Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa
File:                     8b8945c7-3242-3a15-83b1-616402b53b63.roa (raw, json)
Hash identifier:          ZU3QLuXroJpqJbQ140HwuMwCFD8cILd/EKQhLFCrtkI=
Subject key identifier:   D4:AA:13:8B:37:3C:AF:D0:F8:A3:D0:AE:A0:BA:25:00:05:E2:47:BD
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285849B57A11EEDB9E0FB4639E1B00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     8987
IP address blocks:        2605:4300:2c17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:11:ee:db:9e:0f:b4:63:9e:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=3b0efb41-553c-43ac-9d60-98d5081dafc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:8b:9b:d0:89:01:2d:e3:4f:b1:44:04:6c:
                    24:00:54:a2:58:19:57:b7:d1:1e:33:2f:7a:1f:d4:
                    ad:d7:bf:75:a7:fa:e0:0c:39:42:93:b6:ab:b4:cc:
                    39:2a:84:65:40:df:3d:a3:74:b6:f0:90:b6:74:38:
                    d2:23:01:e4:d8:3b:14:22:d6:b7:be:53:ff:36:40:
                    b9:45:18:93:f3:58:4c:64:5b:39:46:6c:26:1e:23:
                    93:ea:23:84:39:96:ae:47:09:93:e1:2f:18:98:6f:
                    f6:cd:36:f6:53:05:7a:88:24:73:1b:3d:c7:19:4d:
                    c4:bf:eb:d2:2e:1b:f4:89:1e:ce:28:0e:d7:63:82:
                    cc:7c:1a:1f:3d:97:07:5a:21:43:9f:90:87:9e:1c:
                    3d:d5:26:48:63:0b:7c:5d:f6:12:f0:7f:c9:42:31:
                    7c:4c:cb:0e:aa:19:7f:8d:c7:f9:0e:bd:9c:bc:1b:
                    c8:96:51:d8:bb:48:8f:59:fd:08:c7:c4:72:71:ac:
                    49:a1:ab:a6:89:78:3e:2b:e2:61:3b:6d:a0:50:76:
                    71:b3:97:db:a4:fa:05:53:4d:95:bb:d4:06:f6:bf:
                    0c:6f:8e:53:62:ce:6d:41:28:72:eb:d9:02:40:9a:
                    ba:e9:e9:91:e0:be:fe:f2:3c:59:cd:18:63:31:dd:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:13:8B:37:3C:AF:D0:F8:A3:D0:AE:A0:BA:25:00:05:E2:47:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6b:fc:e5:67:7b:d1:ce:d4:68:0e:e8:58:40:ab:75:7c:a4:
         ca:e7:17:60:2b:1f:53:cb:fd:df:69:8d:ef:22:c4:04:dc:1b:
         51:d1:0a:2c:3c:48:53:99:e0:74:90:91:7e:fa:b4:9a:0a:a3:
         16:96:ec:24:60:86:f7:27:fe:83:5a:48:ab:b8:b8:a0:96:33:
         f0:dc:2f:de:88:23:4a:59:d4:f8:64:eb:a5:08:60:67:e6:a2:
         d2:ac:7e:a0:cf:d5:13:67:82:e4:ac:6b:3d:d8:36:9a:45:1d:
         4f:24:c6:8b:fb:56:4c:f5:65:a0:1a:e5:d2:b9:dc:dc:4a:31:
         31:5a:ca:2c:8f:44:8d:17:ed:8e:6a:7c:e6:83:70:89:d7:ca:
         31:a7:c9:62:6a:64:1e:fc:13:47:ee:13:7f:bf:cb:91:90:2a:
         6b:00:4c:07:00:17:92:31:b6:64:fa:c6:48:b7:e5:66:8d:73:
         c6:19:a1:c2:c5:b6:51:a1:4e:cb:74:c7:4a:68:e0:54:8c:2d:
         f5:f4:1a:c8:cb:3d:8f:d8:00:c5:aa:57:7c:b4:31:0c:af:b4:
         89:28:55:73:33:31:b7:70:26:f4:67:a4:b7:ec:62:87:2d:63:
         85:55:a2:83:00:9b:35:88:b5:8b:f3:6b:94:34:84:9a:be:6c:
         0e:75:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:03:52 2025 by rpki-client