Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/9fce198d-64e9-38c7-8583-5874bbe931ba.roa
File:                     9fce198d-64e9-38c7-8583-5874bbe931ba.roa (raw, json)
Hash identifier:          FTmhHsEYBZaYsD9CFF0A1yhyCewnJUlQOUgq81BZOFo=
Subject key identifier:   78:A4:4D:60:D2:49:25:11:50:AC:4E:94:0C:8A:19:D0:E5:B3:98:75
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584A4110540196DA573EC87B09C0
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/9fce198d-64e9-38c7-8583-5874bbe931ba.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     19551
IP address blocks:        2620:28:4000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:54:01:96:da:57:3e:c8:7b:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=96273bc7-2f53-49a4-be12-efbc00696ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:b4:21:89:43:40:69:04:70:47:29:5e:99:
                    9d:b9:9b:90:45:9c:4e:2f:bd:5b:7b:27:d9:11:2a:
                    e0:13:00:c7:6e:67:c8:8e:78:1d:a9:a6:23:62:5b:
                    eb:11:f4:09:9d:9d:3b:8b:d0:6c:25:4b:be:7d:a8:
                    77:3d:48:cc:64:ca:72:6a:6e:ad:a4:ed:a5:41:6f:
                    29:27:62:6f:eb:df:47:01:f1:24:80:6d:12:41:a8:
                    74:54:61:ef:91:40:9d:4d:a1:bf:96:eb:07:0e:11:
                    64:cd:ca:82:e3:07:e2:56:8e:cf:ba:7b:2e:3b:56:
                    22:1f:a5:12:d9:ae:14:d6:b4:6b:d5:f5:ba:e5:61:
                    db:4c:83:67:a9:72:76:4c:ee:66:16:62:c4:68:a9:
                    a3:8b:0b:19:71:0f:51:fc:c8:fe:30:b9:68:bc:ea:
                    ba:ed:af:37:eb:39:64:38:4b:34:b2:5a:bd:e3:be:
                    90:8e:e8:11:fb:86:6b:e6:6e:2f:d1:1f:96:cb:a1:
                    fe:86:13:6c:4a:d4:e5:81:bc:25:1d:5b:bc:66:73:
                    ab:fa:54:45:bf:38:fe:96:fa:f6:4f:e9:58:5d:f8:
                    65:36:63:78:61:fe:c1:45:76:6c:e4:41:0b:cc:92:
                    dd:89:b3:70:80:b6:ef:7e:d9:e1:7b:a6:d8:b9:a0:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:4D:60:D2:49:25:11:50:AC:4E:94:0C:8A:19:D0:E5:B3:98:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/9fce198d-64e9-38c7-8583-5874bbe931ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:28:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:b8:89:47:19:17:da:ec:76:4d:af:3b:fc:18:80:c9:3d:
         0e:2d:7f:d2:45:61:4a:12:98:0d:18:34:0d:9a:07:39:89:9d:
         33:e8:71:6a:5d:83:44:2e:a0:32:34:34:32:52:c5:a0:98:12:
         bf:47:ea:ae:f3:de:b5:52:7d:fb:cf:2c:9c:74:5b:da:4c:34:
         8c:e0:31:38:9a:e9:48:52:61:b3:60:b5:97:6e:95:0a:e6:fd:
         dd:1b:13:52:87:28:26:b3:44:08:e9:06:be:f1:8e:83:8e:95:
         d4:d8:d7:68:36:e7:ef:28:51:d0:fd:a1:98:b4:a1:61:3f:05:
         d2:3d:3c:33:a9:51:cf:09:87:28:be:7d:2f:fd:0f:fb:ab:ab:
         ca:e6:84:e2:17:24:84:82:cc:23:0b:cf:31:77:3c:13:b8:1f:
         cd:50:8d:e7:aa:ca:f6:f1:46:4d:6f:10:ba:98:93:4c:82:96:
         18:f0:5b:e2:b9:25:77:37:f5:9c:15:bb:3f:ae:3b:d3:a9:35:
         80:f0:d2:b2:ab:f1:e8:67:3e:54:30:2a:2b:2c:01:61:b7:1a:
         d7:29:2b:30:5c:f6:4f:f7:97:2b:d1:5b:83:b5:b6:4a:dd:d2:
         3c:00:15:8b:90:f3:51:c0:62:a2:36:23:fc:9b:53:c6:04:11:
         50:7e:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:56:07 2025 by rpki-client