Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa
File:                     89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa (raw, json)
Hash identifier:          8jx892+WgDTrdf4rVEZG+Zhsb4/IFipbmO3ZCnasQco=
Subject key identifier:   93:C9:C2:6A:86:C0:D2:AB:CE:ED:FF:69:B5:8F:48:71:A1:9F:94:10
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F432858498FC9BCB8932C67AFBBBC3200
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        2620:117:bfc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:bc:b8:93:2c:67:af:bb:bc:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=8a6d26f2-49b4-4bc8-a55b-c777fef17614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:49:68:f1:21:08:2c:b2:af:61:d2:4e:7f:90:
                    e7:c9:12:dc:42:ea:61:93:a8:0c:fe:04:37:56:f4:
                    8b:7c:de:a6:9d:d5:08:7f:01:26:0b:1c:24:11:7e:
                    5e:4a:de:2a:f1:ca:9c:45:dc:da:d9:93:d5:4e:b8:
                    69:85:36:4b:b0:ae:06:68:38:13:83:37:ac:b4:60:
                    31:c0:78:11:84:33:f9:f9:de:30:66:12:7f:30:8c:
                    4d:83:78:53:f5:2c:b1:1e:05:7c:fc:31:33:b4:4f:
                    93:6c:a9:a5:12:57:4c:ec:fa:46:1c:a6:89:d3:a0:
                    dd:81:6b:fb:49:bb:7f:4b:f1:aa:87:b9:55:bc:53:
                    7c:4c:8a:37:0a:da:7c:21:b4:cc:bb:ea:d9:24:03:
                    3a:ae:76:5e:92:5f:e6:02:6c:c4:a9:13:88:c0:5c:
                    e7:75:14:e8:90:92:00:f3:41:d7:93:3b:ae:1c:db:
                    42:71:16:21:2f:5f:81:58:f3:a0:53:05:96:ff:76:
                    70:b1:69:a1:ab:c2:0f:77:1d:85:61:61:a0:86:da:
                    74:8f:8b:b0:e5:a1:97:de:df:f8:47:46:fa:38:bc:
                    43:ac:65:4a:ec:58:a2:65:f0:fb:63:05:f1:0c:f8:
                    38:2d:02:b8:d0:3c:f0:2b:6a:d8:5e:32:3c:74:f4:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C9:C2:6A:86:C0:D2:AB:CE:ED:FF:69:B5:8F:48:71:A1:9F:94:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/89180b4c-07a0-330d-9b0f-27c616cfaa0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:bfc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:91:2c:94:f4:63:4d:dc:76:b5:75:ad:75:28:e8:bc:9d:05:
         68:79:fe:4c:89:3d:32:51:38:c9:d9:16:6f:d3:32:2d:13:1e:
         7f:b0:d8:43:be:b7:bd:c7:c3:f5:e3:f4:c9:2a:7f:bd:31:6f:
         08:58:e4:6c:d0:8a:2d:bb:42:20:62:29:77:7b:6f:3b:ff:64:
         f6:6a:ff:b0:64:92:1c:12:b0:c6:56:6a:0c:78:21:6e:fa:04:
         24:2f:df:e0:d5:1d:3a:7a:e6:d4:30:2d:a8:24:90:e0:a9:16:
         29:57:2f:75:7b:5f:8b:6d:b5:f2:a9:7d:b6:ad:3d:62:95:ca:
         bd:f7:6b:80:56:8f:8c:33:5a:0b:93:49:97:61:e9:f8:a1:e4:
         bc:c7:4c:6a:38:2c:c6:9e:56:59:5d:d5:01:4c:22:97:27:a5:
         18:e1:a5:c3:ca:9b:55:81:56:07:e8:01:13:d7:51:b8:56:fa:
         0f:fe:80:43:8d:91:9f:f1:c8:b1:27:c9:c5:58:ab:74:c0:2e:
         e4:88:67:29:7e:7e:a8:0a:9e:49:33:2f:84:7c:5e:90:8a:9f:
         e5:9c:1c:32:03:f3:af:38:49:07:3e:a3:1e:b5:ee:80:e0:e5:
         7d:6b:d5:46:9c:7d:2d:96:f6:19:0a:9d:90:d7:e0:d9:07:20:
         91:d1:c3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:07 2025 by rpki-client