Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa
File:                     384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa (raw, json)
Hash identifier:          O0aZpw95XAVLHrovrzkpt12DW5mJsIgWy8/OWEZ9KMo=
Subject key identifier:   EA:8C:E1:3E:30:D0:00:EB:33:63:6E:DD:16:15:7C:E5:63:CB:AC:9B
Certificate issuer:       /CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
Certificate serial:       010D0C9F43285849E225105755AA312121A85900
Authority key identifier: 69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     393770
IP address blocks:        2607:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:10:57:55:aa:31:21:21:a8:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=4db62ecc-aa72-40da-a0bf-c68701bb09cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:96:9d:1d:18:5f:45:e3:31:57:75:2c:3f:
                    35:cc:f8:02:83:b3:a4:3e:bf:dc:f8:64:fa:97:1b:
                    49:08:6c:1f:ff:39:c6:04:92:1c:9c:d5:a4:f8:a9:
                    c8:8e:5b:3f:0c:4a:03:51:a0:74:c7:d0:2c:8a:08:
                    86:b9:86:e0:b2:e5:45:5d:1e:b4:9d:f1:7d:19:dc:
                    66:0d:ac:4c:85:ac:1a:7f:66:2e:8a:bb:3e:4c:c0:
                    af:cf:a2:f6:8c:c7:b0:d2:d0:09:58:a6:a9:96:6f:
                    18:b2:56:f6:6a:a4:93:b7:61:a0:61:7c:8d:89:1f:
                    bc:69:03:99:58:5e:14:63:84:c7:96:7c:27:86:6d:
                    40:bc:1c:f7:b7:b2:bc:84:e3:cb:1b:16:0c:b0:f7:
                    f0:43:a5:7a:33:ab:7f:d2:1a:ca:cf:2d:ac:9d:82:
                    1c:41:cc:69:22:57:e7:a8:43:08:3c:c8:b7:0a:5a:
                    c3:f7:15:7f:a8:ee:77:16:41:26:35:32:07:92:f6:
                    9e:7b:16:bd:1d:6d:68:f4:5e:41:51:53:5c:04:3f:
                    8a:34:ae:a5:b7:aa:bd:24:30:ec:b6:b7:05:4a:a7:
                    c9:f1:84:f4:64:e7:c9:71:4a:69:18:66:20:ce:f5:
                    a4:1f:18:d4:15:41:06:02:f9:56:24:d1:19:dd:82:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8C:E1:3E:30:D0:00:EB:33:63:6E:DD:16:15:7C:E5:63:CB:AC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl

            X509v3 Authority Key Identifier:
                keyid:69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:eb:2d:b7:d2:07:3d:bb:37:53:54:f0:b3:ee:2f:c4:8c:0e:
         25:74:51:6e:a5:b7:a0:c7:1e:18:1d:85:1f:fd:36:11:8b:e4:
         71:f9:84:9e:9e:40:63:eb:5a:c0:0b:25:79:a8:9e:50:fd:a7:
         69:d0:7d:d7:98:b8:ed:99:99:00:58:a9:3f:e0:cf:2b:2c:06:
         bd:7e:87:fc:a5:df:6f:6c:cc:b4:b4:56:f5:e5:21:2d:5f:93:
         a1:49:96:31:f8:74:dc:18:dc:05:a7:f7:9f:8f:93:6b:cc:c3:
         1a:42:fe:4d:26:5a:84:72:09:31:eb:73:d3:67:16:52:d5:f1:
         fd:a0:ec:ca:8f:ee:83:09:0e:cb:90:99:db:28:8f:04:33:e0:
         43:5f:21:d5:68:a4:bf:43:28:2b:6a:c5:9d:95:ec:94:9c:5e:
         18:6b:bb:eb:d7:07:f9:bd:20:54:55:ce:bb:77:83:aa:79:79:
         db:81:9a:81:7c:a0:e4:4d:1c:76:1f:cb:71:66:53:a8:33:87:
         c5:23:02:2f:84:6e:fc:5d:59:3f:9c:e0:a5:c1:e0:63:b6:b6:
         53:f1:77:fc:33:57:ad:cd:f4:5d:cc:11:ce:a7:e3:c9:cd:88:
         8a:35:f5:9a:9c:c9:a8:b3:4c:ed:4e:27:e1:06:cb:c1:eb:9d:
         7f:8c:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:16 2025 by rpki-client