Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa
File:                     9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa (raw, json)
Hash identifier:          VrYr4xPqTQxrGR04uJ8DKAute1uCngtMX0WJV6A+Yeo=
Subject key identifier:   1B:D8:1B:CB:EC:CC:5A:E4:7C:B6:FA:1A:9F:60:06:A4:6E:48:D2:AD
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A23C01D3B1A6A8434C0995500
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2607:f380:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1d:3b:1a:6a:84:34:c0:99:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=e7dee3b8-4633-464f-8f08-756a961ca3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:bb:9d:19:cb:b7:e3:1f:04:3e:e1:c8:be:
                    4f:18:9b:63:c2:80:3a:cf:65:40:db:df:7d:b1:0c:
                    40:80:24:93:99:32:84:9f:cc:e0:a5:9c:3f:63:30:
                    82:36:67:e5:68:30:83:7b:85:1d:dd:df:32:08:9a:
                    29:0f:1e:2e:67:9c:3b:d1:df:63:f8:97:f2:d2:9f:
                    0d:9e:9c:7b:18:96:3c:22:40:a2:61:ad:76:24:69:
                    f4:b9:f1:6c:38:09:42:ff:3d:a0:2e:4a:f4:d4:2b:
                    a6:1d:88:c3:e9:52:07:cb:62:f0:1d:38:0c:69:61:
                    cc:58:7d:59:bd:42:01:43:8f:00:0e:57:00:4e:61:
                    fd:fc:fe:2f:16:a8:c5:53:8b:3a:9c:29:c5:61:22:
                    50:99:9d:f7:95:f9:d5:09:a4:73:c9:18:7e:a5:fb:
                    a5:8a:69:87:ab:80:19:aa:25:eb:a7:a5:cf:0a:b7:
                    12:02:42:4c:51:5f:f1:b8:8e:0b:f1:ca:97:a1:48:
                    cc:d7:90:69:42:a4:18:59:19:40:3e:77:da:b1:c3:
                    6c:7e:ba:05:bc:ac:f8:9a:09:43:7e:e3:c1:7c:16:
                    fc:01:a3:89:d3:04:66:89:7c:bf:5e:3e:40:28:dd:
                    08:30:5f:71:b4:b1:ed:c5:c9:fd:0c:e5:2a:18:71:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D8:1B:CB:EC:CC:5A:E4:7C:B6:FA:1A:9F:60:06:A4:6E:48:D2:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f380:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:dd:65:ee:14:5a:0f:a4:c3:88:91:85:b4:dc:15:c2:e9:f6:
         5f:c8:4f:cc:af:d3:89:3a:6c:b6:e4:db:55:48:c7:98:e7:65:
         98:f1:38:92:ef:0f:1e:80:54:c9:0b:27:42:b5:4c:2b:3f:f1:
         9e:fa:c8:72:0e:9b:1b:22:4c:44:8b:1c:80:aa:db:b8:57:24:
         40:d0:02:04:3b:c5:94:27:de:1e:24:a9:f6:64:6e:1c:73:af:
         1a:d9:69:61:72:83:4a:07:5a:76:57:0e:79:82:d6:fa:ec:4a:
         f6:29:a9:ae:32:5f:16:45:45:c6:06:e5:ea:63:2f:2d:19:96:
         83:76:49:cf:42:ac:e8:06:37:3e:a2:20:51:fc:a0:ea:12:f6:
         67:bb:9f:12:18:e7:1a:86:ab:14:ac:13:f7:cc:0f:a9:00:ef:
         b5:c0:fd:04:8e:02:bd:3a:f2:46:12:64:f7:e5:98:fb:00:1c:
         1b:f0:d5:02:45:2f:aa:52:25:79:a3:77:65:1d:de:31:c3:11:
         d2:c4:b8:3c:af:a6:31:f9:28:08:fb:cd:91:a1:7b:fd:a6:b0:
         fd:b8:ee:b2:8b:1e:49:54:22:39:d6:4e:d0:a6:97:a6:b6:16:
         ac:63:42:af:a9:7c:ae:00:0f:e3:c4:84:14:bf:c5:d7:70:bd:
         8b:cb:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:40:23 2025 by rpki-client