Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
File:                     6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa (raw, json)
Hash identifier:          1yWQrAy1PlCeQEfNMQazvQ2htcwPLrX2kf240xN+QEc=
Subject key identifier:   42:77:16:64:50:D3:C3:2E:B8:5F:9B:B1:6A:D7:8D:A0:0F:B8:4B:6D
Certificate issuer:       /CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Certificate serial:       010D0C9F43285849A784C1F1B355901A8211B880
Authority key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     198949
IP address blocks:        167.32.0.0/16 maxlen: 24
                          2605:d840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c1:f1:b3:55:90:1a:82:11:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=7f556623-61dd-4558-8d09-8720c43db5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:71:28:e3:49:66:05:6c:a0:95:75:e5:38:
                    19:63:08:dc:b5:ef:0a:bb:f8:9e:ba:81:f1:af:3c:
                    1d:6c:11:89:e1:4c:f7:6a:60:ad:3e:5c:4e:3c:14:
                    fe:4d:53:fe:1d:f2:f7:35:e6:54:32:78:c1:b8:65:
                    c4:3c:66:8e:d2:83:df:b1:34:8f:93:ab:2f:84:11:
                    12:13:e9:4d:35:32:a2:1e:6a:e4:c3:01:e0:50:95:
                    81:03:f4:40:aa:1d:f8:64:e9:8a:73:a1:bf:e4:9f:
                    cd:bb:a2:2a:5a:32:62:40:51:da:2a:71:b1:63:d2:
                    87:a8:4d:88:50:9c:b5:57:51:04:dc:a8:9a:db:84:
                    00:24:c6:40:3d:84:9c:95:31:c7:fc:80:de:5c:d1:
                    3d:b7:82:e6:42:48:af:5c:23:ff:7d:6a:5f:7f:1c:
                    d1:b7:91:15:a1:f7:f5:09:22:ca:c4:31:65:c9:cd:
                    42:ad:46:44:31:d1:ef:2b:67:cc:d1:70:dd:9e:09:
                    2d:3f:f6:18:25:41:69:ce:e5:b3:a0:dc:2f:4f:48:
                    db:a9:de:d4:c8:a0:80:ae:de:fc:f4:ee:39:f6:72:
                    e3:ef:38:bc:0c:2e:cd:bb:f7:ff:83:e0:5f:e3:19:
                    56:90:71:8c:59:87:79:16:c3:66:5e:54:f0:c7:e5:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:16:64:50:D3:C3:2E:B8:5F:9B:B1:6A:D7:8D:A0:0F:B8:4B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.32.0.0/16
                IPv6:
                  2605:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:46:35:19:07:bf:f2:09:ff:11:e3:8b:66:fe:a7:df:28:
         d4:51:b3:79:f6:43:51:8a:34:0b:51:e0:b1:2e:56:3c:5e:9b:
         19:a4:f5:f7:c4:ac:b7:06:39:0b:f4:c8:17:8b:e9:d2:9f:ba:
         af:19:d0:50:27:60:13:ff:fa:fc:89:7c:8b:90:a6:44:40:2f:
         6c:68:a3:46:2e:f8:81:66:fe:74:ec:47:d8:a4:b0:69:9a:f4:
         9c:79:b5:33:d4:33:a4:7a:2d:90:c0:18:d8:2d:14:44:5a:f4:
         61:a2:6b:d2:4c:ea:44:13:f3:b1:d5:a4:ef:c7:28:c9:64:e9:
         84:d2:83:80:a5:81:43:14:7f:ea:9d:17:b8:7c:f0:95:f4:00:
         b7:74:81:99:32:28:b8:6c:a7:6c:98:a8:a3:cd:25:5e:37:de:
         ed:78:1a:d7:64:48:9e:08:41:21:b6:43:83:f7:2f:9a:d5:af:
         da:f3:53:04:f6:27:98:26:8b:b0:cb:8d:5c:ae:40:e7:99:29:
         7e:dd:5c:b1:a8:72:3b:7a:be:38:bc:9f:02:c2:26:20:18:0b:
         9d:da:8b:ef:3e:51:ed:10:59:b5:23:86:80:99:a1:1d:6e:fd:
         a3:9c:e3:d4:0c:ad:1c:3e:a8:a6:29:cb:39:23:94:39:e2:d3:
         39:45:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:50 2025 by rpki-client