Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0139d575-52bf-39bc-935b-b9f52574b724.roa
File:                     0139d575-52bf-39bc-935b-b9f52574b724.roa (raw, json)
Hash identifier:          ir4lFwntyyGPORNlqVh0wkIdsDwU1+x3XDesEOb6odg=
Subject key identifier:   D9:87:77:87:08:CE:13:8A:1C:AC:7F:8D:78:C6:28:98:95:4E:C0:0A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A0C056EE8AA8D6F3DDABE99E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0139d575-52bf-39bc-935b-b9f52574b724.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     2914
IP address blocks:        2001:418:1456:b16::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6e:e8:aa:8d:6f:3d:da:be:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=e7dde993-3af0-4163-ac50-5199245f1c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:26:85:6f:53:58:4f:e3:c7:81:45:a9:90:
                    0e:b7:27:5d:3b:ba:18:69:6c:13:39:01:b4:20:96:
                    f1:ad:76:e9:a8:8a:eb:f4:d5:9e:9b:9e:07:cc:ff:
                    ad:3a:3d:3e:df:fc:d1:ea:c7:06:7f:b3:a5:ae:76:
                    33:9d:38:c6:e4:1e:c2:f1:12:b5:21:31:7e:8b:8a:
                    42:5c:b4:d9:07:57:d1:34:16:ed:d2:4c:48:87:c6:
                    22:ca:9f:ce:d5:a3:6c:34:6e:05:d5:96:67:8b:30:
                    69:e9:f8:1a:94:83:5c:b8:d3:e7:da:e1:bc:3c:6d:
                    fc:d0:50:9d:64:f9:3f:71:97:a1:ba:61:12:f8:09:
                    92:eb:df:2b:97:8a:8c:50:73:2e:d1:4e:fe:d4:0d:
                    dc:08:bd:08:db:a6:51:52:a7:a5:41:73:af:3e:68:
                    90:dd:ae:9e:31:64:1a:26:c9:b7:6d:a9:57:3a:b5:
                    d6:2a:ca:92:4c:a2:76:be:1f:d5:d9:21:91:98:6d:
                    44:ff:b0:15:d7:b4:1e:e1:61:ec:c6:31:21:4f:c5:
                    05:04:b2:69:78:6c:1c:b0:15:4b:b5:6d:81:05:46:
                    94:ba:90:d1:2c:99:7f:97:5e:fa:e7:e6:ec:5d:7c:
                    9b:d4:cc:57:db:46:2a:6c:89:73:fa:34:00:92:6b:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:87:77:87:08:CE:13:8A:1C:AC:7F:8D:78:C6:28:98:95:4E:C0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0139d575-52bf-39bc-935b-b9f52574b724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b16::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b2:65:8e:15:89:59:90:04:d7:47:ce:f5:f7:ea:0e:30:41:
         3a:c3:21:af:be:21:c9:e6:8a:04:c5:d5:34:50:fb:21:f8:cc:
         da:c7:c3:d8:2d:b1:19:b9:56:d0:ed:0f:7b:89:4d:dc:4f:94:
         c8:73:15:67:83:02:20:37:0b:57:e3:91:af:83:96:db:ca:27:
         e5:fb:47:6a:a2:cd:36:4b:b0:dc:ab:65:71:e3:ad:07:0e:f0:
         71:bd:5f:9b:c4:1b:e8:f0:83:e2:ca:5c:f1:59:b8:eb:df:96:
         64:ea:dd:69:d9:57:95:9e:cc:58:24:a6:31:3b:9c:17:90:da:
         fc:9c:f9:b6:60:e5:f3:42:c6:27:19:7b:c4:62:d7:07:71:c5:
         73:4c:fb:8b:8e:66:6b:32:35:a4:bd:a9:38:49:62:21:f5:aa:
         1a:56:0f:2c:62:4a:75:60:b2:03:e5:95:53:83:27:96:59:8c:
         32:19:95:ac:16:0e:44:58:cf:61:c1:ba:fe:82:4a:54:ba:89:
         c3:5d:fb:9b:46:17:d9:29:7b:22:cb:31:f2:72:87:fd:80:fd:
         5a:f0:95:3a:7d:9e:bc:a6:dd:b4:46:7b:92:45:5a:d7:df:95:
         4d:c7:e6:c9:38:d3:3a:a8:26:9c:08:66:09:c4:43:92:b3:cb:
         47:df:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:20:11 2025 by rpki-client