Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
File:                     4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa (raw, json)
Hash identifier:          YIpeJRnUb6RpnbLTBXmAl6IRY/Q15PVRQy3sCKRqc98=
Subject key identifier:   7D:3A:CD:11:10:76:92:C7:93:73:EB:F4:2D:53:7E:54:12:95:41:4C
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285849F7151FD5BA942D0766F59500
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        2604:b040:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1f:d5:ba:94:2d:07:66:f5:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=3b160e35-e920-4fe4-96c2-a2640f382e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:43:fa:f1:92:70:b3:23:b1:ec:73:ec:9b:
                    83:15:50:ae:60:bc:42:03:50:04:41:cc:22:5d:e5:
                    c1:c5:44:4b:b4:10:9d:25:09:33:d3:75:75:1c:4a:
                    42:43:21:2e:c8:d4:f3:a3:d9:d6:23:a9:b6:94:eb:
                    63:2e:66:0e:58:3a:d7:98:01:03:4c:12:06:54:6c:
                    0f:85:d8:8c:ab:91:fd:4d:28:ef:08:7c:ca:b8:3e:
                    3a:0c:3c:65:e7:f4:ca:33:28:fa:d6:0d:6b:01:dd:
                    4a:71:2f:85:b2:71:a1:6f:e9:07:a7:c8:6b:58:b0:
                    79:39:b9:1e:14:95:96:9a:e5:dc:57:02:fa:06:37:
                    3f:88:4d:b0:3c:59:14:b8:6c:e8:00:10:ff:06:49:
                    80:51:95:2e:d6:ee:f1:8a:3a:41:47:54:49:f8:f0:
                    a8:e8:c9:df:49:51:ca:18:55:ea:b5:06:24:44:cd:
                    b0:72:46:87:19:30:15:ca:2f:42:ac:09:7e:61:fc:
                    1e:d0:cf:1d:dc:1c:72:13:98:0a:91:c6:c5:c4:62:
                    e4:b9:02:bc:62:00:ad:66:fc:f3:82:ba:5d:49:05:
                    ad:fe:ee:11:6e:00:84:66:27:34:da:84:46:4e:06:
                    53:b5:02:89:bb:fd:ef:82:ea:09:e5:e9:c1:ce:20:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:CD:11:10:76:92:C7:93:73:EB:F4:2D:53:7E:54:12:95:41:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b040:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:e9:da:48:47:22:b2:7e:5d:49:0c:c1:14:a9:62:21:68:
         30:ab:06:e2:0d:36:a7:1b:c0:28:0f:4f:da:b3:83:f9:08:76:
         a1:bc:ee:fa:f4:ca:61:40:92:c8:3d:a1:66:72:88:39:0d:b8:
         4d:7d:28:cf:c7:59:c7:5c:80:42:c4:03:a6:3d:15:40:1e:a3:
         8d:73:18:c2:44:45:cd:95:fa:25:02:dd:bb:1a:37:51:7d:f3:
         33:e4:c4:ec:8c:08:1a:c5:cc:75:55:69:9e:a8:13:4f:0e:d9:
         24:1b:9a:14:bb:5b:6a:2c:f5:96:4d:d8:ff:af:6f:30:94:42:
         56:39:34:32:fb:ed:4f:83:ee:2e:9d:ac:4d:d2:c8:2a:40:03:
         52:c4:6d:cb:1d:08:c2:c3:84:a5:89:1b:e7:2b:f0:7d:82:15:
         0c:94:80:36:11:5d:cb:e6:d6:25:01:63:0a:f7:4b:91:b3:c4:
         f0:bb:24:25:5e:f1:93:a8:a4:43:d4:9e:aa:a8:77:a6:f8:68:
         e3:72:8b:66:9c:5e:9e:24:82:38:91:0c:f5:40:01:f3:a9:4b:
         8d:ef:e9:06:aa:a4:1d:53:95:85:58:cf:00:b2:11:86:e1:d2:
         f9:dd:85:c1:29:5b:3e:c7:37:14:48:b5:a3:d0:94:82:8c:8e:
         86:b7:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:20:02 2025 by rpki-client