Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
File:                     e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa (raw, json)
Hash identifier:          GhtP5vc5vGeDhjIQu9kjGBshblUdcaMSf6i6MXDhx7c=
Subject key identifier:   D7:24:B8:EF:23:1B:7A:C5:E0:62:18:49:9D:5C:DA:CA:F6:34:D4:A7
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F43285849CBCF9F09292676FE8AA9B280
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     63023
IP address blocks:        2607:a140::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9f:09:29:26:76:fe:8a:a9:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=cb4c41aa-7bc4-4a7b-bedc-6bc468f01a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:c0:45:0d:2f:6d:e8:8f:b0:d5:12:66:d4:
                    c1:19:c9:bb:1f:d5:6a:e7:18:e5:30:45:af:fd:6b:
                    0e:3f:3b:02:1a:da:40:af:e6:10:93:3d:ee:59:40:
                    26:55:85:d3:40:02:dd:27:d9:24:26:3c:41:8e:52:
                    16:59:45:1e:bb:56:5a:f0:8c:44:25:20:2f:6d:78:
                    83:05:15:5f:b7:08:57:79:07:e4:3b:f2:67:bd:b0:
                    94:79:c3:25:a5:a9:4a:24:6c:31:88:ab:61:86:83:
                    ee:4a:e3:e7:21:a5:86:35:14:34:34:58:5b:9b:0e:
                    c6:c3:ff:5f:16:34:c4:01:62:2b:2c:9b:a1:12:3b:
                    a7:42:e7:da:8d:d5:1a:a8:c1:d9:57:79:78:a0:8f:
                    cb:56:93:5a:b8:56:0a:cc:14:19:ae:a7:46:e6:8f:
                    45:e7:cd:d7:7a:b5:a3:28:72:5b:4c:ea:60:ce:a5:
                    11:99:19:7b:f4:2e:52:52:59:a9:f3:08:f8:2a:c2:
                    e1:1c:13:20:09:9f:de:50:20:eb:5c:d2:3b:8a:38:
                    3a:2c:20:5d:22:1d:4c:6d:d6:94:40:84:92:c0:57:
                    cd:86:58:9e:f3:b2:05:2e:a9:b4:9a:13:cc:86:ec:
                    da:c1:ed:ad:6b:be:9b:30:78:a0:8c:cc:3a:73:5b:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:24:B8:EF:23:1B:7A:C5:E0:62:18:49:9D:5C:DA:CA:F6:34:D4:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/e8d35cd6-2a50-31de-9137-b76e12bff0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:11:60:01:06:6b:09:d2:56:12:94:a3:8b:4f:1b:e5:d0:21:
         75:d3:26:29:af:ef:1e:59:9d:94:a6:43:20:84:e9:77:7e:83:
         f6:13:a3:da:78:bf:c2:4e:c9:b7:b9:62:a6:f6:86:4f:a7:a3:
         f2:a2:4d:f9:86:f2:42:91:15:e6:7a:a2:09:1a:78:5c:e4:ab:
         a4:8a:b4:d7:6c:76:c4:ec:56:53:3f:75:45:9c:29:ec:a4:75:
         fa:84:d6:77:5f:a5:01:ab:4e:f9:dd:06:b3:15:fc:62:73:3b:
         1f:3b:00:fa:3e:5e:58:81:e2:e0:ae:2a:e9:48:79:87:2f:0d:
         a1:3a:e3:41:b8:6b:7b:5a:89:ff:6f:d8:5c:c9:6d:6c:71:38:
         ca:9d:7f:8d:4e:f5:96:88:e7:e9:aa:fb:cd:b4:ed:98:79:bd:
         65:1d:d5:62:4d:21:2a:03:fb:d7:a8:6f:0a:07:ea:03:02:ac:
         d6:c8:47:6c:83:29:e8:cc:17:02:35:ef:7d:c0:0c:f0:e5:53:
         0a:89:05:92:c6:c8:35:25:d8:70:7a:d4:ed:f8:2a:b3:d6:a5:
         b7:9b:30:2e:a4:ec:57:ba:1d:d1:56:a8:a0:9c:c2:4e:07:03:
         fc:8f:9e:c8:99:8d:4b:80:9a:93:dd:df:53:2f:9c:b5:8c:6f:
         61:42:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:50:13 2025 by rpki-client