Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa
File:                     9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa (raw, json)
Hash identifier:          ofdJmk2cEx281xcNJLqDWfI4Y48GDpK4HDpF6eoFqvY=
Subject key identifier:   DA:B9:E1:DE:17:BB:76:A6:0F:7B:54:DB:CD:B2:1B:35:8C:53:21:0E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A23E44ACF8DB1E3C5AE71480
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa
Signing time:             Thu 24 Apr 2025 15:40:14 +0000
ROA not before:           Thu 24 Apr 2025 15:40:14 +0000
ROA not after:            Wed 23 Jul 2025 15:40:14 +0000
asID:                     207266
IP address blocks:        2001:500:4d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:3e:44:ac:f8:db:1e:3c:5a:e7:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 15:40:14 2025 GMT
            Not After : Jul 23 15:40:14 2025 GMT
        Subject: CN=55219319-17dd-49f1-bf16-7de79c66304f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:04:94:d5:f3:97:ec:02:c1:44:a0:b1:c9:
                    bb:bf:ff:a7:1e:40:5c:89:e8:27:3c:44:f8:88:f5:
                    93:8b:ef:32:b2:9e:a1:e4:5e:f2:bc:61:25:78:54:
                    e6:69:bb:8e:7b:10:a9:11:4c:84:f5:93:51:fa:ac:
                    c0:f7:e0:33:61:27:8f:bf:1e:04:3f:1a:06:fb:0e:
                    ab:5a:e8:66:ec:d1:a2:ba:09:c4:95:ca:1d:0e:a4:
                    c9:a0:6a:c6:c5:6c:38:2d:26:c6:09:9c:e0:91:a8:
                    97:83:45:65:af:17:10:98:1d:44:d1:97:e9:13:7b:
                    3f:7b:86:39:1d:cc:2e:8b:a0:2e:28:c1:98:1b:30:
                    74:7a:65:f1:77:06:0f:f6:54:e4:f3:7d:d1:2c:f0:
                    9c:60:db:57:e9:77:58:df:c4:d5:c2:e7:e8:dd:3e:
                    f2:f2:b2:ff:18:6b:3f:ce:18:da:ee:80:14:05:de:
                    18:8b:f9:b4:15:f5:06:6e:5a:85:8f:82:61:70:49:
                    89:34:9a:a4:7b:62:dd:20:36:96:e6:33:90:d5:02:
                    af:14:69:d8:06:c1:95:56:4c:3c:8d:5e:a2:d4:2a:
                    1d:63:8b:52:45:10:39:e2:3b:89:af:41:ce:8d:f2:
                    10:2b:b2:ae:fb:ab:51:33:3e:df:63:0f:16:9b:90:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B9:E1:DE:17:BB:76:A6:0F:7B:54:DB:CD:B2:1B:35:8C:53:21:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9100cc8c-4f12-3ff2-9e42-fe73e63a8dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:4d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:4c:0c:a9:a3:05:5e:5b:33:86:48:ee:90:08:48:30:1d:
         15:cc:1c:2f:43:8e:3b:19:f3:7d:9c:eb:34:fb:3b:a7:03:39:
         29:9e:ed:ae:b6:b5:cc:02:30:c9:64:b6:6e:b8:b0:da:b3:81:
         c5:0c:32:c2:56:d9:13:9a:e7:6b:ea:48:17:f3:6b:90:37:7a:
         19:f4:64:5c:cf:c3:e6:24:af:68:05:17:93:d4:29:72:5b:92:
         ea:6e:03:5a:d3:6d:58:fe:c5:63:83:2a:2d:f6:24:b7:a9:a8:
         c6:1c:65:db:78:bd:46:f1:31:a5:bb:2f:07:83:67:a1:1d:d9:
         73:0e:77:f4:8d:e3:90:bf:05:86:04:36:f1:6b:3e:31:6b:a1:
         c3:f4:6f:69:08:2b:eb:cb:b4:ca:c5:16:cf:c4:c3:ba:8e:43:
         6e:fe:c1:9d:ba:c9:45:b3:d9:8f:4f:65:21:5e:ad:f5:97:8a:
         49:29:60:d0:d3:db:58:dc:62:4a:1d:a0:5d:67:79:81:4f:79:
         7c:f5:07:dd:be:26:d6:c5:20:65:6c:13:f1:ab:15:a4:c7:95:
         03:24:05:10:c4:c2:90:ed:2c:49:9c:22:12:06:17:8a:7f:c0:
         59:b3:ea:b6:61:89:15:f7:30:02:f9:d0:51:17:54:0e:25:31:
         4d:9b:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:20:14 2025 by rpki-client