Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa
File:                     30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa (raw, json)
Hash identifier:          FyU9kT2RJ/EnGFy0J8XSZhW8BQmsMFJbuxLCeLWhtIs=
Subject key identifier:   78:FB:73:77:4A:EE:7A:72:EC:73:AA:86:45:8B:C9:E6:DC:E2:9A:36
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A42EC95A821164F8CA905DC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa
Signing time:             Fri 25 Apr 2025 08:20:40 +0000
ROA not before:           Fri 25 Apr 2025 08:20:40 +0000
ROA not after:            Thu 24 Jul 2025 08:20:40 +0000
asID:                     12041
IP address blocks:        2001:500:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:2e:c9:5a:82:11:64:f8:ca:90:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 25 08:20:40 2025 GMT
            Not After : Jul 24 08:20:40 2025 GMT
        Subject: CN=805c1f95-10a4-4ba5-9169-4a991ed998da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:de:84:ee:fb:45:10:5b:a5:29:29:cc:2f:
                    16:37:bd:8d:70:3e:1b:59:a8:f6:82:3f:2d:10:57:
                    95:37:51:9f:64:8d:54:7a:a5:8a:6e:61:a3:9d:1a:
                    16:bb:b3:b1:ab:84:d5:6d:d2:70:8d:37:de:9c:18:
                    f8:fb:ce:12:83:73:0e:7c:c2:fc:62:88:45:18:e3:
                    a2:dc:f8:a5:14:21:9b:57:22:88:49:89:f3:90:b0:
                    ed:e9:c9:8d:df:96:97:9b:dd:e4:a7:65:b6:3e:52:
                    ce:3f:ed:72:9f:82:a6:08:1d:9e:0e:0d:86:bd:14:
                    32:14:b3:0f:eb:c8:bc:ea:1d:71:f8:fa:8f:b8:a5:
                    06:59:18:12:38:ed:0a:f1:08:20:db:58:5f:25:c5:
                    db:56:6b:5a:33:72:99:04:13:74:f7:ff:85:0c:43:
                    b8:a4:2c:0f:43:ea:4a:d9:7a:c1:9a:2d:33:ee:88:
                    81:b2:11:8b:c4:3c:f1:27:4b:05:8f:99:d1:4a:d8:
                    b0:fe:b2:51:c8:b1:e5:87:aa:db:ee:ab:1e:4d:ec:
                    5a:1e:db:0d:e9:b8:36:4f:bd:5e:7e:7f:42:0e:a4:
                    24:3d:fc:bf:87:05:be:5b:29:c9:7f:57:5e:8f:8c:
                    c6:4f:88:6e:a2:4b:06:f2:65:26:3d:a7:06:d4:f2:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FB:73:77:4A:EE:7A:72:EC:73:AA:86:45:8B:C9:E6:DC:E2:9A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30f2e8c9-d443-322a-b2ec-878848a7c7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:21:1d:d2:3f:11:73:20:08:4f:25:0e:64:8f:10:73:f7:ca:
         5c:fe:11:d0:17:9d:06:34:2d:80:e3:0b:ac:78:6c:60:b6:18:
         17:df:ea:fc:c2:e8:42:17:ac:70:86:0a:2b:8c:2b:64:33:04:
         7a:08:23:f6:c2:ff:01:d7:4e:91:3b:21:8c:a1:70:17:41:61:
         f9:7b:9e:63:87:3e:5c:7f:30:9b:56:9e:7e:f8:3b:c6:61:7d:
         42:5d:4f:05:28:53:ac:b6:b0:59:88:00:3f:34:85:07:82:31:
         69:1b:ae:63:4d:0a:ff:6b:3c:6e:25:8b:32:dc:70:d6:6e:fb:
         2f:7b:d7:7c:3a:20:13:63:17:09:c2:07:3b:f6:74:a2:21:05:
         84:80:1d:4c:fd:4a:dc:8d:24:97:46:f7:2b:fe:4c:d0:0b:61:
         78:fa:9a:cc:e2:9b:31:ed:b7:7b:cb:5c:85:87:28:99:b3:0c:
         11:db:f4:ae:5e:bb:59:16:3d:36:1a:df:32:49:1c:02:0e:54:
         99:3c:7c:d9:d0:c8:69:8d:d5:6d:05:3f:10:22:82:76:85:50:
         63:74:a8:74:43:cc:2a:4e:65:27:23:29:17:e0:55:c3:08:07:
         1b:2a:d8:be:f9:32:57:b3:ff:d2:7c:45:7c:b4:a7:d3:3a:68:
         ba:29:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:48:40 2025 by rpki-client