Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
File:                     9226ae08-c759-3a7a-b17b-4d72f55ed057.roa (raw, json)
Hash identifier:          ofPS31R4KddNm/ZlxP0JTDD6VWT1NEYk+f2Xtff0/io=
Subject key identifier:   67:9F:55:5E:A4:6A:4F:02:3F:3A:82:2C:61:69:56:34:DE:C6:F3:05
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F7152240C622B7A2DAB9E880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b15::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:22:40:c6:22:b7:a2:da:b9:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=7c81f84d-67ce-4052-9c6a-ea04b725da1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:59:a1:9c:40:30:74:60:45:a5:36:d8:f8:
                    b8:b1:8f:73:ff:71:fa:ea:61:bb:fa:84:dc:77:cc:
                    56:4e:8a:6f:83:9f:a9:3c:e3:73:26:fc:72:6e:ee:
                    61:5e:b4:8c:5d:01:b5:6d:0d:df:2c:38:29:ba:85:
                    01:8d:c0:c0:8c:dd:32:03:5c:a2:e1:4a:e1:df:6c:
                    e9:50:e7:f1:cf:eb:4a:a2:14:6b:2e:3b:32:92:da:
                    e5:dc:6a:3c:66:eb:47:31:9d:59:e8:ab:78:39:ad:
                    99:17:f6:eb:8c:63:78:37:5b:74:78:67:4f:03:26:
                    6f:b7:d7:3e:95:02:8e:5f:f1:eb:6c:07:b9:76:72:
                    09:68:00:bd:f4:81:8a:3c:ec:0f:31:cc:95:89:7c:
                    fb:d4:d7:1c:50:9d:07:8d:3e:de:ab:1d:a9:66:52:
                    6c:fd:5f:48:5e:f0:4f:1d:0c:c5:29:cf:33:6d:2f:
                    73:4b:6f:ed:78:3b:e4:5d:0d:92:46:f9:aa:a0:d0:
                    ce:02:cd:60:0a:76:10:65:93:5c:5c:0b:ed:cc:38:
                    c8:20:31:3d:2b:d2:a8:f5:82:97:1a:72:6e:cc:79:
                    63:bf:90:f8:ba:8d:0a:63:30:1a:b8:91:38:f1:31:
                    89:28:00:4e:ce:5d:98:f2:20:ce:55:2f:7f:96:1b:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9F:55:5E:A4:6A:4F:02:3F:3A:82:2C:61:69:56:34:DE:C6:F3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b15::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:26:5c:89:d6:c9:a5:62:24:90:5d:5c:23:ef:8d:19:82:28:
         ed:51:48:4d:c7:9d:1a:40:57:01:6b:40:43:e2:18:5e:f2:05:
         8e:c5:a4:30:12:25:a7:b9:bd:fe:9e:45:3e:ff:16:68:23:2c:
         75:d3:b2:48:d5:a7:fd:7d:a1:19:d3:f7:c0:b2:2b:28:5f:db:
         70:77:4b:7c:9d:76:85:9a:c8:8a:4d:78:c4:2d:0c:0d:5b:28:
         0a:3b:5e:74:06:c3:fb:16:33:2c:03:ed:ce:88:62:9d:a4:c9:
         bc:01:81:5c:23:94:32:84:c3:e3:0d:23:d7:a4:bf:8e:9c:a9:
         e4:21:7e:28:91:e6:81:06:4a:ca:60:f2:a7:c7:89:09:4f:56:
         0c:e6:b1:11:0b:b9:48:cd:f0:81:eb:bb:64:1b:e8:19:7a:bb:
         20:62:df:6d:53:3d:36:8e:29:8f:d1:f6:71:e9:de:f6:1c:6d:
         10:b6:fe:dd:30:48:be:ad:10:b3:aa:6b:03:aa:11:21:8f:72:
         60:b2:ea:f5:3f:3f:04:45:49:a5:12:b3:e4:9f:1c:80:52:e0:
         bb:82:7c:0e:a3:ff:c3:29:aa:58:bd:7e:12:3d:dd:2f:03:cb:
         db:dc:2b:f2:3a:61:00:68:de:54:2e:d6:c7:42:d3:e2:38:8e:
         67:f4:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:55 2025 by rpki-client