:f0:98:a3:bd:88:a7:60:13:
                    75:c6:da:6f:1f:85:e5:26:49:f5:40:db:44:70:0e:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A5:D5:06:14:A0:66:9C:98:56:03:F8:EA:CD:21:D9:25:FF:A1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f8::/32
                  2604:9b00::/32
                  2604:ac40::/32
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0f:0d:ad:eb:cc:8d:dd:d6:10:c0:0a:9e:c6:f4:65:5f:93:
         32:13:f3:5e:81:ab:fb:72:de:2d:e3:cb:98:b2:e8:08:71:74:
         22:6b:2b:39:a0:ab:d3:e5:75:9a:9d:42:a8:43:6e:89:9a:ef:
         6a:b0:63:cb:7f:99:97:36:69:1e:fe:0d:8b:b6:bd:7a:5c:2b:
         34:b7:11:ba:0e:23:22:ba:7c:80:07:ca:59:a4:26:a8:87:d1:
         68:7e:71:cb:34:7f:7e:71:04:87:9b:86:67:c8:57:86:d4:02:
         d7:c0:20:a3:a6:90:b7:d2:ed:12:26:00:0e:e2:40:0f:86:db:
         a5:ca:29:92:0d:23:51:49:b1:c0:22:e3:d2:a1:3e:c6:3f:8e:
         62:79:da:f3:62:c8:c8:fb:3b:4c:5e:7c:9b:ef:8b:27:29:c6:
         61:52:52:18:91:a2:d8:53:f3:4e:0d:f8:2f:ee:4f:03:62:e7:
         fb:e7:be:2b:10:39:b2:80:6e:a7:24:ed:70:3a:d4:83:0b:56:
         3e:de:c4:1f:4e:93:af:7f:80:2e:86:f9:8a:94:60:e4:c1:37:
         19:f8:15:12:fd:89:75:5a:d7:7e:17:d5:7a:73:da:47:48:58:
         4e:92:2a:aa:cb:96:f7:06:7d:cf:59:ed:b1:5d:aa:8f:ba:04:
         da:b2:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:48:57 2025 by rpki-client