Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/7d7a3cc0-6a6f-38ee-b44f-906ad752dfef.roa
File:                     7d7a3cc0-6a6f-38ee-b44f-906ad752dfef.roa (raw, json)
Hash identifier:          AA46JoNMaH4WYSr1qaiZKtujVIwLIF7gHvuk8fSQTuM=
Subject key identifier:   4D:B9:76:BA:22:10:59:11:37:5D:A7:BC:BA:20:2E:F2:B0:4A:FA:99
Certificate issuer:       /CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de
Certificate serial:       010D0C9F43285849C0A4DF18B10828939234D131
Authority key identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/7d7a3cc0-6a6f-38ee-b44f-906ad752dfef.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     394485
IP address blocks:        2620:122:a000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:df:18:b1:08:28:93:92:34:d1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=dab896ec-8368-4e22-9a88-7cb87c5d61ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:4d:50:7f:37:5d:08:34:cf:6b:5c:35:74:
                    c2:da:90:37:9b:d0:65:bd:ee:5a:04:ea:61:66:4e:
                    5d:44:66:de:d9:15:e7:38:a3:b5:df:ef:3b:d0:e2:
                    c8:a4:72:4b:bf:30:b6:d9:66:b5:24:ae:dd:d6:57:
                    1a:d5:a4:f5:d7:3a:45:11:cf:d7:7c:56:74:5b:a5:
                    f5:34:ac:1b:f9:37:f1:5e:b9:b0:38:09:16:e8:0d:
                    b0:a0:98:ee:69:e4:dc:5e:ed:aa:bb:fe:2b:aa:f8:
                    48:01:82:34:94:8b:af:6d:9f:e4:55:57:bf:4e:ca:
                    a4:31:41:51:92:c7:a0:1d:df:9b:ec:0c:b7:8b:55:
                    d0:05:01:d3:9e:77:db:37:9b:74:18:f2:5a:e4:03:
                    48:d2:dd:6b:18:39:a9:a2:cf:c9:5c:88:26:17:03:
                    0c:cb:69:7c:2d:49:73:e8:23:ff:96:d6:52:db:52:
                    e0:14:9c:0c:50:60:7a:74:6a:58:84:33:7e:c6:84:
                    5c:7d:bd:65:2c:6c:a8:22:28:cb:22:bd:cd:31:03:
                    fb:43:50:22:05:42:1b:b3:64:e8:7b:95:ce:c4:07:
                    11:6f:5f:1d:a3:59:a8:8f:da:d2:4e:35:98:04:99:
                    23:67:f7:df:5d:24:d1:dd:0b:3e:08:4e:10:4a:c4:
                    14:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:76:BA:22:10:59:11:37:5D:A7:BC:BA:20:2E:F2:B0:4A:FA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/7d7a3cc0-6a6f-38ee-b44f-906ad752dfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl

            X509v3 Authority Key Identifier:
                keyid:33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:122:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:14:f4:14:d6:56:d7:65:1a:cb:95:2e:bd:36:99:7f:39:3b:
         a5:db:e2:11:49:0f:94:f6:51:89:86:c6:2a:bd:3d:4b:12:62:
         ba:2e:0b:50:35:b8:fe:89:3e:75:c1:f4:b9:2e:e5:94:bd:2f:
         79:2e:f1:ea:23:ae:78:f0:b5:ef:3a:92:e7:e7:6c:eb:dc:41:
         cc:bb:cd:7a:a3:9e:ff:6c:37:04:b7:30:5d:9c:1e:73:89:3e:
         22:f6:26:66:ec:72:2b:bb:7a:bf:6e:3b:67:0c:a4:04:79:13:
         b5:ab:94:36:39:67:32:b0:b6:35:8c:68:e0:0e:06:54:df:94:
         9f:73:38:8c:18:b3:1a:10:94:5d:97:d7:de:a8:86:51:3b:1b:
         9f:f5:dc:4f:8c:ac:6a:b6:76:d2:12:35:24:4f:c3:57:fc:49:
         f0:e7:ed:23:6c:90:84:5d:4f:ee:06:02:b3:79:2e:8a:c0:bb:
         62:95:86:14:af:35:ff:b2:2d:fa:eb:79:c3:6c:d6:59:6d:e9:
         9d:0e:6d:c0:eb:08:ad:a6:a4:d2:5e:be:3a:a4:23:c6:c9:19:
         b5:77:dc:ea:e4:03:5c:d9:5a:7f:7f:3e:8c:21:ed:73:73:bb:
         75:48:5e:f1:49:54:c1:df:11:e2:8a:90:e5:86:7f:86:2d:5f:
         b2:09:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:47:14 2025 by rpki-client