Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
File:                     f6285d45-9269-3c7f-af51-21be86401f66.roa (raw, json)
Hash identifier:          cYZEaxvgtyqHpLaQSSwOCdDDphx/GmxYRNOUd970ca0=
Subject key identifier:   BD:AD:62:7B:B0:E8:AA:18:E5:AE:40:87:68:E6:1A:2F:69:DE:10:C4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A0C056EBDD81DF73E09E43B80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     2914
IP address blocks:        2001:418:3ff:8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6e:bd:d8:1d:f7:3e:09:e4:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=de6d2cb6-c383-42a5-8d71-b75dac5bd7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:f9:86:18:2b:4d:ec:bf:9c:ed:59:51:f0:
                    f0:90:bb:65:10:d0:d1:31:0f:bd:b4:30:37:ca:9d:
                    55:a0:6c:65:bb:6c:fc:d7:a3:c8:e6:a6:1d:72:54:
                    c5:79:5e:5d:a2:b7:74:f8:27:22:e2:ac:86:14:00:
                    56:82:70:3c:9c:9a:bb:7b:0a:6b:49:7b:03:1e:c5:
                    1b:a7:5f:8b:72:71:74:43:e0:ea:93:0e:a8:8f:d5:
                    8e:bc:4d:71:69:e3:a0:8b:fd:96:9f:55:9a:96:b2:
                    b6:9c:77:88:c3:95:6a:f9:fa:e7:84:37:16:4e:dc:
                    c0:c9:9a:49:f8:93:c8:55:9b:7d:f2:fc:83:8d:64:
                    96:4a:11:f7:ab:d9:15:10:cf:03:82:76:3c:b8:6b:
                    c6:6d:b1:7b:b2:47:64:1a:03:b0:95:ad:c6:06:87:
                    d7:7c:cf:9a:96:bf:8a:b6:a7:ea:4d:01:1b:67:53:
                    97:fd:87:0e:2b:d8:3d:17:f2:b3:a4:27:bb:69:7d:
                    23:bc:22:81:5a:b9:16:29:9b:17:c8:70:f4:ed:88:
                    c9:4b:1a:91:93:2b:f3:2c:28:e6:0f:5d:3f:c8:ae:
                    05:7c:ff:ed:a3:91:e7:33:7d:8b:54:fc:6d:ed:9f:
                    ac:b2:4b:39:75:12:31:48:bc:87:be:76:1b:c8:b4:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:62:7B:B0:E8:AA:18:E5:AE:40:87:68:E6:1A:2F:69:DE:10:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:82:87:f3:19:69:14:c1:5b:ac:41:e8:4e:e1:1b:02:25:ef:
         8e:72:e3:51:25:34:87:19:fb:eb:ac:9d:3b:8f:b6:f7:f2:64:
         ed:6a:d1:e8:49:96:66:f2:48:ca:c6:8d:18:52:e4:34:22:7a:
         a1:ef:44:f8:c3:cc:7b:ee:1b:26:c1:35:8f:88:48:47:99:23:
         34:d5:4b:f1:85:17:3b:cb:5d:1e:c4:ae:5e:a6:74:39:4e:a4:
         43:d6:c6:b4:c2:3e:66:63:64:b9:11:f6:dc:fc:a2:7e:62:4c:
         52:a5:06:21:50:76:6c:08:02:0f:09:46:78:19:07:a2:5f:74:
         88:e6:d3:d6:1c:36:86:4b:95:4e:cf:8a:ad:b5:1d:0d:fa:48:
         1a:ec:df:2f:cb:93:2f:fc:fb:df:a0:85:24:61:85:60:18:4c:
         58:83:ac:4a:a8:8f:85:9a:e7:5f:5e:b3:31:ad:67:62:34:5a:
         15:09:e5:94:62:2d:78:3f:4f:86:46:1d:1b:4c:6e:8d:f9:82:
         f3:22:4b:69:dd:3f:00:f5:4f:66:48:03:5c:4f:fe:9a:6d:f1:
         6b:7e:9f:19:30:77:de:73:f0:aa:81:19:0e:72:4a:50:88:05:
         82:23:ab:63:71:68:a4:1c:28:95:f1:82:5b:14:c6:6f:20:0f:
         d7:eb:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:36:06 2025 by rpki-client