Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
File:                     8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa (raw, json)
Hash identifier:          ruO6Y1aLZyDypUNt4YkFM3VeLQu/JsYIe6s+4aYWz9A=
Subject key identifier:   8E:89:9D:BF:CF:52:10:2F:8A:AC:8A:0F:5D:F2:D5:C8:F4:CE:FC:11
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F43285849B149EE639B4BE195B6DFA2C0
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     398351
IP address blocks:        2602:80a:2014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ee:63:9b:4b:e1:95:b6:df:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=fc3ccd55-59eb-4dda-a23d-1044250c6bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:1a:8e:7f:37:03:e3:73:8e:c8:06:37:34:
                    05:36:5b:7c:fb:a6:7c:88:a1:0b:69:43:3a:98:49:
                    38:93:9a:6f:5a:39:0b:e7:75:70:e0:42:04:a2:c7:
                    9e:69:23:17:60:2c:d2:f8:b4:d9:45:26:13:12:9b:
                    5f:01:d7:2d:a3:ac:da:5e:ca:9b:c4:69:e5:9c:f6:
                    3f:6c:7e:93:f0:e6:c4:9f:f1:89:b8:d2:23:2a:a8:
                    ca:47:95:4b:96:8d:69:8a:38:f2:d4:c2:0c:96:71:
                    da:6a:cd:41:16:fa:6e:91:88:66:d6:49:82:0b:23:
                    fe:11:be:3a:2b:c9:f9:ee:ed:a9:eb:cc:60:73:1d:
                    1d:94:9f:73:ff:71:74:e0:41:ae:06:58:16:56:3a:
                    78:1a:12:20:bd:68:59:0a:7f:90:e5:8a:47:02:5f:
                    1b:04:f0:64:b0:e4:85:36:30:e1:bc:0d:e4:1e:5e:
                    10:13:f8:c5:cc:ef:f0:84:80:01:19:17:f3:2e:31:
                    5f:5c:df:d8:90:b9:f6:32:29:d8:4a:ef:fb:d0:bc:
                    be:df:35:e5:15:3c:8d:d9:7c:1c:26:97:be:4c:a9:
                    29:4d:7f:28:eb:90:91:8a:5f:95:49:a1:69:7f:18:
                    06:72:d2:a0:4f:f3:53:6e:ca:db:57:c5:ba:63:f0:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:9D:BF:CF:52:10:2F:8A:AC:8A:0F:5D:F2:D5:C8:F4:CE:FC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b4:02:e2:c1:1b:13:dd:64:a8:92:a4:d3:04:e8:4a:f6:f5:
         b4:f1:84:0f:e1:02:3f:d5:e9:e1:82:2f:3b:47:2b:44:84:d2:
         82:c7:e7:35:39:5e:18:8c:d4:54:3d:20:70:ef:03:89:30:63:
         a1:15:68:7d:bd:92:84:8a:9c:62:17:60:45:bc:ab:76:fb:26:
         51:ae:68:62:dd:ab:5a:f4:43:10:2d:f8:5f:f3:d3:26:e5:69:
         a9:c3:8f:c6:13:64:0a:87:68:37:7a:1b:f0:4e:37:63:4b:7d:
         90:5d:12:0a:08:32:7c:01:cf:08:fd:2c:d1:ba:0f:7a:95:45:
         eb:78:7f:6b:0a:56:25:75:4b:93:5f:b3:7f:2d:5d:5f:56:dd:
         a9:d7:ef:2d:ef:b5:23:db:05:81:1d:c2:3c:cd:52:d0:d7:01:
         8a:52:6c:6e:1c:bb:fa:4f:e2:f2:cf:3e:c8:0d:76:6e:5e:5f:
         e8:10:1e:50:ea:d2:59:f3:5f:c3:38:ce:ff:fc:e2:49:a1:e1:
         58:7e:01:05:b4:2c:ba:7d:ca:a5:79:72:37:55:04:15:1c:14:
         f0:04:fe:6b:69:11:c1:3e:f9:01:30:04:98:29:3f:8d:bc:07:
         96:63:32:a7:20:48:8f:98:e4:62:28:47:bf:93:69:d7:4a:33:
         bc:d0:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:04:15 2025 by rpki-client