Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
File:                     40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa (raw, json)
Hash identifier:          fA+0B8MOU/ZnVFT+UrGAcmcqtpPQ2ufImTRyt4p5rNM=
Subject key identifier:   EB:81:0C:AB:B7:4F:06:51:50:96:06:4A:4C:6F:1D:36:8D:20:EA:4F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A173006FD297874A763F5A680
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     3257
IP address blocks:        2001:49f0:d129::/48 maxlen: 48
                          2001:49f0:d12a::/48 maxlen: 48
                          2001:49f0:d12b::/48 maxlen: 48
                          2001:49f0:d12c::/48 maxlen: 48
                          2001:49f0:d12d::/48 maxlen: 48
                          2001:49f0:d12e::/48 maxlen: 48
                          2001:49f0:d12f::/48 maxlen: 48
                          2001:49f0:d130::/48 maxlen: 48
                          2001:49f0:d131::/48 maxlen: 48
                          2001:49f0:d132::/48 maxlen: 48
                          2001:49f0:d134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:06:fd:29:78:74:a7:63:f5:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=87687c3b-8927-45ae-8dad-5c8df671d969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:3e:c0:ee:a6:fd:1c:32:91:23:b2:26:9e:
                    e0:66:e1:0a:c2:f7:9d:31:e1:ca:b0:a1:20:bb:7f:
                    b0:a6:16:6e:a0:9f:ed:ef:93:57:3c:5c:f8:c8:09:
                    ab:51:65:a5:63:4f:bd:b0:32:a8:7e:c2:d4:9e:7e:
                    98:bd:e7:13:eb:62:f2:3a:39:cb:7d:28:78:ba:34:
                    8e:1b:4d:21:01:c3:5c:72:cf:67:ec:87:87:84:6b:
                    81:8d:ee:0f:ec:2b:dd:27:c8:13:87:df:14:5b:06:
                    b8:89:12:44:85:95:6a:c7:b1:30:38:db:3d:3a:dc:
                    ba:be:af:76:29:60:ac:e4:31:af:63:79:b9:90:16:
                    2d:0d:80:3c:3e:74:1f:aa:b5:c8:a4:a6:88:e8:c2:
                    20:f0:26:70:5c:79:e2:ba:59:6a:2a:ac:09:70:99:
                    0c:f4:ac:e1:36:c3:25:22:9e:3b:5c:d0:8d:23:e6:
                    2e:03:05:fd:36:09:9d:17:ed:1a:ea:75:98:e7:4b:
                    e6:84:a5:d4:eb:49:ed:cf:73:c9:fe:b4:9e:6f:ef:
                    89:a7:3f:15:61:47:d8:bf:c8:d1:95:d1:b4:5f:ba:
                    cf:05:08:7c:9d:26:51:7c:78:7b:93:ab:98:98:fd:
                    d6:44:0d:3a:34:7e:19:bb:8f:57:87:be:52:7b:a8:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:0C:AB:B7:4F:06:51:50:96:06:4A:4C:6F:1D:36:8D:20:EA:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d129::-2001:49f0:d132:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:09:ff:b2:f6:06:e8:30:df:a8:2f:f1:40:4f:13:d7:2e:5f:
         f9:ff:c4:9d:be:dc:6f:63:61:0e:3a:31:d1:ed:c4:ca:ac:ae:
         ce:f5:2d:31:87:14:c5:69:07:33:4a:bb:13:8e:1f:75:0b:60:
         91:06:52:66:93:bf:79:ce:2f:4a:fe:a7:ec:3f:fc:f3:16:cf:
         60:95:dc:3e:cd:4a:ab:fe:d9:cc:92:75:8a:78:5f:b8:3f:46:
         48:66:b3:f8:e7:81:7a:22:c3:52:57:fe:28:50:e0:3e:f6:7d:
         4d:6e:7e:7c:68:b8:bc:11:95:00:7d:d7:cd:b4:1f:41:63:e8:
         a1:2b:b7:ee:6e:38:46:4b:66:f7:2c:d6:d1:07:75:7d:f0:96:
         96:d4:d6:f4:8e:12:bd:73:64:34:b5:92:8b:ab:b8:d2:7a:4a:
         00:b9:52:49:e4:c6:04:63:28:f9:86:04:cd:0e:2b:ce:f6:50:
         44:a8:71:3f:1b:fb:e1:6f:fc:c7:cc:d6:ff:92:92:52:0e:c9:
         63:52:89:a5:e6:41:eb:9e:2b:24:e3:fa:6a:4a:28:c2:10:36:
         6f:98:7c:2c:9b:85:85:2a:10:48:97:87:40:0b:fc:90:87:f5:
         ef:22:82:08:2e:01:bf:56:58:e3:a9:2b:73:67:e5:69:45:7d:
         48:55:1e:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:40:53 2025 by rpki-client