Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78016b2d-b3ac-3914-99c2-78af204af163.roa
File:                     78016b2d-b3ac-3914-99c2-78af204af163.roa (raw, json)
Hash identifier:          Zcoi8L4l576KiYyfV/pGW2LhPhNnsTGwD0J+QwTFgS8=
Subject key identifier:   70:EE:E0:17:1B:D7:04:5F:63:55:5B:1E:91:46:D6:7D:ED:A5:94:41
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A25A5FE38A235E0924B28C7C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78016b2d-b3ac-3914-99c2-78af204af163.roa
Signing time:             Tue 10 Jun 2025 17:20:08 +0000
ROA not before:           Tue 10 Jun 2025 17:20:08 +0000
ROA not after:            Mon 08 Sep 2025 17:20:08 +0000
asID:                     3939
IP address blocks:        2001:418:0:300b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:a5:fe:38:a2:35:e0:92:4b:28:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun 10 17:20:08 2025 GMT
            Not After : Sep  8 17:20:08 2025 GMT
        Subject: CN=beb919f8-c2a7-4a6f-9fbb-47f9937302ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:05:82:88:e9:f8:95:b8:61:f9:d6:6a:0f:
                    64:06:52:a1:e7:8c:36:ff:d8:66:5a:fe:91:29:cc:
                    63:11:92:86:53:da:25:ef:69:99:1a:57:f7:74:cb:
                    d3:aa:2c:d7:b3:5c:11:11:54:47:4e:9a:46:16:f4:
                    6c:59:db:8a:c2:7f:b7:cb:6b:46:d4:24:33:7f:34:
                    1c:3d:1f:81:cb:23:34:c2:53:91:ab:35:2f:5a:1c:
                    c9:9f:73:0b:a4:b5:be:ec:1f:83:32:aa:a0:26:83:
                    3b:79:71:9b:ee:d6:95:f9:58:1f:af:4d:b4:04:5e:
                    5e:a1:1f:0f:8a:f6:6f:dd:fb:e1:bc:73:2b:66:9e:
                    57:df:16:bb:da:04:6a:5a:2e:bb:a7:d3:95:72:b2:
                    ca:5c:93:b2:1d:02:f9:d7:5a:45:8d:1e:d6:22:1c:
                    e5:d8:bc:73:ec:7f:55:ee:44:93:97:6e:85:51:a9:
                    ca:6c:b9:40:0a:07:d8:a5:41:84:d9:d2:ca:2b:c6:
                    2f:d3:df:db:c2:2b:d4:d3:a5:d8:62:14:ea:24:40:
                    0f:99:8a:c1:c1:5a:ce:39:93:da:ba:9f:f9:a3:c4:
                    76:03:db:7b:b2:fd:d6:44:c6:4d:ba:e2:5c:f5:b1:
                    23:f1:af:87:69:4b:c8:a1:7a:0b:32:b5:60:60:1d:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EE:E0:17:1B:D7:04:5F:63:55:5B:1E:91:46:D6:7D:ED:A5:94:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78016b2d-b3ac-3914-99c2-78af204af163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:0:300b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:0c:21:09:34:da:c7:6e:9a:6e:9c:18:3f:79:4c:92:de:
         8a:b5:b3:ae:d3:09:e7:b6:d8:5d:21:c7:45:8d:b7:0f:13:3e:
         7c:b1:ad:3c:91:c5:ab:b4:dc:5a:3a:85:bc:8f:1f:f7:cd:56:
         b0:8c:4f:dc:d6:d1:d4:8f:80:fe:c5:fc:82:7a:3f:0a:ba:98:
         37:5d:72:74:bf:09:66:9c:f8:c6:04:ee:db:55:52:98:e4:7b:
         34:b1:4b:93:ff:c4:90:27:da:fb:a0:4e:13:b2:ec:bc:25:d2:
         78:a5:62:6e:53:b4:40:bd:a0:b4:ed:4c:20:d8:cf:5d:c1:48:
         23:71:b0:65:9e:7d:2f:9a:14:16:c2:71:f8:05:d8:b8:38:13:
         e5:52:9f:e4:30:dc:ca:27:e7:fa:7a:25:da:6b:66:58:da:7f:
         70:32:7f:9d:df:91:db:00:c0:9a:3b:46:38:4d:d7:91:40:fb:
         7e:79:9a:cd:b5:d9:fb:66:94:28:e0:40:12:97:01:44:19:bf:
         14:6d:a8:4a:8b:d8:28:39:ad:ab:63:9a:3a:e2:47:f1:bc:7e:
         df:8b:71:1e:c2:43:ed:0a:04:fe:4a:c1:bb:96:e5:96:7c:cb:
         1d:f5:3e:77:8f:94:70:e4:f4:fe:31:a2:ed:06:77:e0:f0:2d:
         d5:41:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:46:35 2025 by rpki-client