Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3137d2b2-2dc0-3950-aa2c-e5d7546d17f1.roa
File:                     3137d2b2-2dc0-3950-aa2c-e5d7546d17f1.roa (raw, json)
Hash identifier:          QTlal2CHJC9kL+jV/O7k8u5E0wrAaElO+rQ3EKFrs3I=
Subject key identifier:   66:8A:80:5B:A3:05:77:79:5C:AA:D2:63:07:57:26:5D:F0:09:AD:EE
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A0EC643B4EB54517B6200
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3137d2b2-2dc0-3950-aa2c-e5d7546d17f1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     396961
IP address blocks:        2001:468:2808::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0e:c6:43:b4:eb:54:51:7b:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=14fd5ac3-5d4e-4d3b-95bb-50c558f1df2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:02:5d:8e:59:98:29:6e:06:47:0c:ad:10:
                    c8:db:6b:e9:98:4a:53:e9:9a:fb:17:6f:06:f9:1a:
                    c5:ab:32:40:3a:e6:04:93:a8:8f:db:2f:fd:c2:7c:
                    bd:cb:97:93:c8:74:90:ac:c2:d0:37:a9:58:9a:83:
                    3d:84:a9:ab:7a:28:a4:75:62:c0:56:94:c6:17:89:
                    08:f5:4b:88:2a:a4:fe:55:81:0d:7e:4c:bb:32:f7:
                    f2:95:b2:ab:f9:0d:1a:cf:3f:5b:cc:10:3c:7a:7d:
                    a4:a2:2c:3b:3d:8c:bc:2a:9f:41:c5:33:eb:26:87:
                    46:c5:c5:bc:0e:ea:34:95:9d:b0:da:08:de:20:34:
                    64:2f:13:fe:e4:b0:8b:7e:87:9e:46:31:eb:08:ec:
                    a5:54:6c:25:68:6e:7e:5c:f2:4e:a3:46:fc:7c:d9:
                    3b:e9:e1:9f:4c:b0:13:b2:fa:83:d6:83:7c:c2:05:
                    22:e4:32:c8:d2:b4:92:f4:ca:b5:40:c7:c9:50:df:
                    dc:58:f3:b3:44:68:00:05:a3:05:ce:e3:c1:6a:42:
                    9c:cd:22:04:fc:c9:38:a9:b6:25:ca:77:d1:14:d0:
                    d1:39:e1:5b:7f:75:24:98:df:66:80:ae:04:3b:10:
                    54:37:41:ef:a3:e1:3f:f1:b5:dc:3a:0e:04:5b:7f:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8A:80:5B:A3:05:77:79:5C:AA:D2:63:07:57:26:5D:F0:09:AD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3137d2b2-2dc0-3950-aa2c-e5d7546d17f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2808::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:76:4a:20:99:ea:84:e4:46:b3:89:9b:cc:7f:eb:37:e6:e2:
         b3:ef:4d:ab:6c:86:00:16:84:f3:c3:f2:dc:7b:ef:5f:a9:cd:
         9a:5a:c2:29:20:c4:01:96:44:c3:fa:61:2d:98:d4:2d:d3:e6:
         dc:c2:76:7b:5a:90:6e:ed:85:55:ae:8e:f3:ac:c0:05:ad:9f:
         cd:62:e9:29:fc:5e:35:0f:e9:b9:f0:c1:e1:17:33:d8:5a:0e:
         20:ca:bc:f4:f2:dd:b1:f5:ad:24:05:61:91:b4:e0:11:03:7c:
         81:ee:5b:d5:bd:25:c7:d8:8c:e4:35:6d:31:78:7b:03:c1:7d:
         c4:1f:4b:a0:ff:ac:dd:16:e7:02:e3:4a:f6:21:02:ce:ab:b4:
         a6:11:ab:55:26:38:2c:2f:7e:7a:df:87:80:37:df:0b:a1:a5:
         fa:6a:18:4c:81:8c:7e:3c:c1:b5:8f:18:56:fc:50:f9:de:3b:
         ad:ae:15:7f:6b:65:a3:34:78:e7:61:99:17:2e:ab:67:1d:03:
         13:f2:ff:ca:ba:ad:2b:3c:fe:89:f5:24:a2:96:13:ab:39:6a:
         11:06:2d:8d:d6:b6:ba:0c:d9:39:0f:99:27:d1:13:b3:1e:d4:
         99:6d:cc:8d:5e:03:5f:44:0e:7f:79:f9:a2:fd:21:f0:08:1e:
         08:3b:05:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:10:30 2025 by rpki-client