Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ad9c33e3-f895-3023-b635-848c9cc54c08.roa
File:                     ad9c33e3-f895-3023-b635-848c9cc54c08.roa (raw, json)
Hash identifier:          PHyEEp4YP8e7BLv996blEyBa/ANAvOCC6FeVtp9F/Ho=
Subject key identifier:   70:B3:D4:AE:57:86:83:99:4F:5C:21:6A:BD:11:68:91:68:A8:F3:70
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F43285849DDF4DCA7AE44583C3534E000
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ad9c33e3-f895-3023-b635-848c9cc54c08.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        2601:1904:1140::/44 maxlen: 48
                          2601:1904:1180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:dc:a7:ae:44:58:3c:35:34:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=8207b3df-a9d3-4551-b3bf-458590ef8596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:4d:6f:73:8c:64:32:eb:a8:fd:8e:7b:f3:
                    08:b5:b6:a4:25:b0:db:15:ed:c0:b9:14:cc:ec:1a:
                    6b:26:3c:ff:91:6a:d0:82:4e:a6:62:46:09:3a:6f:
                    44:d7:91:1c:47:b1:d6:4c:1e:9b:7f:ab:b4:33:d9:
                    35:dc:9b:a5:99:f5:64:e2:66:32:7f:b2:87:f9:4f:
                    33:97:b8:e4:5c:a1:10:05:63:b6:a8:b5:97:5a:84:
                    cb:b7:30:1f:d9:91:a3:37:66:9f:4c:6b:92:5f:14:
                    7a:39:34:4f:fd:a6:39:fa:96:d8:91:1a:5b:f3:32:
                    6e:4c:40:60:28:0c:97:fb:f2:7a:2a:a4:66:21:9c:
                    a1:25:05:30:61:22:17:b9:df:67:1b:72:4c:bb:ea:
                    6e:ba:6e:4e:65:05:74:63:35:36:05:18:67:27:26:
                    af:9b:4c:53:05:8e:ef:95:d7:63:94:53:1f:1e:4f:
                    50:65:64:e7:ce:f3:76:cd:9e:41:21:f6:77:98:39:
                    e9:db:90:67:63:b5:f8:2f:46:a3:f7:c1:45:f0:86:
                    63:43:4f:0d:47:ea:81:2a:25:c0:72:94:54:67:26:
                    8e:11:20:a9:e7:bd:7e:88:66:7f:1f:36:2d:aa:06:
                    c7:61:9e:08:d6:b3:ae:38:b1:a8:36:a2:82:7d:4e:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B3:D4:AE:57:86:83:99:4F:5C:21:6A:BD:11:68:91:68:A8:F3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ad9c33e3-f895-3023-b635-848c9cc54c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1904:1140::/44
                  2601:1904:1180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:53:09:8e:5e:1e:c3:dd:e8:e0:97:2b:84:77:e3:92:34:
         3d:8f:13:72:80:ad:3d:78:25:b6:f5:6d:fc:b8:e0:1f:0c:69:
         13:8d:96:c8:aa:d2:a3:68:89:43:0a:35:6d:98:27:7b:9a:68:
         97:8f:e7:3f:07:eb:1e:5d:b8:ad:63:8f:2f:ff:3a:77:0b:d0:
         32:da:13:a3:70:c8:61:1e:7f:88:b3:1e:c1:d4:92:14:0f:fa:
         c1:5a:b1:60:45:d2:e9:2b:5b:1c:84:8b:2e:98:22:f0:8c:e1:
         eb:9a:f7:6f:2f:73:0f:6b:90:2b:80:f5:7e:11:0a:cf:a3:04:
         65:fc:32:ef:9a:cf:47:3c:7d:e0:83:b0:e8:f9:97:1f:4c:f1:
         cc:02:d5:0e:f5:05:e5:2a:cf:fe:75:27:88:f5:c1:be:01:e0:
         89:77:6f:7c:5d:31:98:7d:aa:21:8a:64:66:62:78:43:4b:ac:
         70:a3:99:33:1a:ca:3c:9f:d9:80:be:3a:1c:1d:05:ec:4c:94:
         9a:23:c0:97:c6:5a:c0:56:16:5a:33:a5:1e:81:68:27:99:17:
         3f:9e:35:01:04:90:9e:86:78:bf:aa:e0:0a:9d:63:af:8f:f2:
         78:7d:50:6a:1e:eb:7c:70:d7:4a:96:5b:38:21:c5:f9:a4:58:
         4c:5f:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:19 2025 by rpki-client