Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
File:                     8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa (raw, json)
Hash identifier:          x/ioqvR+AbujbgaynmEdNHblraztFEUQ17E5Mftbi/w=
Subject key identifier:   CE:90:EC:FC:34:F9:3A:23:C2:A7:73:C9:14:3C:33:92:B9:39:41:E8
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584A45403BC91D6FE2951639F500
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     30513
IP address blocks:        2001:4968::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3b:c9:1d:6f:e2:95:16:39:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=e014d4f9-b5cd-4a2a-8226-3865256f5355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:07:ea:ed:64:0d:86:5f:d3:9f:5e:2c:af:
                    a3:e5:9e:9d:4d:33:08:ac:6f:22:17:11:8b:a8:de:
                    87:06:6e:88:9b:83:c0:d9:11:3e:92:90:e9:ef:77:
                    04:39:d0:5a:98:9d:26:22:99:5b:48:bc:d4:83:9a:
                    c1:5c:a7:90:62:08:a3:28:96:50:cd:22:13:ec:9a:
                    d8:d8:67:4d:20:bc:99:7c:f4:98:e9:32:b3:43:1c:
                    68:ba:04:ba:15:b9:4f:1d:c4:91:8b:8d:42:69:1e:
                    36:a7:d7:c9:98:d1:50:64:17:36:e7:24:ac:38:7c:
                    7f:b3:c6:3b:90:e6:4b:19:43:17:7d:9d:ba:d0:f3:
                    3c:a6:26:40:ca:13:3e:46:39:4f:7c:ea:bb:ed:ec:
                    43:31:4a:63:77:eb:52:51:d5:f8:1f:0c:4d:5f:a8:
                    09:95:07:f9:45:e8:99:aa:d3:b5:78:5b:0b:d9:e5:
                    7b:99:fd:fe:97:bc:c9:81:9b:3a:b0:2a:14:5a:84:
                    2c:18:34:b9:d8:b5:86:84:6b:e8:66:df:a8:20:55:
                    5e:69:26:27:a6:b8:1a:f9:36:92:16:d4:e7:fa:8d:
                    ae:9b:8e:ad:01:8a:43:88:5f:05:6e:10:64:77:02:
                    3c:84:b0:f2:c6:cb:e7:17:1d:98:fb:5a:35:f8:34:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:EC:FC:34:F9:3A:23:C2:A7:73:C9:14:3C:33:92:B9:39:41:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4968::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:89:fb:60:30:c8:9f:ed:84:6c:82:48:4d:26:85:b3:68:
         ca:44:56:7d:4e:bc:39:16:dc:72:3d:91:11:3a:8c:b7:81:56:
         de:a8:97:e4:b7:fa:c8:d7:7f:df:6d:7a:cb:94:d6:e8:d9:e9:
         5f:5a:b8:b4:71:30:d2:29:cf:98:e2:ef:a1:72:a2:6e:df:4c:
         e1:46:90:f9:b9:4d:2a:4d:4f:08:11:69:99:73:d2:68:b2:ea:
         b3:8b:a2:5c:ed:91:f0:1c:d6:95:0f:15:14:23:41:53:55:d2:
         65:0a:08:5c:f4:7f:b1:d0:68:6a:05:81:e9:8e:fa:52:72:52:
         de:1a:4c:62:94:4e:1a:02:63:4b:92:ad:1d:20:bd:3d:e4:e1:
         49:27:f2:cf:dc:09:ca:52:c9:c6:c3:35:f6:db:87:af:80:36:
         99:bd:68:11:46:84:bd:13:35:a5:f3:48:b9:df:17:90:63:ca:
         af:0f:56:c5:d6:ac:a8:ae:f1:3b:05:9f:6a:85:25:d5:3f:0e:
         0a:1b:14:eb:c9:0f:63:ed:45:ea:81:cd:25:20:ca:1b:4c:f1:
         b1:c1:a7:67:57:8a:9c:a5:69:96:a0:22:d3:85:0f:54:95:48:
         bf:49:ae:9d:fa:6f:8d:06:83:6d:bc:3c:91:99:65:67:66:37:
         7e:78:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:36:14 2025 by rpki-client