Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/08d9d418-eca8-3d3e-837a-6480ce768ba2.roa
File:                     08d9d418-eca8-3d3e-837a-6480ce768ba2.roa (raw, json)
Hash identifier:          TEHXk8kGSsMEi2izHjXN86mXof3z7/vprKZfGvOl9T0=
Subject key identifier:   18:28:42:3A:C6:18:AC:BA:AF:3E:8D:72:11:28:1E:62:D5:34:89:62
Certificate issuer:       /CN=a2235d90-d905-4ef7-9447-870904044658
Certificate serial:       010D0C9F43285849A61F432CB1F4A529950C5240
Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/08d9d418-eca8-3d3e-837a-6480ce768ba2.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        2607:5ac0:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:43:2c:b1:f4:a5:29:95:0c:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2235d90-d905-4ef7-9447-870904044658
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=a12aa490-8344-4e6d-9e32-630b724b8d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:3b:4d:75:92:8b:3b:b4:c5:4a:7a:b1:b1:
                    32:f6:cc:a9:4e:33:02:a8:eb:a2:b3:02:4c:5b:a9:
                    82:59:db:0c:01:1f:b5:57:66:62:a3:8c:46:f4:4c:
                    aa:61:bb:fb:6b:96:f8:ef:bf:3c:01:de:28:9f:37:
                    1b:90:92:cc:76:31:64:e8:77:ee:1d:72:5f:db:f6:
                    fd:f4:d5:59:b7:57:b6:70:17:53:fa:c6:60:b8:62:
                    7e:5e:5d:5b:3f:a4:12:8a:25:6c:38:cb:48:08:1c:
                    54:0a:b7:21:d9:15:43:7c:5f:83:4f:54:59:8b:2a:
                    fc:95:c4:da:38:08:88:ea:67:0b:dc:cb:7b:ee:be:
                    b2:93:90:2b:03:6d:7a:0b:66:b9:5d:2d:8a:ae:2d:
                    da:3b:60:4f:8a:65:43:7a:f7:f1:c5:84:ac:c5:63:
                    28:ac:a0:8f:79:12:ef:53:ce:7d:fd:6c:b4:90:2a:
                    29:e9:a1:f8:f8:ee:69:db:b6:6b:da:c9:6f:e6:82:
                    b3:0b:80:cd:dd:73:9c:f8:4a:1a:92:f3:09:19:89:
                    14:8c:25:86:ba:55:2d:b0:44:e5:0a:42:53:22:10:
                    8f:c4:5e:1b:11:de:78:de:38:66:fc:63:44:7c:0c:
                    5e:37:56:9a:f4:66:af:a5:75:7b:ce:9b:be:51:40:
                    f1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:28:42:3A:C6:18:AC:BA:AF:3E:8D:72:11:28:1E:62:D5:34:89:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/08d9d418-eca8-3d3e-837a-6480ce768ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl

            X509v3 Authority Key Identifier:
                keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5ac0:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:cc:58:a3:34:98:4b:e5:43:aa:48:5d:7a:90:21:aa:42:
         0c:ac:b8:33:3a:6b:1f:3d:83:9a:47:ca:f7:41:1f:38:43:73:
         6e:67:9e:db:80:26:ee:1c:11:d9:f4:ff:f9:d5:72:f6:3d:14:
         3d:94:08:9e:c1:f7:7e:f3:c2:2e:2e:40:ad:c9:c3:89:8b:99:
         31:9f:19:46:e7:30:e2:5e:92:7b:39:01:3a:61:43:90:e0:d7:
         85:28:7d:b5:25:b8:ce:e0:43:4e:30:52:35:87:56:42:df:a4:
         77:96:0b:69:c9:aa:ec:dc:5f:de:0d:05:57:b6:9b:83:8b:40:
         d0:75:b8:75:40:31:98:2c:7d:21:9f:67:6b:9c:30:b0:21:a0:
         dd:85:b0:4b:49:77:9c:da:f5:b6:38:26:18:39:dc:07:5a:25:
         0a:e5:f6:54:12:f1:ef:f1:f4:47:3a:b7:c2:07:15:0e:f8:f6:
         d7:60:ff:ea:9b:3c:2f:8a:f8:8c:bf:d4:f7:81:d0:cd:2c:2e:
         c5:50:5a:45:81:fa:71:6c:f5:65:dd:a5:fe:bb:2c:a8:bd:5f:
         af:05:ba:db:30:65:91:18:22:fc:82:b8:a0:82:62:0e:cb:fa:
         a3:11:1b:a6:39:a7:2b:5f:e7:dc:9a:f1:ad:b8:bd:ad:7a:62:
         39:e4:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:30:25 2025 by rpki-client