Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa
File:                     d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa (raw, json)
Hash identifier:          T7TvUX2dS/9EjfsMAl/hHiHoYnr4Atkwxzpbk709JIU=
Subject key identifier:   1B:11:4E:54:A0:62:1B:3E:41:FA:78:5E:51:41:EF:D5:82:82:A9:CA
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AD9365EB1561086D2EFFB63E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2001:418:1401:300::/56 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5e:b1:56:10:86:d2:ef:fb:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=a54c254f-2013-4a36-b5f1-e410303f0166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:b2:1e:49:74:d2:f3:1a:9e:5a:37:db:c7:
                    43:54:e6:e6:13:8b:70:c2:c7:0a:78:7a:c4:5a:a2:
                    e1:27:98:7e:0a:33:38:11:83:7c:71:f3:d1:7e:03:
                    d9:7f:c3:91:d3:e7:ce:5d:77:62:47:45:be:58:75:
                    a5:90:41:bd:46:c3:98:7e:c3:1b:7a:63:8b:55:49:
                    cb:0f:02:42:52:cb:4d:c1:69:c1:f2:dc:0f:fe:5f:
                    91:5a:1d:4a:f6:2d:f3:6a:64:02:43:a5:64:7f:45:
                    22:e2:38:01:f1:24:3a:75:3d:38:05:e5:4a:75:7c:
                    84:aa:d3:0f:bb:6b:87:7b:91:7d:21:b4:c4:87:ba:
                    30:d5:e3:dc:e4:59:6f:89:8d:14:bc:a1:8c:38:9d:
                    71:ee:4f:1c:c6:1d:40:c3:cf:64:97:2b:65:68:0e:
                    6b:29:00:bb:ca:78:e4:20:97:ba:bb:51:8b:f2:48:
                    32:a4:a7:4f:bf:e0:5a:d3:6c:20:21:a8:63:07:dd:
                    92:e8:b8:c6:fe:fb:70:a3:23:d5:0c:f6:78:5e:fd:
                    f7:2b:43:ed:09:66:68:34:43:c7:ba:82:ef:a9:f3:
                    d8:a8:62:3a:e2:e4:1e:02:3c:3b:07:b6:f2:16:f2:
                    c6:f1:f5:37:c2:21:49:fd:77:44:0f:15:3a:30:3c:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:4E:54:A0:62:1B:3E:41:FA:78:5E:51:41:EF:D5:82:82:A9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8dda376-2bb6-3ce6-9411-893b38b5bc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:300::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:d3:6e:40:49:ef:b5:4d:af:65:8b:a3:fc:0a:a1:e4:0b:
         2b:7d:63:dc:37:85:09:31:63:77:a6:b6:e1:a1:bb:03:a2:8d:
         5f:76:98:d6:ee:a0:56:53:9f:aa:d7:94:3d:22:37:72:68:b1:
         39:33:7f:ea:89:81:62:ed:ed:1a:5b:bd:98:c1:1c:32:5f:c5:
         7d:35:63:7b:a2:b2:b0:b4:1a:6e:76:e7:28:ae:5b:f1:45:76:
         e7:9e:c7:d9:21:b6:45:74:cb:24:6b:09:ea:7e:15:6b:7a:16:
         12:6c:8a:85:66:e7:cf:b5:44:cb:80:0f:cd:1d:5b:54:ea:78:
         03:c3:24:d6:dc:3e:2c:ce:4a:16:83:8b:49:ab:78:53:eb:6a:
         9d:02:64:bb:4a:5c:e5:9a:e1:5f:67:67:a1:58:0e:8f:3f:78:
         b6:98:9b:4e:44:5d:f9:e1:a9:e4:9c:cb:98:d4:0d:71:62:f2:
         cf:1a:87:4c:90:68:d1:44:0d:8f:ca:cf:e6:9b:b1:d4:a1:26:
         99:f0:72:b7:c8:c9:4f:c8:1b:43:cb:6b:a0:e2:03:e5:06:77:
         30:8f:f3:bc:d6:8f:b9:d3:df:ae:43:51:d3:d4:39:67:d5:80:
         f5:a7:5e:68:fa:68:dc:d6:07:34:d7:69:e0:68:8f:dc:04:4d:
         67:14:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:00:08 2025 by rpki-client