Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa
File:                     d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa (raw, json)
Hash identifier:          wHeif62ykXW5DW2lFuGrFL208kKSt15EpgQmTUPzjMs=
Subject key identifier:   E0:8A:13:A4:18:E9:D1:E0:37:2E:AB:AA:46:9D:10:9E:A8:25:A8:E9
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F43285849C4D4C7A1365E905342B658C0
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     46632
IP address blocks:        2604:3800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c7:a1:36:5e:90:53:42:b6:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=3ba7ef1f-ea1b-44ff-b59e-a709e3209994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:f2:9c:99:90:a9:72:9b:3d:65:78:1f:a5:
                    93:dc:03:ad:e0:ab:b4:d6:b4:36:5b:dc:74:58:b3:
                    5b:3f:1e:39:52:fb:f2:af:a9:3f:32:97:33:b1:c6:
                    ae:b2:df:37:e9:2c:9f:29:6b:9b:36:27:9a:c0:a5:
                    19:26:d1:f1:e8:d3:dc:b7:67:77:58:aa:de:bb:1c:
                    fa:66:66:03:dd:b2:bb:e8:71:30:23:24:d9:23:05:
                    eb:40:28:05:b4:72:6c:20:2c:4c:8a:8e:3d:01:d4:
                    a6:ef:1b:88:d4:74:07:c5:66:ff:91:5b:c7:13:70:
                    29:e5:45:4c:72:54:c6:3e:bb:07:33:b0:48:0d:d5:
                    0d:37:c3:c9:6c:65:2c:bb:9e:83:08:09:bc:63:ff:
                    b0:85:54:86:70:1c:8e:36:54:9a:1b:76:44:c1:01:
                    d5:4d:32:7c:03:79:cb:b0:74:51:c5:36:e1:ac:5a:
                    78:29:97:ea:fb:f2:28:9e:11:48:47:00:0f:6c:17:
                    a7:95:c1:95:94:3c:f5:c8:8d:ec:4b:44:6a:8a:9e:
                    dd:a9:40:63:42:f8:22:c3:70:ab:c1:87:c1:9e:5a:
                    96:d8:ee:0c:53:4d:56:f5:f7:dc:30:6f:e3:d9:46:
                    92:23:2d:a2:4c:87:e2:54:a7:a1:1b:bb:03:04:c9:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8A:13:A4:18:E9:D1:E0:37:2E:AB:AA:46:9D:10:9E:A8:25:A8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/d112b055-c9c2-3a3c-844b-fbeaf07c47dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f3:ea:89:de:1b:56:b0:a5:33:51:21:8c:90:ca:4c:68:98:
         b8:37:cb:83:d4:f8:65:9c:13:6a:b9:ae:e8:78:d1:32:cc:aa:
         d7:2d:0c:76:23:c7:8e:de:02:ca:97:90:f9:da:59:49:8b:e0:
         40:f5:af:b3:ec:ad:83:80:8d:12:e9:f6:ea:e2:c4:27:e9:aa:
         a2:35:63:63:d5:42:0f:d4:dd:cc:7a:fd:9e:6e:60:a1:19:88:
         43:78:1c:b1:d7:c2:e8:e8:d5:78:33:a6:78:4f:80:99:f4:49:
         13:04:01:f3:0b:85:ef:ee:c4:6a:56:df:09:2b:6c:81:b9:57:
         be:be:c3:ba:64:9b:26:ba:4f:83:c2:77:a7:d6:c7:29:77:00:
         0d:4b:c3:93:5c:56:e9:64:5b:f8:66:09:8e:ea:2e:cb:be:e6:
         d1:f5:9a:a6:94:f7:9d:7c:9e:3e:b4:8f:74:7c:c8:3f:88:a4:
         f5:c6:10:88:b5:cd:29:1d:33:da:cf:d7:8c:30:4d:3c:1a:6d:
         c1:0e:06:8b:3d:9d:7e:5b:28:4a:52:db:dd:af:b2:f4:49:e7:
         c4:3c:83:88:6a:50:37:f7:76:7b:27:3f:9f:ec:de:d4:37:ea:
         d4:22:d9:64:76:6f:50:53:4c:5e:e3:c2:2a:3b:aa:f5:9e:91:
         49:78:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:25:44 2025 by rpki-client