Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa
File:                     9a176d9b-785e-3762-89c5-a9affb346f74.roa (raw, json)
Hash identifier:          yGVoOfjsZMFeMKotPK9kveNxYbCuYt028+xtGQSuPeM=
Subject key identifier:   87:67:3C:D8:55:F0:3F:D2:75:A7:31:4B:96:FB:4A:9D:06:4E:54:67
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F87A8D3E92669B262BE2F480
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     397601
IP address blocks:        2001:418:1456:b22::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8d:3e:92:66:9b:26:2b:e2:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=4e241c00-0ddf-425a-b3a3-14d4ed594d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:4f:d9:64:b2:59:d5:2d:0b:bb:3b:df:89:
                    80:e8:0a:f0:05:73:4b:6e:46:9c:7b:55:04:96:b8:
                    5e:d6:45:40:63:1b:aa:50:4a:07:88:83:fa:f4:94:
                    16:64:9a:07:3d:b8:84:b3:53:63:cb:62:33:4a:3e:
                    0d:10:6d:16:cf:b3:38:5c:42:ad:48:57:8c:ea:30:
                    f0:4e:fd:d2:fa:fb:60:17:af:8d:94:31:9c:f6:35:
                    46:02:7b:3a:55:61:ff:d9:9e:3d:1b:2f:36:15:55:
                    85:89:a2:40:dd:6f:cc:97:bf:51:4d:6a:1f:fd:67:
                    0a:dd:64:cc:5f:b4:fd:84:0e:6d:5f:7b:46:34:8b:
                    e5:3a:68:70:23:b2:e0:00:4a:d0:bf:ce:1d:b0:5d:
                    27:b3:4b:91:6b:82:7d:f7:e3:df:62:2f:f5:49:44:
                    57:99:76:fa:db:bc:b2:ed:01:dd:ac:12:2e:24:ab:
                    59:6f:cf:ea:85:32:81:11:3e:38:1a:c2:7e:17:a1:
                    09:93:db:da:90:31:c1:ab:42:1f:89:5f:a4:28:e7:
                    f5:86:25:d0:c5:96:59:79:7d:49:5a:f7:34:be:ec:
                    c3:2e:09:f5:71:98:f3:bb:66:f5:a5:72:c3:b0:a4:
                    65:72:0a:1c:8e:04:43:c9:dd:76:af:38:f4:74:f4:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:67:3C:D8:55:F0:3F:D2:75:A7:31:4B:96:FB:4A:9D:06:4E:54:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b22::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:70:52:6a:1f:79:37:fd:ba:cd:df:d4:d7:99:45:55:df:
         f6:87:53:e6:98:ed:18:60:8d:89:e1:fd:3e:ca:85:9c:9e:6d:
         ee:e1:c6:14:58:7a:83:71:d3:53:ea:c8:85:60:b2:6e:40:9a:
         3d:30:2d:30:ea:2e:e5:ae:b8:1f:ff:88:ed:19:e3:bf:be:bd:
         35:be:3a:c0:ae:bc:6f:b2:00:26:3d:1a:9c:66:36:1e:b3:64:
         ee:06:e3:16:e2:ae:f5:7a:94:05:6f:89:fc:58:44:57:34:53:
         a4:c4:08:a5:ca:e9:85:5c:7d:bf:9d:d5:17:6e:00:d2:a1:96:
         14:4f:d7:3e:28:e0:dc:7c:1a:4c:e0:5f:66:93:05:e7:33:6e:
         f4:25:ab:c4:06:cc:71:12:ce:a2:8d:38:c7:b8:41:53:be:93:
         57:f8:d2:ce:58:16:b9:f9:fd:61:25:3b:09:68:4b:06:eb:b0:
         4d:92:1a:c2:ae:b3:e8:a5:13:b7:aa:87:fa:72:11:a0:26:33:
         f5:6c:56:c1:e6:9a:16:f5:8c:aa:63:a0:81:e9:c1:98:64:5a:
         17:41:f0:62:84:96:5f:0d:f7:d9:05:4f:4b:6e:91:dd:4a:ce:
         1e:56:12:08:3c:76:e1:e7:88:32:13:ba:83:d6:dc:a2:3a:74:
         79:9c:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:07 2025 by rpki-client