Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/9f909801-1543-3c12-ac39-8fa51e349a2e.roa
File:                     9f909801-1543-3c12-ac39-8fa51e349a2e.roa (raw, json)
Hash identifier:          LfHQr0hdcuz9evnxYKby7N6vkZXdK1Kbj1/ysUlF+sU=
Subject key identifier:   AC:F5:11:D5:5D:6F:5C:D0:34:F8:72:9B:40:0D:18:BF:7C:7C:42:7C
Certificate issuer:       /CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
Certificate serial:       010D0C9F43285849D7F17AC6FE1E25EE2C529240
Authority key identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/9f909801-1543-3c12-ac39-8fa51e349a2e.roa
Signing time:             Tue 13 May 2025 21:19:10 +0000
ROA not before:           Tue 13 May 2025 21:19:10 +0000
ROA not after:            Mon 11 Aug 2025 21:19:10 +0000
asID:                     16509
IP address blocks:        2620:31:8004::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:f1:7a:c6:fe:1e:25:ee:2c:52:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8451ed63-cb69-4202-bd4e-4bb93315e13c
        Validity
            Not Before: May 13 21:19:10 2025 GMT
            Not After : Aug 11 21:19:10 2025 GMT
        Subject: CN=5e5f88e5-12ef-4b20-a2be-c013f559d014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:be:69:9a:4e:27:cb:f3:e1:eb:1e:01:e1:
                    43:f8:cf:2c:b2:8f:44:28:30:4a:12:ab:08:71:80:
                    90:21:f4:5b:9f:bf:e7:c1:d4:02:ff:5b:29:c0:38:
                    82:08:f4:f7:b4:e9:9b:04:d2:1b:0f:47:8d:d8:b5:
                    98:24:03:e3:a8:b4:10:8e:49:07:d2:17:7b:c1:d0:
                    26:4a:91:ba:12:27:be:9b:0a:eb:74:41:c2:ba:ed:
                    31:b6:b2:eb:f2:cd:8b:d4:30:f7:2f:a1:d2:78:61:
                    6b:68:a5:c9:30:f9:7f:53:42:28:3a:c2:9b:c8:5e:
                    a1:25:a4:18:db:9d:48:f6:2a:60:79:45:0f:56:79:
                    25:4a:05:a8:45:e3:ac:6d:d0:49:05:ba:cf:8a:15:
                    29:5b:fe:83:85:27:53:07:73:59:f5:64:85:15:ce:
                    fe:8a:23:6e:95:50:08:9a:7e:23:86:f1:9a:8a:11:
                    ae:91:31:3f:78:1e:91:96:0d:d4:72:8a:2a:f1:b0:
                    a1:ea:60:90:47:a4:32:2e:c1:4a:c5:74:ec:0d:f4:
                    18:50:01:db:30:e5:df:76:f7:0c:10:59:25:5c:9c:
                    53:d0:4e:85:6f:c8:20:b4:a5:55:8a:00:e9:4d:96:
                    da:7e:9d:25:b0:ed:db:14:14:02:18:10:4e:b9:94:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F5:11:D5:5D:6F:5C:D0:34:F8:72:9B:40:0D:18:BF:7C:7C:42:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/9f909801-1543-3c12-ac39-8fa51e349a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.crl

            X509v3 Authority Key Identifier:
                keyid:7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:31:8004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:95:72:68:e4:0c:dd:a4:e6:4d:6e:57:0a:ad:dc:bb:3d:06:
         7a:c6:8f:19:f2:76:58:af:ad:69:cf:3e:75:74:00:21:da:c9:
         9f:b7:59:1b:56:07:b3:56:00:0f:2f:34:7a:fa:0d:0c:b5:bb:
         2a:94:bb:73:b2:ed:8b:38:fe:c1:7f:ce:dd:53:83:22:32:85:
         c5:06:58:64:a1:5b:75:53:d7:0c:07:e3:0b:27:09:79:0d:c9:
         5c:b2:5d:8f:f0:8a:e1:43:19:d4:b5:2b:45:0a:4a:33:48:7d:
         0c:1a:21:25:8c:d9:41:aa:31:22:d8:7d:08:1e:de:39:d7:dd:
         1a:3e:77:6b:9a:7d:76:7e:76:00:b7:3d:08:6f:bb:81:f3:bf:
         31:e8:e6:ad:bc:06:68:ad:11:94:89:07:74:a8:eb:90:9e:e9:
         bc:d9:93:37:e1:3f:a6:af:a2:55:49:0d:cb:b6:0d:b6:74:3f:
         23:f9:19:ed:22:1a:da:db:6f:bb:97:81:1b:ec:df:31:56:fa:
         f7:1e:5f:4d:b1:51:3f:9a:d3:4b:0b:7f:a9:42:b2:f6:e8:14:
         17:bb:52:01:f7:38:f0:1f:75:a1:64:23:94:a4:0d:d8:b9:96:
         e9:4a:75:f8:72:56:59:07:c1:cd:67:5d:b3:2f:7f:44:4f:68:
         8a:24:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:51:13 2025 by rpki-client