Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/331149f2-c5c0-3d67-bf85-c4d04d046039.roa
File:                     331149f2-c5c0-3d67-bf85-c4d04d046039.roa (raw, json)
Hash identifier:          NYWCk5CKHfUVVteiNdL6fqhbsDuc0zJV5bWfuBASGrE=
Subject key identifier:   F8:E3:44:A7:74:09:A6:D9:A9:FA:55:AE:6A:2B:66:2F:F7:A1:A4:21
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A23C017B3A9B07B4596C06700
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/331149f2-c5c0-3d67-bf85-c4d04d046039.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     2153
IP address blocks:        2607:f380:4:4005::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:17:b3:a9:b0:7b:45:96:c0:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=95e1a8da-d2dd-4f17-b496-85ab6b4276d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:24:ce:8f:8d:c3:e2:c4:f7:0b:0a:46:a8:
                    c7:be:3e:a5:b0:6b:72:b0:19:94:7a:f3:a3:d3:48:
                    f9:09:a3:fa:ae:5b:70:9d:02:cc:15:df:c9:90:48:
                    a6:80:6c:cd:e9:e0:0a:0e:f7:5f:5a:2b:95:52:80:
                    8d:b1:62:79:0e:4e:26:d3:80:be:67:c1:c1:dc:08:
                    4f:53:e4:cc:90:90:18:e6:c0:0e:e1:71:91:ed:c0:
                    ba:92:0a:39:8a:26:ea:4f:55:33:ef:1e:06:77:9a:
                    cc:29:31:0c:33:17:ed:7e:d3:f9:99:37:7d:4e:f2:
                    fb:76:66:a5:3c:e9:b3:d0:40:06:35:b9:4b:b2:e1:
                    47:77:1e:f9:bc:08:3b:f6:f4:ce:21:38:a3:81:03:
                    66:27:d4:52:12:4b:41:a7:0f:de:62:af:77:36:22:
                    56:8d:64:53:81:7a:cb:67:71:3c:df:f3:53:8b:a2:
                    99:59:4b:6a:18:56:ed:9f:e6:63:8c:bc:17:a6:27:
                    b6:33:56:0d:da:90:0a:83:c8:8f:ae:97:10:7d:70:
                    6d:ad:98:62:33:ee:72:1d:ef:bf:4f:bc:d7:4a:c7:
                    ae:bc:c3:0f:98:32:d3:35:a3:60:bc:82:15:eb:97:
                    4f:5e:1e:30:d0:20:0e:0a:45:dd:03:fe:81:d7:47:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:44:A7:74:09:A6:D9:A9:FA:55:AE:6A:2B:66:2F:F7:A1:A4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/331149f2-c5c0-3d67-bf85-c4d04d046039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f380:4:4005::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:fa:e6:4d:0d:ed:56:83:6a:56:b8:8b:ac:ab:99:e6:ce:
         6b:1f:63:0d:9e:3f:d8:38:d1:20:0d:9e:42:e8:fa:6e:1e:72:
         dc:b1:35:cd:62:23:a0:53:09:22:37:7f:4a:d7:03:a4:82:cc:
         9a:e6:e3:dc:45:6b:cc:3d:e0:fa:a7:1b:5e:6a:a0:50:00:5e:
         b8:5e:6f:93:1e:ef:a5:81:1a:64:2f:64:1f:b9:09:a1:7a:11:
         b1:0f:38:ea:14:6d:c4:92:70:3d:09:ee:33:01:66:2d:e0:c2:
         4f:44:73:ad:97:cc:a2:3f:31:91:3c:ca:f6:d5:16:9e:97:d6:
         fd:d3:2d:3f:71:04:ff:8d:0b:7a:8b:76:68:41:ea:3e:91:a1:
         7e:0e:87:e4:b8:83:79:e2:dd:13:93:00:5e:8d:d7:e5:ce:cc:
         88:1c:d8:b2:78:3e:fc:31:d8:c2:d5:26:cb:ee:fa:b4:d2:8f:
         1f:52:28:2b:52:ce:ee:cc:bb:a6:b8:8f:d7:0f:75:f3:b3:58:
         82:a8:04:e1:fa:d4:f6:26:2c:e0:07:e6:22:2d:05:9f:c8:9c:
         82:8c:9f:a4:07:00:51:31:52:33:dc:6c:d8:97:58:b3:d5:82:
         53:35:a3:23:c9:fa:79:5c:55:40:75:2b:45:ce:86:52:30:bc:
         c9:66:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:27 2025 by rpki-client