Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
File:                     f6285d45-9269-3c7f-af51-21be86401f66.roa (raw, json)
Hash identifier:          0agXJmI5gdoB6/XCB6o4N+CfVnCMpAeFkuISET/yvAM=
Subject key identifier:   14:29:C9:11:BC:48:80:F1:84:89:FD:49:1F:5A:37:32:84:BD:2A:B0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AECC145CB93EE9F351F0DE300
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     2914
IP address blocks:        2001:418:3ff:8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:45:cb:93:ee:9f:35:1f:0d:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=4de1fcdc-13c3-453c-8001-029b96cd1e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:42:bd:8e:7e:5b:c5:3b:7b:9f:a4:b6:b7:
                    5f:43:73:d2:fe:56:a4:d5:ee:70:69:49:92:fe:6d:
                    9f:5b:af:d5:48:06:64:79:8f:ba:f6:f5:ed:54:3a:
                    34:1b:23:f2:5c:80:c6:47:13:dd:05:5c:b6:fc:1c:
                    35:2a:78:f4:c2:b3:0e:52:e2:13:50:ea:54:b4:a2:
                    e0:7c:7e:f1:57:98:2a:ea:d4:76:53:39:d9:94:63:
                    7e:81:4d:8b:01:a0:ee:0d:5d:6b:f1:3c:fc:6c:27:
                    c4:a7:fa:30:9c:23:9d:61:f5:76:95:e7:81:e2:01:
                    18:0e:b6:cb:b5:35:ee:62:de:f8:29:fc:2e:e0:40:
                    ae:5d:c6:0a:8e:88:01:63:53:af:77:b7:9a:4d:70:
                    e6:4b:21:41:84:42:42:e4:6c:89:0c:55:80:ea:df:
                    ad:a9:86:3c:57:3a:b5:38:09:58:ca:ac:ef:a3:bf:
                    ec:37:c2:1f:f6:fe:f6:da:e5:60:e6:c3:b8:d0:30:
                    a2:5b:d0:92:a6:56:88:8c:cd:27:65:32:f1:ff:23:
                    56:4c:75:e7:3d:e0:b1:8e:8b:2d:67:e0:03:86:7e:
                    7d:07:66:24:46:27:d4:69:65:b1:01:61:f0:ec:19:
                    68:f2:0c:94:04:8d:11:2b:59:c3:f2:56:2e:c9:f7:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:C9:11:BC:48:80:F1:84:89:FD:49:1F:5A:37:32:84:BD:2A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:06:82:90:d3:5c:4c:0e:9c:c2:43:9f:bf:a5:e5:43:12:
         f5:4e:bf:76:56:24:9f:e5:2f:30:cd:a9:ae:88:84:97:b3:db:
         91:ff:3a:86:9d:5b:79:88:d1:07:ee:aa:50:32:ba:ff:f3:8e:
         ab:08:7b:7c:b8:a6:f3:af:96:14:17:43:de:40:6f:6d:47:3f:
         e9:f2:d7:f2:5e:05:02:d8:4c:1c:26:b3:be:71:c3:54:66:aa:
         45:b0:55:cf:e6:e1:da:84:1b:71:48:74:ef:e8:b3:b9:22:07:
         a0:dc:22:07:45:72:d4:42:65:3d:40:32:db:a3:42:10:8f:3c:
         c6:2a:ae:25:16:ce:9f:c2:39:63:36:43:42:de:20:99:2d:ff:
         de:dc:a0:c4:2c:4c:d1:af:de:1d:b2:5b:50:7a:02:d0:cc:22:
         f7:23:81:e3:8e:79:cb:aa:2d:4b:5a:ec:56:30:48:3c:78:b8:
         e6:80:ed:e2:c8:a9:15:bf:59:8c:d7:80:0c:cf:1c:cc:10:fe:
         71:eb:60:c3:aa:25:0e:85:c6:6a:43:c8:44:82:35:75:29:2c:
         22:f3:c8:f4:8e:c3:16:b2:d8:dc:14:25:22:96:d7:6c:35:12:
         88:5d:78:e7:ea:c6:61:5c:c5:8a:31:4f:00:0d:3c:bd:a7:e8:
         f3:f6:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:56 2025 by rpki-client