Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
File:                     1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa (raw, json)
Hash identifier:          Eq8Cz3TFxQxs7eyfbQGKmpJFpsc+mCJNRoWGbFoB7RI=
Subject key identifier:   7F:B1:61:48:C8:B1:F6:4E:45:48:E7:E6:8E:81:10:22:2A:44:AA:4D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F87A8D2CB0B525746D5F6C80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     397601
IP address blocks:        2001:418:1456:b20::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8d:2c:b0:b5:25:74:6d:5f:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=fee951da-a294-40a7-8fb6-6ed4487bd11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:b7:da:cc:0d:60:ac:9a:1e:2d:1b:6f:df:
                    60:72:89:66:6f:a7:70:ae:6e:78:78:3b:48:25:e4:
                    b5:da:6a:8f:c1:37:de:41:13:23:a5:d5:d0:27:52:
                    ba:64:d8:55:86:79:70:c5:74:a4:e6:67:74:09:0a:
                    f2:f9:c5:b2:cf:c0:85:ac:93:30:4d:7e:3b:0d:19:
                    e0:a6:a7:bc:a4:cc:22:ad:91:12:78:96:2e:a4:49:
                    c4:b7:ea:3b:39:bc:06:30:97:97:4c:c8:38:7c:58:
                    75:2a:22:ee:2e:25:db:d1:f2:c1:c3:6d:e5:d2:b1:
                    a5:e6:8a:51:12:f9:f7:1b:09:fb:35:cf:1c:03:78:
                    84:64:a5:20:39:1f:54:2f:76:dd:4a:e9:cf:7f:ad:
                    8f:73:e6:3e:f6:59:3a:e2:fb:03:c1:17:13:63:a2:
                    f8:9d:a3:b2:05:70:9b:ed:b7:28:c2:c3:1a:be:41:
                    e7:b1:6c:10:c7:96:7a:4b:f8:99:91:7e:20:bc:44:
                    af:44:00:05:88:a0:ca:1a:2f:5a:f8:19:e5:d1:7d:
                    5c:04:ee:75:17:f9:43:4f:8a:a4:d7:d8:d4:ae:f5:
                    dd:a7:6a:9f:75:d6:65:64:69:e9:58:33:27:a1:c1:
                    cc:4d:4d:68:a6:25:b1:80:ad:cd:72:31:21:2b:64:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B1:61:48:C8:B1:F6:4E:45:48:E7:E6:8E:81:10:22:2A:44:AA:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b20::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:87:a7:45:61:f4:d4:b3:1b:fa:3d:57:bc:30:26:67:5f:54:
         2f:3e:09:2b:c9:98:75:61:0c:90:0c:77:3f:8e:35:5f:53:52:
         5f:90:cc:b1:b4:95:28:82:b8:e7:2a:c2:a3:45:15:e1:00:5e:
         a6:83:6d:d0:3b:ce:10:46:11:b4:fd:39:b0:d5:5a:fb:a2:ad:
         bf:ae:05:0d:38:53:d9:e0:de:11:21:1d:69:30:2a:e6:77:db:
         c1:aa:ec:37:8d:c9:75:e0:91:3a:b4:b2:09:3b:7b:10:87:53:
         f7:24:f6:54:4e:be:64:c0:90:f8:11:fd:1a:63:57:f2:a1:be:
         03:95:3b:eb:03:0c:af:ab:1c:7b:db:1f:f7:a1:d7:a2:3d:22:
         e6:52:f6:3e:1d:2c:a0:0e:89:78:51:fe:8b:51:d1:fd:d0:20:
         96:77:5d:26:cb:88:e5:67:86:64:6a:07:4b:4f:0a:e8:22:d3:
         8c:3b:3b:33:66:21:16:cb:2c:d8:e8:53:32:89:ce:61:db:c9:
         43:2c:68:5c:97:4a:55:65:7e:44:22:65:14:84:d1:0c:2c:be:
         7c:f4:4e:e5:23:22:d8:9b:51:fb:2d:94:37:ec:84:4d:d3:5e:
         2c:c9:90:43:84:22:57:12:73:43:5e:6b:6d:b7:f1:65:18:28:
         28:5a:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:54 2025 by rpki-client