Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa
File:                     e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa (raw, json)
Hash identifier:          vNWRnGBtQ7bJJcC5haXbIbjvSdEqg4Ir4JS9EkPUl1w=
Subject key identifier:   31:20:3B:D8:0C:28:F4:0B:24:D9:3F:1F:EF:AB:4B:86:AA:7D:99:99
Certificate issuer:       /CN=3e08da12-c2b8-4581-b1af-e8322645d15e
Certificate serial:       010D0C9F43285849DF5A7542D7BCA7508EB12680
Authority key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     398448
IP address blocks:        2607:a340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:75:42:d7:bc:a7:50:8e:b1:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e08da12-c2b8-4581-b1af-e8322645d15e
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=e5d46283-781f-454c-ad8a-98713b14a2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:d1:b0:7b:f3:3a:c5:c5:b7:fe:56:af:bc:
                    eb:0e:1a:fd:fa:4a:3d:94:6c:6e:38:cc:e8:8a:8c:
                    8d:f2:42:85:8a:f1:c7:3d:af:bd:54:c6:62:4b:38:
                    f2:aa:b2:06:45:67:73:b5:61:d3:5d:50:46:d7:81:
                    00:03:b2:ac:d6:19:3a:49:f2:01:a0:33:d5:c4:30:
                    39:86:57:d9:cf:7b:c4:f2:7b:81:f7:35:ed:4f:b0:
                    86:b7:bd:c6:10:10:af:d3:58:3c:18:e9:36:27:47:
                    43:aa:b7:3b:61:dd:e0:00:66:e3:54:88:d7:04:0c:
                    47:62:06:98:d8:67:4b:b2:44:83:3b:c9:44:51:fc:
                    3b:05:07:37:42:1b:87:71:46:de:78:c6:10:dc:50:
                    e2:1b:cf:f2:33:94:e0:9b:92:3b:b7:53:54:2c:06:
                    58:9a:41:62:f3:27:dd:81:45:c3:c6:ba:b1:17:36:
                    e6:19:73:fe:92:8a:fb:4a:a2:cd:51:32:cb:20:97:
                    96:55:c5:c7:3b:53:18:6f:19:cc:6f:a4:f8:39:6a:
                    9f:92:7c:71:cf:9a:76:9c:98:c7:85:26:0a:e1:c1:
                    6e:c5:c5:7d:f3:95:85:ab:91:55:57:eb:0b:a0:30:
                    c5:f7:cd:16:8a:b7:a7:a0:60:26:d4:58:8b:ab:94:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:3B:D8:0C:28:F4:0B:24:D9:3F:1F:EF:AB:4B:86:AA:7D:99:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:af:f7:f7:ae:1c:6d:6b:49:42:5e:3d:46:93:1b:8b:1e:ba:
         27:af:76:87:38:90:7f:db:58:95:68:94:ba:f4:b6:c7:1c:df:
         9e:c8:3e:7b:d1:a4:a8:8a:55:ab:34:d5:bb:0d:41:7b:2d:34:
         7f:95:9f:23:a6:e2:89:a2:1d:c6:96:c0:81:66:f2:45:b1:1c:
         6e:0e:63:d9:68:09:e8:92:46:34:1f:0b:34:95:b2:69:b3:9a:
         ce:38:db:44:a7:45:91:bb:97:f9:6d:31:88:a1:37:29:8d:b2:
         5c:1a:a8:4e:fb:d0:3d:9f:13:07:62:39:5f:a9:dc:04:c5:e2:
         63:43:d5:58:14:15:ee:13:f1:6a:3e:02:b4:50:3b:6c:35:94:
         7f:8c:02:74:01:4d:5a:95:a7:1c:73:4c:c2:ee:6c:fd:b7:c3:
         88:cf:b9:71:b6:a9:2d:fc:8c:28:ad:9a:88:c7:c3:46:26:14:
         d1:46:fb:52:06:59:f5:e6:af:82:9a:4f:06:be:c0:15:fa:35:
         f5:24:86:de:ae:7e:b6:c4:1f:2a:36:06:d4:60:9b:73:b8:ae:
         50:7a:6e:d2:37:fc:20:0b:59:0d:23:56:2d:89:0f:b0:bf:b1:
         82:7d:18:3a:1d:f9:a7:19:67:ce:47:c6:42:2c:3f:81:73:3c:
         94:10:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:24:55 2025 by rpki-client