Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/93d86f07-52d6-380b-ba0e-0722794c3b84.roa
File:                     93d86f07-52d6-380b-ba0e-0722794c3b84.roa (raw, json)
Hash identifier:          GLKPl0ugGJJ+Hm1kRWL8a/wjskqh5UeNx8KnIId6d4k=
Subject key identifier:   DC:29:4C:9B:00:9B:30:B8:95:F3:A7:F3:EB:41:99:6F:4F:DA:7E:E0
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584A58CAF83A21E132A1462FED58
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/93d86f07-52d6-380b-ba0e-0722794c3b84.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     11317
IP address blocks:        2001:49d0:3c0::/42 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:f8:3a:21:e1:32:a1:46:2f:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=078e1aec-c0f8-43b7-a9a4-5713a00f0f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:68:03:e0:0e:5f:70:fa:73:29:36:a9:ae:
                    b7:ae:f7:0b:ea:ca:b3:bd:3d:ed:5b:9f:77:f2:69:
                    8b:54:ee:be:69:bc:9f:95:e2:55:c7:c3:e2:29:d2:
                    1b:64:6d:ec:ee:df:23:34:2a:9b:3d:c4:1d:e6:d8:
                    f6:c4:d7:36:00:05:a5:4d:79:71:4d:c1:5c:71:27:
                    97:f8:fc:61:8d:d8:f8:b1:1b:39:a4:f9:67:04:62:
                    86:de:50:c1:e0:d0:3d:f8:1a:d8:e4:e1:e0:a5:fd:
                    c8:2f:bc:87:fc:6c:2e:a8:73:9a:a4:63:38:6c:cc:
                    70:53:eb:2f:2a:e7:49:eb:79:9e:d9:27:6c:3b:6f:
                    07:c1:b9:73:b9:ae:57:c5:d3:f5:ce:c3:10:73:1b:
                    6e:17:f8:e2:7c:c3:5c:86:d4:bc:ca:c1:24:53:be:
                    bc:1c:4e:e3:e2:aa:8d:c6:db:76:0c:de:15:68:00:
                    65:11:46:2b:7a:40:07:4a:51:02:3e:6d:90:47:f7:
                    89:45:33:99:ba:d1:17:6d:19:02:64:cb:62:d3:7a:
                    bf:0f:b7:30:40:8d:8a:23:cf:35:89:86:22:a2:ea:
                    da:24:08:9c:f3:4d:3a:78:72:cb:49:d5:cf:59:6f:
                    3f:4a:04:bc:ef:59:9c:df:35:60:44:ee:33:ab:52:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:4C:9B:00:9B:30:B8:95:F3:A7:F3:EB:41:99:6F:4F:DA:7E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/93d86f07-52d6-380b-ba0e-0722794c3b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:3c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:d1:01:2e:fe:eb:7d:12:70:7f:b0:e1:e7:d9:3d:d6:ae:
         6e:59:cd:ba:83:25:26:59:4b:c5:dd:d5:7d:77:ad:a4:6d:90:
         87:13:ca:59:f9:a3:28:e2:67:4c:74:e8:9e:a2:cd:f5:cc:1f:
         4c:fe:c6:63:fd:09:4a:32:f6:36:00:6f:9d:6e:e0:d1:fa:8f:
         11:9d:47:17:fd:52:e0:0e:e6:2b:81:f3:55:c1:16:5f:b5:a8:
         d3:6d:b5:6a:28:08:d0:f9:f9:50:46:13:81:64:f4:0c:e0:7c:
         34:64:94:d7:7a:cd:64:d5:48:7b:76:50:e0:03:ff:63:d9:b3:
         d5:a2:fc:95:af:66:4a:7a:82:c8:c0:ad:c9:f5:63:d0:1e:31:
         9b:40:e5:ac:a8:66:c8:2f:a8:5b:83:38:37:f7:68:89:2c:bc:
         54:0d:72:43:33:0a:41:81:7c:c0:f9:39:12:65:ad:b3:9e:b4:
         9d:18:a9:6c:29:da:8f:f1:95:f8:e6:ab:14:6e:36:f6:fa:1e:
         7f:04:66:1c:eb:03:9e:28:b1:01:00:5a:6c:86:c0:86:d1:b8:
         e5:72:48:77:f9:94:d3:f1:d8:95:cd:e3:a9:1c:46:25:57:1a:
         3a:6c:54:aa:0a:6f:1c:ea:81:af:1d:23:d4:96:6b:e9:66:ba:
         63:90:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:56:25 2025 by rpki-client