Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4ac693b4-f88f-3419-a8e9-47be8fa1367d.roa
File:                     4ac693b4-f88f-3419-a8e9-47be8fa1367d.roa (raw, json)
Hash identifier:          +bjSdd9DPEYjtmp5CqHzdbflHR5xz8Wzcd5rWPg488s=
Subject key identifier:   AF:5D:E6:F9:1A:60:33:F9:1E:66:15:64:51:94:63:BA:E7:31:FE:1B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F87A8B51D1CCFDE611C6EF00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4ac693b4-f88f-3419-a8e9-47be8fa1367d.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        2001:418:1442:100::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8b:51:d1:cc:fd:e6:11:c6:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=0d84b8e6-9671-46ff-a87f-be067b8ebd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:e4:c2:82:6a:67:ad:60:43:5e:58:bb:5a:
                    d8:f8:36:70:b2:7c:e6:65:b1:cf:2b:16:d2:2b:05:
                    29:97:37:80:33:d1:b9:f8:ee:4d:0e:cf:2e:b6:5d:
                    1e:a0:db:48:e6:4a:23:90:91:b2:fd:b0:36:66:cd:
                    b2:84:95:40:c7:13:13:28:cd:73:5d:4a:fd:24:43:
                    dc:da:81:a9:b0:71:64:1b:5d:41:8c:5b:d1:11:f5:
                    83:56:c9:ce:a4:48:ac:d7:28:58:b4:b2:c5:bc:9e:
                    14:38:35:96:2d:35:a0:5a:b8:ff:33:06:35:31:0e:
                    0f:88:74:8f:53:a5:cf:6e:2c:e3:d8:7e:7c:18:08:
                    3f:6e:eb:ab:3d:9d:98:22:d5:9d:56:be:a1:f3:fb:
                    59:dc:66:63:0a:41:dc:cd:61:7b:22:e4:d0:5a:52:
                    30:f1:fe:b8:70:93:dc:98:1c:ee:76:72:89:1c:ba:
                    59:23:fd:06:00:08:bc:8c:5e:d3:ac:6d:34:fb:f5:
                    0c:64:f4:3d:b1:97:a4:e2:f6:d8:ca:5a:33:db:5b:
                    d2:09:81:a1:50:2a:c0:64:3f:9a:28:a4:b3:c1:4c:
                    17:d5:22:db:70:28:62:3f:92:48:eb:4f:22:99:af:
                    e4:bb:ee:cc:f8:99:a4:b6:49:45:eb:49:ca:3a:c0:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5D:E6:F9:1A:60:33:F9:1E:66:15:64:51:94:63:BA:E7:31:FE:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4ac693b4-f88f-3419-a8e9-47be8fa1367d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1442:100::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:1b:61:2b:36:38:89:1b:25:89:4b:51:8f:bd:6e:32:5c:
         89:ca:45:05:8f:bc:5a:db:67:dc:c1:e5:18:c4:4f:e4:6c:62:
         61:bb:36:25:6c:8c:c5:7e:43:d0:f7:72:5c:e1:d1:5d:06:43:
         25:56:b8:dc:5a:c8:15:34:fd:96:f4:60:34:b5:8f:ab:48:4f:
         52:07:5d:79:66:3b:fa:07:86:ea:de:fc:33:a2:45:81:bd:7d:
         0f:6b:ce:1b:9e:2d:13:fa:43:bb:8a:b6:df:3b:19:77:64:9a:
         38:25:ec:9a:44:8d:00:3b:7c:9a:c6:8a:c3:10:d7:32:c1:c6:
         90:80:7f:42:d9:a9:7c:85:04:09:56:f0:fa:fd:3b:f4:2b:ac:
         0d:e1:a6:e6:82:a8:8e:ee:19:47:5a:5c:ac:e5:40:0e:0d:46:
         76:cf:4f:c6:3a:6c:34:13:32:73:26:d9:c1:6c:8f:9f:59:fa:
         a8:9c:ee:54:a7:38:01:b3:53:e4:c3:e7:a0:0c:a0:b9:0f:5f:
         2e:f0:bb:a4:05:75:a6:cf:4d:fe:2a:dc:2c:aa:51:76:98:c6:
         08:6d:4d:66:93:e8:bc:77:23:d7:fd:72:ea:df:ff:56:96:3e:
         ff:79:98:54:2c:38:ee:7b:12:0f:8b:a8:1a:f8:39:46:3e:4d:
         2a:fa:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:58:23 2025 by rpki-client