Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d47632ad-7d96-3e43-8cf8-52c716a229fc.roa
File:                     d47632ad-7d96-3e43-8cf8-52c716a229fc.roa (raw, json)
Hash identifier:          uL78+q0ngEonrJs9OzBjfeDHISIds7XNm0gi6nBecxI=
Subject key identifier:   B1:A6:65:95:A3:D3:23:A2:04:39:2C:90:B2:DA:24:33:CA:A6:0F:F4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584ADD667EAA0E2A5A79F69BE640
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d47632ad-7d96-3e43-8cf8-52c716a229fc.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2001:418:4001:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:7e:aa:0e:2a:5a:79:f6:9b:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=fe1f5ada-5a4f-435a-ac03-80a9c16d4a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:5e:e0:bd:1d:74:bb:de:b3:7a:d4:30:00:
                    97:3c:b1:1d:19:bc:c2:d0:6f:50:ac:e7:2d:93:cb:
                    6b:f6:73:8f:3f:30:c7:af:ed:79:f1:31:69:ea:85:
                    62:01:89:38:2b:f7:fb:4a:6a:49:ed:24:b0:93:57:
                    b7:b2:5c:c3:01:b4:cb:6d:d4:34:92:f7:75:f8:a0:
                    7d:ab:8d:b6:70:ef:16:f2:26:11:60:5d:1e:a1:e9:
                    55:c2:3a:b8:9c:01:c4:7c:13:92:07:8b:bd:36:7f:
                    60:0b:89:0f:38:71:9b:28:74:7e:8a:c3:7b:16:38:
                    31:f0:a5:d8:b9:65:f8:a8:0f:5f:22:7c:e3:37:77:
                    59:39:e1:f1:cc:ba:d6:1b:9c:38:ae:87:ac:4d:8b:
                    c8:d1:4b:fb:7e:f9:e3:59:c0:00:28:78:59:77:0e:
                    7d:28:01:91:34:4a:36:a5:79:db:53:9e:24:37:f5:
                    ec:e7:25:a3:66:03:f8:3b:69:8c:4e:02:fa:45:2d:
                    9f:4c:49:f3:be:b5:29:30:dd:7c:6e:c6:8d:c7:6a:
                    b3:65:e0:23:c4:87:fd:d7:11:ca:02:a0:17:7d:dc:
                    07:e1:55:93:29:fb:c1:a7:05:7b:38:dc:3a:61:03:
                    b4:71:8e:15:83:02:26:5e:ce:c9:19:42:95:c2:83:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A6:65:95:A3:D3:23:A2:04:39:2C:90:B2:DA:24:33:CA:A6:0F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d47632ad-7d96-3e43-8cf8-52c716a229fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:4001:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:15:41:e7:e3:de:ff:5e:e9:b4:e8:ae:5d:f3:9f:2e:7d:
         4b:1c:6f:20:7c:42:62:33:38:df:40:e8:b9:54:a0:d1:7a:52:
         15:78:5e:00:af:52:7b:3d:57:e6:8a:91:35:3d:7c:1a:8b:f8:
         a7:5f:22:be:8a:a2:21:81:cd:65:8c:cb:8c:ac:5a:55:8b:f6:
         47:7b:51:63:4e:c5:7b:45:ab:22:de:a2:18:d5:3e:2a:57:4a:
         07:69:52:39:9c:86:02:c1:31:0a:33:e4:2d:61:93:1e:db:10:
         00:35:0c:ba:d9:d4:8e:de:0d:8f:2a:c8:06:9f:73:1d:cc:ad:
         db:96:31:37:32:35:ee:72:f6:53:b1:44:69:ae:d6:ca:85:74:
         1a:bd:7d:0d:c3:0e:b1:27:2a:c7:c1:1d:fe:2d:7b:1b:1f:1f:
         77:a5:cc:3f:21:7c:7c:72:cf:9c:c4:02:a2:ff:e8:cd:d9:45:
         3d:cb:90:00:51:ff:71:5a:2b:99:3d:95:22:58:98:09:05:3a:
         81:4b:08:ac:ee:40:1b:70:92:9a:37:1f:17:02:89:20:69:b8:
         dc:a6:9e:40:84:cf:d1:70:5e:a1:4d:c9:0d:89:99:38:60:2a:
         20:a3:c3:6a:6e:55:5b:48:cd:60:50:54:b3:1c:f6:a0:f8:77:
         04:9b:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:18 2025 by rpki-client