Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa
File:                     8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa (raw, json)
Hash identifier:          4PqLGlCQaMvQrt25YO0ufrv9MWvHlmCsgJ38XX8/xdM=
Subject key identifier:   95:54:5A:AD:3A:A2:D6:49:40:D1:62:04:0A:7B:88:E8:88:B5:89:CE
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F432858498CFF011B3E6C23C65CE40F00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     209181
IP address blocks:        2607:6b80:6f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:01:1b:3e:6c:23:c6:5c:e4:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=89004377-0003-42b4-9359-f08386b29885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:21:ab:c2:91:6f:b0:7d:07:e4:bb:54:95:
                    a4:52:c9:b2:71:78:c5:b4:5b:45:35:5b:ff:49:4b:
                    9b:b7:7f:e7:d5:fe:02:ae:c8:31:b0:48:21:01:f1:
                    f5:19:e4:3c:c7:21:d5:df:2d:cf:b7:30:5d:86:1e:
                    16:c8:16:20:07:e7:39:c6:68:a5:9b:51:60:56:25:
                    ed:b7:91:75:45:2e:02:d1:ce:54:b9:35:78:26:04:
                    c3:8a:5c:d8:26:54:ef:24:17:15:d1:90:3c:57:83:
                    21:d8:87:05:c9:ff:40:eb:89:35:d4:f1:f3:64:14:
                    19:0b:f4:25:c3:6c:8f:0d:0c:28:66:10:db:ee:c4:
                    67:54:32:72:10:18:54:01:a3:e7:11:4f:40:0b:b8:
                    86:e1:86:3e:5f:63:90:23:f8:a5:c1:a6:f7:85:38:
                    81:0e:0f:cc:28:40:4c:6e:48:9f:f1:8a:f2:90:eb:
                    f6:d2:d6:07:fb:b0:5f:09:ca:9b:ea:36:4b:ff:15:
                    08:4a:b0:17:e3:a9:2a:8b:59:01:0b:5a:61:ed:a2:
                    c1:cb:0a:ed:36:5f:ab:f8:0f:45:89:b1:38:c4:a1:
                    bd:6f:00:96:15:b8:b4:a4:18:f3:b8:de:84:28:89:
                    d8:09:06:07:aa:c4:20:db:8a:d6:34:d1:f0:e7:5e:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:54:5A:AD:3A:A2:D6:49:40:D1:62:04:0A:7B:88:E8:88:B5:89:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c5:46:cb:f2:1c:0a:b9:ed:72:df:b3:8c:8e:31:65:bb:37:
         c7:8b:91:97:76:47:02:ab:07:31:ce:78:3f:c7:4e:f5:dd:fe:
         4f:1d:e5:52:7a:17:c4:40:06:bb:68:b9:8d:04:1e:c4:3b:e0:
         a4:92:c7:21:bb:01:db:5b:1d:cd:24:41:14:ab:3f:3a:0e:75:
         8c:f5:1e:06:34:3b:7d:88:1c:d6:7a:bd:17:b6:c9:a9:9f:f2:
         92:1d:23:48:38:14:0d:76:5a:2b:9f:7d:a7:ec:79:8d:89:24:
         0e:e1:60:2c:82:be:a3:d1:24:15:5d:2a:4b:e1:b1:f1:a7:24:
         53:3d:d4:37:3e:9d:95:31:68:24:cc:da:36:8d:52:99:ec:63:
         58:d1:ca:2c:61:a0:89:e3:a6:b1:d5:3b:f6:23:d8:00:a4:4f:
         1b:44:10:c4:82:20:45:5d:2c:e5:ff:c3:81:e0:fe:47:1a:f2:
         32:4b:c1:9f:24:f3:90:56:eb:f4:8e:84:d4:df:d8:b4:0b:22:
         a6:31:8e:a3:86:cc:10:9a:69:91:80:54:58:c6:f1:a7:f3:a7:
         98:b4:ef:d8:d8:8d:fa:7d:93:d8:da:a7:b9:a4:44:4d:13:6f:
         bf:56:c3:7d:4f:95:df:4a:74:ed:9a:fe:3d:35:84:ad:a0:b7:
         b3:22:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:35 2025 by rpki-client