Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa
File:                     3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa (raw, json)
Hash identifier:          P5YS+jXY/ODukpnm4h9nicMoBJnXmFGK6057/5SYFsY=
Subject key identifier:   0C:F2:72:A3:79:75:A3:2F:83:DE:16:2D:4E:CB:6B:3E:3D:59:B4:52
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584A2ABAC9E76AC747FD96718440
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     30361
IP address blocks:        2001:18b8:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:c9:e7:6a:c7:47:fd:96:71:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ea89f5a7-934f-40a6-a123-bbc43b9ecf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:67:37:90:8e:e2:9c:8b:4e:85:69:f3:15:
                    6a:43:e7:0a:9a:8b:3b:b9:bd:ec:68:9f:5e:72:6b:
                    e0:a2:34:a7:1f:58:50:77:fc:31:54:1f:a5:c2:83:
                    12:af:b3:0e:94:91:88:21:1c:99:0d:ea:60:fb:f7:
                    53:13:5c:82:fc:3e:b0:ad:25:ab:de:6e:9f:07:67:
                    0b:ec:76:52:2a:13:f9:ef:9d:ac:94:67:1a:36:e8:
                    db:5e:aa:a3:a4:57:b0:02:f9:b0:09:c6:f3:e0:3e:
                    b6:a3:6b:05:84:09:b3:9a:f7:7b:f8:e1:fa:f7:11:
                    cd:7c:3a:a9:28:2c:14:86:6b:36:f9:18:40:85:f0:
                    e8:6b:d1:7f:6b:30:49:36:9d:e5:3e:15:97:1f:15:
                    58:41:81:ef:c7:5d:1a:47:c0:87:6e:97:05:d2:d6:
                    62:7c:79:db:9f:e1:4c:02:ee:de:52:4a:73:f3:ff:
                    a1:ad:9f:52:fb:b6:48:86:f6:d8:ba:89:95:73:08:
                    92:d9:8c:be:13:db:bc:76:25:48:c0:9e:96:fd:94:
                    2e:af:03:ff:a6:c9:d6:0a:21:52:3b:b2:44:48:b4:
                    f4:a9:d5:4a:b1:c4:5e:90:e3:63:fa:72:0b:f5:e9:
                    d0:9b:2f:18:ab:ba:29:4a:5b:49:bd:12:4b:f0:5f:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:72:A3:79:75:A3:2F:83:DE:16:2D:4E:CB:6B:3E:3D:59:B4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:18b8:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:56:72:f5:8e:b5:d2:0f:6e:6a:99:3f:78:01:6d:12:49:
         5c:67:e9:6a:57:f4:0b:1e:fc:fc:34:6e:9d:ca:0b:5b:cb:5b:
         fc:26:30:0a:fb:78:9c:b6:f7:53:ba:78:a4:e2:b3:49:b9:f1:
         49:9f:3e:bb:6e:c8:de:8b:09:50:03:73:ea:ed:af:2d:54:d0:
         ab:d7:8d:62:70:17:fc:a6:c9:6e:e6:43:e3:c6:ba:13:c6:db:
         5e:ee:ff:58:62:69:f7:95:82:89:04:08:36:3d:d3:6a:61:a5:
         6f:d9:c9:5f:75:ca:64:a6:d6:c5:59:35:f7:d7:25:29:11:91:
         b8:3d:36:69:6a:dc:c2:53:8e:8f:16:03:21:fe:79:c3:4a:22:
         da:3e:ce:91:ba:a7:49:1f:24:d1:55:56:0c:c6:9b:07:16:13:
         da:3a:80:5a:b4:0b:02:7d:d0:36:7d:63:8a:7c:6f:50:46:01:
         90:34:ab:03:cb:24:5c:ae:cb:66:f0:28:ad:c5:ee:42:ca:b0:
         e9:d4:14:a2:63:02:65:e8:74:83:cd:48:44:90:30:9b:db:a6:
         09:2a:dc:f6:1b:66:fa:20:c4:8a:3a:06:84:b4:18:c3:0e:a7:
         03:a8:4d:91:44:d6:ca:f1:cd:3d:b6:7c:21:cf:d5:31:db:ea:
         ad:95:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:52 2025 by rpki-client