Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa
File:                     ac48a2d3-854c-3155-92d9-311295bde213.roa (raw, json)
Hash identifier:          1J1C+kIAsCefyDVkVyJ8pCWFLJJHdhs5o9pfxN3CBWs=
Subject key identifier:   F8:60:6A:CC:C5:C5:BE:43:35:E0:94:C5:D8:68:32:95:E7:49:93:08
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849A2C2425DA321F0712398A180
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa
Signing time:             Thu 24 Apr 2025 20:06:11 +0000
ROA not before:           Thu 24 Apr 2025 20:06:11 +0000
ROA not after:            Wed 23 Jul 2025 20:06:11 +0000
asID:                     11537
IP address blocks:        2001:468:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:c2:42:5d:a3:21:f0:71:23:98:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Apr 24 20:06:11 2025 GMT
            Not After : Jul 23 20:06:11 2025 GMT
        Subject: CN=d7bf51a1-9c52-4fae-90a2-ac33de8a55f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ac:38:ed:a9:ea:10:7c:83:51:75:3f:33:52:
                    8c:b3:be:69:e7:0f:54:b8:4a:f5:61:13:17:ac:29:
                    12:3f:3b:d3:e9:6b:d5:05:86:24:17:b4:59:a7:56:
                    78:0a:e1:5c:2f:43:66:19:8e:a3:5d:10:80:eb:f5:
                    e6:34:97:b0:fe:3f:98:93:f0:ff:ea:1d:09:e2:75:
                    1b:83:1b:21:5c:4e:20:2d:b8:d6:00:b4:22:b8:7d:
                    27:cc:2d:8c:63:fc:f2:bf:7f:25:6a:24:7b:f3:72:
                    a1:5c:c8:73:a4:f0:00:b3:0c:ed:f6:59:82:f2:83:
                    89:9f:14:ca:36:3e:1c:0a:b3:b6:93:21:6b:a3:7c:
                    10:ed:a5:05:ad:e3:86:57:92:6a:20:2d:cc:6a:48:
                    ac:6d:07:48:c2:d7:d1:92:de:cf:c0:f1:c6:3d:42:
                    f0:11:d5:b6:b1:f4:3c:61:18:9b:8a:46:aa:52:d8:
                    e6:c7:53:2e:13:f1:76:16:57:7b:ac:49:1b:4e:4b:
                    31:ea:83:87:36:22:85:39:db:79:bc:9e:dd:1c:79:
                    09:17:24:b3:53:b3:86:da:b4:95:bf:45:f6:0d:e4:
                    bd:7a:10:6d:bc:bb:33:19:51:9d:03:28:d1:86:24:
                    08:ff:70:8d:ec:70:15:25:8d:bd:16:b5:b7:63:3d:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:6A:CC:C5:C5:BE:43:35:E0:94:C5:D8:68:32:95:E7:49:93:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:39:2e:5d:d8:5e:21:9c:34:e4:19:e0:a1:95:16:74:43:a0:
         1d:e6:a7:99:1a:bd:b3:0a:ed:78:32:ba:73:07:57:dd:6a:b0:
         2a:d2:94:56:dc:95:3d:86:09:69:ef:65:4a:94:3d:a5:63:e7:
         8b:f2:12:c1:68:73:07:34:c9:33:9d:cf:fd:8e:c2:03:12:ad:
         ca:30:62:56:b2:7f:91:d0:ac:8c:e3:83:86:09:cd:3b:ed:4a:
         44:b0:24:9a:51:79:07:9b:19:a9:36:88:ad:64:90:7d:04:48:
         de:8c:0a:11:5c:70:db:98:6b:b5:9f:24:03:9e:c4:e5:97:73:
         19:85:ec:53:5b:fa:9b:65:ad:ab:2b:17:a1:12:6c:bc:89:01:
         ea:07:39:17:e4:70:e3:bc:3e:b9:b2:97:c6:37:23:fa:c8:76:
         9b:3e:cc:c8:86:59:55:59:2d:63:31:f6:7a:a5:be:1f:ca:65:
         09:3d:e3:ec:d2:81:c8:e8:1e:e2:2c:90:f1:15:6e:3c:1c:31:
         cb:e3:ab:51:fb:70:5e:9e:9a:ec:34:1d:cb:c0:8e:ef:3d:0c:
         4c:22:11:af:3e:21:fc:0d:c0:6b:ab:4f:dd:84:0d:80:64:3e:
         fc:ff:e0:49:16:76:e8:ed:db:46:f9:dd:21:4a:5a:4f:bb:e8:
         e5:69:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:50 2025 by rpki-client