Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
File:                     985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa (raw, json)
Hash identifier:          0TSUgJXe+sxpBai5vKhTB7IwDWZVM5vlvdzr+RbBsfM=
Subject key identifier:   B7:70:5D:B6:A8:1B:76:D0:16:9D:28:54:8D:30:C9:E2:97:F8:AD:AD
Certificate issuer:       /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial:       010D0C9F4328584944693BC48B36E2F824DD4E00
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     54816
IP address blocks:        2607:67c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:3b:c4:8b:36:e2:f8:24:dd:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=c1930956-8af8-4637-ba42-a0de531cbcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:ab:82:f5:c0:52:96:a4:eb:c2:24:ce:39:
                    49:51:13:05:a3:d4:34:f7:a1:e2:0d:7d:98:3e:e2:
                    d5:dc:62:7c:da:9b:fe:6e:b9:84:4a:c0:c2:7c:fa:
                    5f:df:5a:d4:50:2a:00:e5:fc:08:c8:7b:fa:a2:2f:
                    f2:1f:3e:51:81:18:8f:fa:2a:53:64:1f:76:c9:17:
                    7f:fa:74:51:4e:90:2b:0e:16:29:07:39:a6:69:99:
                    e5:f6:04:cf:1c:a3:b8:fd:f3:98:d8:0d:16:5e:7d:
                    35:21:05:62:d3:e4:a6:79:fe:78:1a:bd:bd:2d:60:
                    ff:b3:9c:3a:52:e5:2b:a2:1d:4c:0b:2e:13:a1:97:
                    4c:6a:d8:65:5b:35:39:52:2d:c0:f8:44:ac:e5:c5:
                    e0:0e:35:82:62:6e:a5:03:01:16:95:43:eb:75:7c:
                    c7:d2:05:3c:0d:a6:52:b3:32:e2:4f:12:3d:ce:e1:
                    d9:f1:aa:e5:b1:5e:76:2a:c2:92:49:70:ce:d7:86:
                    40:30:e8:d7:85:b2:60:7f:68:28:b9:ea:7a:b9:8d:
                    dc:9f:96:0e:37:71:dc:dd:77:0f:3f:e3:5e:81:cf:
                    ec:76:ed:ae:31:86:15:f4:7a:d1:7c:c0:ed:74:6a:
                    0e:7c:fb:b5:75:ee:e5:41:d7:2d:7d:3a:6c:fe:66:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:70:5D:B6:A8:1B:76:D0:16:9D:28:54:8D:30:C9:E2:97:F8:AD:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:67c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:9e:f5:0b:14:20:11:8b:33:b8:99:27:8c:78:78:f7:bf:
         16:3e:2b:91:53:9f:bb:2a:7c:c8:34:80:eb:87:f5:2a:9a:69:
         93:ad:26:54:6b:8c:b1:6d:5d:0c:06:5d:81:f1:d4:3a:28:bc:
         35:75:a9:7a:be:bc:a2:c2:c1:46:6d:fa:40:58:f7:cd:c4:bc:
         97:9e:10:34:fe:8e:1e:26:e1:79:92:84:a5:35:52:8b:66:da:
         bd:74:f6:f8:10:ad:c8:e5:64:fb:5f:e4:6d:0e:81:6c:a2:bf:
         4d:ad:72:81:d0:77:a2:84:b8:be:aa:fe:36:f6:e7:07:42:94:
         d5:f9:fc:a9:b6:56:53:05:d2:e5:c0:33:d2:bf:07:b0:cf:07:
         05:33:75:7b:4c:af:10:93:91:18:13:72:65:20:74:85:97:50:
         97:01:c3:8f:bc:ea:f1:49:80:f2:2b:86:29:69:58:e9:5d:60:
         92:09:f4:c5:6c:35:5f:98:00:b5:97:2b:17:db:af:cc:f0:d7:
         c1:b9:ac:59:ba:ca:0d:d3:c7:8c:01:3c:ce:a0:bc:40:de:04:
         21:cb:84:3c:d1:2a:92:29:0d:ff:20:44:82:d0:2a:5e:05:7f:
         98:a2:ee:c0:4b:7a:33:38:ba:03:3b:38:1a:f0:66:df:08:1d:
         8f:e5:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:58:59 2025 by rpki-client