Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/814c30bf-e571-31b5-9d90-7c37dc92a78d.roa
File:                     814c30bf-e571-31b5-9d90-7c37dc92a78d.roa (raw, json)
Hash identifier:          9zLzZlCaJ2h75+n1U1JB4GucAfa1YCl1aHNzphZ/68A=
Subject key identifier:   E8:F1:15:72:F5:20:B5:80:3A:30:94:05:86:4A:B0:96:C8:1F:95:58
Certificate issuer:       /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial:       010D0C9F43285849EA851FF7ABA9D11789666780
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/814c30bf-e571-31b5-9d90-7c37dc92a78d.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     7029
IP address blocks:        2607:341::/32 maxlen: 32
                          2607:342::/32 maxlen: 32
                          2607:343::/32 maxlen: 32
                          2607:344::/32 maxlen: 32
                          2607:345::/32 maxlen: 32
                          2607:346::/32 maxlen: 32
                          2607:347::/32 maxlen: 32
                          2607:348::/32 maxlen: 32
                          2607:349::/32 maxlen: 32
                          2607:34a::/32 maxlen: 32
                          2607:34b::/32 maxlen: 32
                          2607:34c::/32 maxlen: 32
                          2607:34d::/32 maxlen: 32
                          2607:34e::/32 maxlen: 32
                          2607:34f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1f:f7:ab:a9:d1:17:89:66:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=0d9d630b-ff89-47de-8e66-ad2cd795e406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:ec:f8:27:fe:85:8f:3f:6e:dd:e6:2d:94:
                    ae:99:f0:30:22:57:8e:4f:f2:56:1c:49:ae:f2:ee:
                    8b:22:2e:35:33:ec:88:83:78:bf:59:3a:e5:13:6e:
                    4b:49:0e:8a:a2:d2:67:ae:2b:77:a5:51:9a:cf:8b:
                    05:ca:1c:fd:25:19:30:28:e9:8d:6b:7d:ea:78:ea:
                    e0:a1:87:bf:d5:5c:ce:bd:b7:21:be:f3:79:49:e9:
                    78:d4:9c:a7:89:41:4e:19:1c:ce:26:4f:08:49:86:
                    58:52:80:46:a6:34:ee:d3:96:d2:ff:45:9b:d9:7c:
                    ec:98:45:f3:54:9b:8f:e6:63:b8:0b:a1:73:9a:c3:
                    dd:45:47:5e:04:09:6e:c5:9c:5a:41:8e:c9:82:4d:
                    e0:22:98:18:10:96:3c:a0:c5:0f:d7:54:ed:8f:2e:
                    92:b3:8f:9d:07:63:81:43:1e:20:df:fa:1f:b6:b1:
                    84:f6:c7:47:a2:d4:4c:e9:d1:79:b9:47:69:c9:14:
                    35:cd:f1:b9:d7:fe:0f:37:5d:5a:41:1c:e6:96:5c:
                    99:df:c9:d8:6c:b7:b0:53:06:ca:83:3f:2e:16:64:
                    7a:b2:b8:fd:60:dd:95:de:b8:09:f8:a2:04:2b:81:
                    15:f5:33:05:7c:5f:de:07:65:49:75:21:16:71:f0:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F1:15:72:F5:20:B5:80:3A:30:94:05:86:4A:B0:96:C8:1F:95:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/814c30bf-e571-31b5-9d90-7c37dc92a78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:341::-2607:34f:ffff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:55:26:76:72:af:38:b3:62:cb:ff:7c:05:bb:99:73:43:f0:
         d2:d8:e7:f1:e4:5a:37:4b:a4:4e:a6:5f:95:28:1b:ff:d2:92:
         e7:73:db:7f:1a:5c:af:4f:41:81:1e:3c:be:3c:25:d3:46:64:
         f8:21:a8:01:b1:6d:67:b1:8b:96:b7:a5:5c:39:e1:cc:cd:33:
         0d:1c:c1:f8:cd:84:ac:e4:70:e2:de:d3:3e:28:6c:86:24:82:
         39:db:3c:1d:4c:3d:72:5d:24:3d:0d:83:05:50:8c:d4:b8:f9:
         20:04:9d:11:43:cd:9a:9d:4b:fe:25:49:8e:ec:c2:63:76:20:
         88:f2:2b:11:9e:5b:01:4a:61:6e:03:e0:e5:d7:e7:f9:72:ac:
         43:b1:86:6d:40:a8:1e:8e:a2:cb:70:19:d8:57:06:85:28:2a:
         a9:52:f0:51:8d:ca:46:8f:66:71:93:e7:10:d1:f1:a4:32:72:
         cd:30:d3:62:31:67:dc:f0:ee:11:86:d3:58:20:80:51:a5:51:
         2b:88:f2:10:97:a4:96:f7:01:08:95:c9:d3:ea:c4:26:82:05:
         ac:a4:d6:58:fa:ae:1c:18:b2:0c:f1:84:6d:a5:cd:8c:d9:65:
         cd:8b:9b:be:ac:54:c7:66:e5:6c:d6:72:72:3a:fe:6c:de:99:
         93:7d:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:01:36 2025 by rpki-client