Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa
File:                     dde03462-bea1-3694-8eff-b21c9b05836f.roa (raw, json)
Hash identifier:          vjO59Qy/jjuLPKRJRcaILQ1BuSRI39xQSGFYOhz4Sp0=
Subject key identifier:   EA:C1:F4:E9:FB:D0:C4:4B:71:62:3C:D4:9D:90:4C:03:35:F9:73:51
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F71518280D61A6C5A4C5D980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     1225
IP address blocks:        2001:418:3ff:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:18:28:0d:61:a6:c5:a4:c5:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b944e179-e896-4e3d-aba7-ad33bcced96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:76:9f:50:c5:02:55:c3:28:90:19:0a:da:
                    d9:f2:c0:e8:14:fe:72:d6:e1:91:e9:83:34:ff:98:
                    71:4c:f5:58:f1:84:42:00:85:55:a4:ab:b6:37:e8:
                    84:9f:c5:d8:c1:19:e8:30:d6:46:28:a3:10:84:c5:
                    c4:41:ff:de:6a:ee:84:0f:75:d4:55:31:d3:88:03:
                    c4:e1:7a:f2:9a:63:10:a9:90:26:c6:e1:38:09:09:
                    a5:57:a9:40:a0:31:65:58:ca:30:d2:73:d6:d2:4a:
                    0f:0a:82:53:0b:21:23:c5:8a:9a:f8:6d:db:71:8e:
                    84:ac:7e:32:4f:f8:f5:01:02:e3:a3:b2:26:6f:86:
                    ed:93:c6:b6:51:7e:c5:ce:3c:9c:29:f0:aa:04:a4:
                    52:90:1c:9f:d0:d5:90:1f:1e:29:30:3c:62:de:2e:
                    f8:ac:c6:fc:a8:dc:b1:a6:fb:06:25:69:d0:63:31:
                    8c:50:94:ad:d5:07:55:31:0f:46:aa:e8:c9:a5:27:
                    c4:ca:79:6f:3e:66:3c:91:43:b0:51:8b:3a:39:5b:
                    09:75:f0:1d:26:6a:e0:a3:03:e0:8b:70:84:88:66:
                    db:6c:f8:42:e0:72:e9:b1:ee:ed:41:e0:e0:73:b8:
                    bf:3e:01:7c:7d:36:02:9a:d8:45:c3:58:20:29:3b:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:F4:E9:FB:D0:C4:4B:71:62:3C:D4:9D:90:4C:03:35:F9:73:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a6:52:b7:95:95:20:5c:7c:c4:3b:e6:84:f5:03:33:8d:1d:
         af:ea:7d:63:65:9e:4d:ca:7e:63:23:64:41:5f:86:f1:6f:7b:
         1a:6a:0a:7b:43:f7:e7:73:3d:06:d6:17:f5:da:fb:91:f1:39:
         4d:20:df:ab:00:2b:a6:46:7f:11:2d:78:91:e5:3d:b3:bf:a3:
         27:c8:d9:4c:5f:4c:3f:29:af:83:b2:a8:03:f1:7a:9e:10:28:
         06:bd:b8:2b:0e:26:e6:3d:1b:da:4f:c2:c7:ac:70:79:98:15:
         dc:10:60:04:99:44:77:3c:a0:3d:a7:d3:8e:ee:46:4f:61:63:
         60:7f:27:9c:cb:37:46:81:d0:6e:f3:04:de:27:87:32:4c:ff:
         c2:55:79:ee:bd:17:b1:83:93:82:20:5b:b2:d1:7c:55:79:f0:
         b7:a0:03:26:89:d3:d5:aa:46:9a:08:63:f6:1e:65:6a:2b:aa:
         39:62:c6:6b:48:ca:47:d1:6f:5d:34:42:4b:b8:c1:10:18:6a:
         be:1a:ef:1f:31:e2:38:8d:c8:0c:8b:96:0c:a5:8c:45:6e:a2:
         fa:a4:81:b3:71:d9:a3:5b:ac:13:b1:e8:66:6e:bb:79:fd:d8:
         e8:ed:69:1a:71:40:27:33:30:63:d8:95:a3:19:c2:a9:ae:d9:
         a2:54:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:06 2025 by rpki-client