Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa
File:                     165f5246-1b48-3ea5-943a-619c03146706.roa (raw, json)
Hash identifier:          94PlEYBOZf4WS633SnRN4EiLqtKJMqb5InlGwqJeMb4=
Subject key identifier:   4B:F6:22:FA:A2:62:AD:04:FA:7D:7B:3A:C3:B8:3D:A9:78:95:E1:62
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F43285849B3130033C804461B945A9500
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa
Signing time:             Wed 30 Apr 2025 16:21:48 +0000
ROA not before:           Wed 30 Apr 2025 16:21:48 +0000
ROA not after:            Tue 29 Jul 2025 16:21:48 +0000
asID:                     65012
IP address blocks:        2607:9bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:13:00:33:c8:04:46:1b:94:5a:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Apr 30 16:21:48 2025 GMT
            Not After : Jul 29 16:21:48 2025 GMT
        Subject: CN=af1ec778-0938-40ac-9983-2b19323b43fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:cd:eb:06:9e:5c:3c:46:0f:6f:c4:73:c3:
                    c9:69:5e:c5:3c:a8:d1:9b:6e:3f:60:35:fc:f7:20:
                    f2:15:96:30:3f:d2:5a:80:28:18:ab:b7:0d:68:bd:
                    1c:a3:a9:34:a8:03:36:d3:2e:8a:24:1c:83:d3:a0:
                    e3:fa:3e:d9:de:29:12:67:6b:f3:dd:d6:2a:41:7b:
                    c7:63:ac:43:3c:78:55:62:97:a7:13:7c:eb:33:ef:
                    c7:3c:45:30:2a:82:1e:22:27:2c:3c:81:42:df:96:
                    1a:24:89:53:a7:17:1d:9a:33:e1:ae:15:22:6f:4e:
                    86:2a:37:24:77:18:d5:e4:83:2d:99:06:c2:f4:31:
                    82:c9:69:53:d0:0b:5d:d9:33:95:f9:c0:2e:9d:83:
                    89:11:7e:c9:54:1e:4d:71:7d:68:04:31:d0:da:4f:
                    1a:86:91:0a:55:22:bd:90:48:f7:32:5f:b9:3f:08:
                    3b:52:2a:04:4a:4d:37:ca:bb:00:96:4d:e6:5e:50:
                    c3:4f:dd:e1:51:35:85:47:a5:52:31:9b:1a:9f:b3:
                    f3:cf:02:d0:4a:2f:a8:ac:76:ba:89:c8:ff:2b:d8:
                    ce:e5:73:f3:75:c8:5a:fc:1d:fe:61:5b:6d:0b:5c:
                    08:40:c6:b5:ba:24:37:0b:a0:ef:94:bf:57:b5:16:
                    52:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F6:22:FA:A2:62:AD:04:FA:7D:7B:3A:C3:B8:3D:A9:78:95:E1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:54:c6:93:6d:02:ea:d1:71:77:df:d6:6b:9b:3a:74:de:48:
         7a:c6:99:41:37:c3:99:ed:f5:2e:60:6d:10:9f:69:71:57:9f:
         d5:ed:d6:5c:49:7d:2f:ed:ab:5d:72:5a:76:ee:f4:00:f7:0f:
         e0:47:f5:24:fc:94:33:f9:a5:8b:6a:58:6b:97:44:d4:6e:eb:
         e3:37:ac:fa:1a:ea:3a:45:bd:df:0c:ce:44:8f:d8:4a:d5:9a:
         4f:0d:53:65:0d:90:44:25:38:a2:71:f2:2c:97:87:6a:1b:49:
         b3:5f:0a:23:55:80:da:87:ec:f2:8a:91:2d:8e:17:f4:fd:5a:
         3c:f5:97:2e:8a:02:e5:72:ce:b3:de:f3:12:8c:0f:d4:f5:8a:
         ff:80:62:82:3b:0c:50:51:c5:cc:1f:36:45:e6:be:75:65:84:
         94:b2:28:3d:74:79:a5:11:21:ab:17:8b:c8:9e:63:67:57:3f:
         5e:0b:89:e7:82:df:9e:2e:35:3d:25:a1:e0:bd:e7:43:49:0e:
         93:43:f5:5b:1c:ff:4b:39:5f:f3:ea:26:da:26:82:c1:73:d3:
         7d:0a:83:c3:93:7c:11:f0:08:61:56:a5:df:4f:3e:2a:94:10:
         d1:c7:e5:18:29:0b:61:55:f7:a5:16:57:48:57:85:1f:83:d5:
         93:39:6a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:32:31 2025 by rpki-client