Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa
File:                     ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa (raw, json)
Hash identifier:          nyUjeC1Pkmo1EFoKeniAYoogMUeoyilnljQepoyu8L4=
Subject key identifier:   06:AB:88:24:D7:5C:5E:AF:41:47:5A:1E:D2:49:54:EF:67:CD:7C:88
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584A146577EC05270233C80590C0
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     12430
IP address blocks:        47.61.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:77:ec:05:27:02:33:c8:05:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=83f0a213-5b11-4e28-974b-6c7d6ebde3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:3c:29:33:12:a7:a3:52:8d:37:21:cf:4e:
                    73:da:21:eb:01:ba:0a:ed:ff:18:4b:2b:27:5a:ea:
                    b9:bc:7c:3c:c9:d5:c6:6b:6f:b4:aa:e7:36:f2:e3:
                    3e:74:47:0c:75:32:ff:e1:46:e2:46:9d:d6:cc:a3:
                    48:c6:bb:bd:9d:e9:7a:70:30:b3:6b:ed:7b:36:1d:
                    9f:c2:4f:32:d8:3f:e0:20:76:be:99:1b:9a:6c:76:
                    f2:43:5b:63:a8:a2:2a:04:7d:87:06:77:c5:07:6c:
                    96:fc:46:2a:22:68:f5:b9:78:a9:5e:a7:53:11:40:
                    57:cc:2e:77:f3:01:f1:dc:11:e7:11:eb:41:a1:45:
                    68:43:0d:1b:3d:96:6d:1c:49:42:9f:de:44:7b:42:
                    0a:6b:4e:07:1a:72:2a:1b:f6:37:eb:44:e8:8a:5c:
                    50:29:3f:f0:93:8a:b4:57:42:97:ca:7d:cf:20:5f:
                    af:a7:33:3e:32:d6:84:ed:6b:f1:81:31:e0:83:a7:
                    c5:8b:e2:f8:3c:89:58:79:4f:72:a6:0b:eb:29:f2:
                    2a:2d:22:bc:92:1a:26:d3:10:93:10:c2:ac:5f:75:
                    d3:50:45:80:9b:81:9d:88:7e:93:2d:e8:18:6d:bd:
                    86:4f:1a:ae:48:00:1c:fd:83:f0:9c:5a:55:6b:81:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AB:88:24:D7:5C:5E:AF:41:47:5A:1E:D2:49:54:EF:67:CD:7C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ee955a13-ffd5-3330-9d59-4ff9b47deb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:4a:ee:68:0b:c6:68:24:47:84:d0:a2:3e:a3:14:a3:ea:
         b2:e6:9c:e9:a4:d4:2c:24:3d:7f:4c:7e:0c:92:70:29:e9:91:
         d8:bc:0f:d1:f0:58:5f:ca:8b:b8:2e:37:f9:73:20:fb:66:4a:
         08:19:ed:10:cc:5b:bc:6f:9d:ee:5a:b0:6d:e3:61:18:89:d8:
         06:18:21:ec:e2:b7:f1:c4:b6:19:1e:4e:df:65:4a:02:2c:b0:
         a5:89:55:9a:8b:6d:18:81:e5:fa:df:74:f1:0c:8e:7e:da:7b:
         dc:51:51:91:3e:b7:88:95:73:36:5e:1a:38:44:4e:44:a0:20:
         74:86:d3:61:30:46:99:a7:ff:61:33:03:a1:5f:b0:a5:aa:43:
         9a:97:64:41:b5:57:be:cd:61:b9:e0:48:54:c4:26:c7:f9:da:
         cd:3c:f9:bc:ff:ef:4f:0f:8b:d8:67:79:e2:bf:25:48:97:b6:
         a2:be:74:7c:e3:3f:25:98:67:10:02:d3:75:10:ad:00:43:f2:
         fc:c9:8d:9a:0a:1e:de:e3:a8:91:1f:b7:ad:8f:0b:bb:9f:66:
         40:37:c7:a3:24:16:2b:37:a0:58:0c:17:7f:fd:6f:16:e8:60:
         4c:05:79:f4:b3:a7:16:89:e1:f2:ba:ab:9a:c3:11:5a:bd:35:
         ac:a4:6d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:32:14 2025 by rpki-client