Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f85deae-7d8f-351e-8668-d2aee6cdd02c.roa
File:                     5f85deae-7d8f-351e-8668-d2aee6cdd02c.roa (raw, json)
Hash identifier:          Y1hveizM4g5DiSuolWEsXFRTsxIcjRz4LzF5bBeea5A=
Subject key identifier:   E1:0C:53:47:64:44:EB:1B:C3:FC:DE:66:7F:C4:C4:04:03:C8:E3:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF26F9966F510F43A3A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f85deae-7d8f-351e-8668-d2aee6cdd02c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:8018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f2:6f:99:66:f5:10:f4:3a:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=159aca5c-9720-4347-a6f2-5a998bd8e085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:26:91:73:b5:6f:06:9a:cb:90:d3:27:3e:
                    10:72:98:05:37:6c:f4:96:d6:98:6e:63:11:90:a8:
                    11:7e:e4:2b:8e:97:a1:0d:45:22:b0:d0:2b:4b:59:
                    5d:72:70:90:f9:c8:d9:e7:f5:4b:4c:40:94:75:d4:
                    8d:d0:13:48:26:7d:56:30:2a:fb:64:f7:3a:59:40:
                    f0:e1:07:2a:ef:cc:ea:a7:a7:f3:8b:54:c8:8f:e1:
                    3a:49:17:d0:fe:af:e3:15:f6:89:45:70:3d:70:35:
                    03:cd:21:5a:3b:4d:19:6c:90:27:bb:77:53:5a:f7:
                    14:be:26:2e:38:4a:06:9b:28:4f:90:05:1d:83:53:
                    93:38:90:a4:a6:7b:0d:92:aa:54:b8:ec:a3:6d:ca:
                    e0:76:20:69:0e:d5:f8:92:7f:d1:b4:a8:38:55:d4:
                    8a:af:35:08:57:b5:b8:16:52:c3:d1:07:07:cf:e5:
                    fa:d4:0a:71:1f:27:e6:54:9e:a3:df:cf:de:cf:fd:
                    ff:aa:2e:4b:76:08:78:f4:bf:3e:fb:36:4a:28:a6:
                    78:e4:d1:7d:ba:92:be:4c:c5:8a:34:cc:cb:17:cd:
                    e8:3e:ba:d1:78:bd:8b:39:7d:2d:a0:0e:e2:4c:19:
                    60:e5:fb:05:14:fa:4d:22:1b:fa:83:f4:1f:6f:6d:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:53:47:64:44:EB:1B:C3:FC:DE:66:7F:C4:C4:04:03:C8:E3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f85deae-7d8f-351e-8668-d2aee6cdd02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:88:33:95:13:17:f3:ac:ec:0d:f5:17:16:71:36:38:90:41:
         66:ac:be:45:37:be:77:4a:a7:0b:e6:04:11:1e:6d:e6:f4:0d:
         46:35:27:72:49:10:ec:2e:31:96:41:10:12:6c:d0:a0:3b:e5:
         7b:bc:cc:8e:cd:6d:04:22:2d:f5:bc:9d:85:be:e3:e2:c0:79:
         2f:f8:16:4b:bd:00:bd:10:d3:2e:82:05:73:5c:14:55:a1:08:
         b9:8a:8f:e0:e5:64:97:4b:18:f7:5c:80:1f:f9:ee:63:8e:dd:
         a4:78:dd:f6:47:21:f9:fb:7f:62:24:e1:b4:5c:cc:f8:93:d9:
         a1:8a:0e:ab:2d:4d:dc:b9:4e:f8:e5:c3:e3:80:ff:10:bb:d8:
         cd:9b:01:e6:7d:99:94:84:55:63:79:7a:07:17:44:9b:a6:8f:
         92:ef:eb:96:b8:c6:97:c4:97:9d:50:67:e6:90:49:0e:c4:bb:
         e5:25:30:25:c9:2e:21:d1:30:69:42:96:a3:09:53:a3:06:d7:
         c5:b3:5a:2f:dc:fb:e3:e1:ff:de:a7:ef:0e:04:5c:91:36:15:
         63:e6:f1:7f:5f:16:4f:fa:b1:27:38:a7:ba:62:8f:c2:d0:1a:
         33:b6:29:f7:88:1d:1a:d7:2e:83:e7:71:7f:1c:66:fd:5d:dd:
         ab:5c:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:14:46 2025 by rpki-client