Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/abea905a-d67f-3530-8fca-432ad26ceb4f.roa
File:                     abea905a-d67f-3530-8fca-432ad26ceb4f.roa (raw, json)
Hash identifier:          ne9hHPenzxMMm9pzZ3Ffuuv/Nv+Kv2EJIcuLlmgrlhg=
Subject key identifier:   D1:C3:43:9A:C3:2A:AD:9B:43:B3:8E:40:F9:74:34:48:24:D8:87:55
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A49706E69BD7C2A61BF627A00
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/abea905a-d67f-3530-8fca-432ad26ceb4f.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     109
IP address blocks:        2001:420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:6e:69:bd:7c:2a:61:bf:62:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=f677ab41-8527-4012-8e68-e185cdac0aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:9d:b6:80:f6:3e:57:00:91:a0:66:4d:ce:
                    00:1b:63:9c:e7:e5:72:c5:b3:d1:95:fe:de:07:12:
                    68:f7:28:30:2e:0c:37:63:02:02:a8:cb:33:64:8f:
                    1b:b1:db:da:5c:85:4b:50:15:83:3a:19:26:2d:76:
                    e0:bf:46:6d:f5:82:7d:5f:96:4c:33:7c:79:fe:26:
                    ba:e8:9b:ad:b8:78:cf:db:9e:fe:8b:9e:81:c8:8c:
                    3e:20:11:9f:74:30:e8:b6:4e:27:0f:b2:95:ae:25:
                    6f:8e:00:e6:fd:00:23:a4:25:2e:c3:80:76:26:fd:
                    f0:3c:c0:6d:27:ad:70:19:8f:64:0d:f7:51:52:0e:
                    61:2e:f5:99:61:12:54:df:3b:c5:b8:36:c7:a3:76:
                    5a:cd:75:c5:a2:b3:ca:ed:04:07:3e:0f:b0:a5:3b:
                    07:a2:b8:f4:7c:31:bd:17:86:85:5f:d4:e2:a1:43:
                    c4:a3:f9:91:b6:83:30:17:0b:31:3e:2b:63:66:13:
                    7e:fb:69:36:de:03:73:67:13:32:2a:78:03:c4:d1:
                    a4:28:ab:34:92:73:d1:8c:c6:3c:9c:1a:65:ce:0a:
                    a2:23:9f:55:6a:5a:e5:1b:78:32:86:46:78:c3:d3:
                    ec:a0:b2:22:92:e7:78:04:5f:cc:fb:f4:ad:b7:65:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C3:43:9A:C3:2A:AD:9B:43:B3:8E:40:F9:74:34:48:24:D8:87:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/abea905a-d67f-3530-8fca-432ad26ceb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:420::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:36:0d:db:8f:24:20:82:fb:ba:4a:74:9d:36:f6:58:1a:d7:
         53:4f:f8:94:e4:d1:7c:08:ee:b0:8f:1f:60:be:88:0a:34:68:
         07:46:60:cd:d5:0a:b8:f3:90:88:5f:3c:a4:ff:cc:a8:5b:b8:
         ff:a2:9b:35:2d:31:64:8c:e4:5e:a5:4c:cf:d5:78:85:25:2f:
         b1:5c:a8:66:8d:04:f0:1b:56:26:4a:58:1e:8f:35:27:3c:70:
         3d:34:79:c5:e7:4d:12:48:a1:c1:6d:a5:01:7f:5c:6a:fc:15:
         50:73:9c:54:3f:92:67:21:ea:b0:83:4c:08:d3:21:26:f8:6f:
         87:f8:0a:e6:5b:de:dc:3c:c4:fd:65:fb:92:cb:eb:8f:af:46:
         d6:39:de:7d:06:2c:be:23:21:8f:82:f3:7d:d6:24:72:c1:a8:
         b5:d6:c7:79:a1:d5:b6:15:76:24:ff:98:c0:5d:69:68:08:4c:
         91:63:fd:43:1b:7f:05:e5:29:28:52:81:8e:7b:df:9a:aa:f9:
         d6:03:7a:2f:c7:a4:7c:89:81:4d:c0:0e:35:c9:95:bc:1d:33:
         0d:9e:a5:a5:de:4a:ce:8e:31:ad:cb:12:f0:79:4f:e1:c3:d9:
         f3:13:b9:19:65:2c:5b:b0:12:a0:4c:6e:26:fe:00:c2:fd:4b:
         dc:f8:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:54:49 2025 by rpki-client