Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/45c94860-3721-39a9-b970-0d8db8f5f689.roa
File:                     45c94860-3721-39a9-b970-0d8db8f5f689.roa (raw, json)
Hash identifier:          W4dXN/DeWNkrYtI1XKAZTb8vFm5bUbcS7pkWo9J/Lv4=
Subject key identifier:   DB:8A:DF:C5:60:88:63:B8:97:22:BC:24:D1:4A:37:8C:8A:0A:4A:BD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285849A1EF775B176456130444E680
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/45c94860-3721-39a9-b970-0d8db8f5f689.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     8070
IP address blocks:        2603:1063:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:77:5b:17:64:56:13:04:44:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=444245d0-1389-47fa-9e33-558780b63cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:c4:60:00:35:c9:a4:97:92:51:2d:38:25:
                    2b:81:9e:fc:01:d1:c7:df:8f:b5:b5:05:51:45:1c:
                    60:4a:34:41:41:b6:89:0d:37:b1:e9:08:33:18:ff:
                    d4:9c:31:46:96:63:c5:c0:dc:de:fe:59:33:56:19:
                    b4:2e:1d:ff:03:91:9c:87:8e:e1:26:aa:1c:de:25:
                    26:29:49:79:28:61:fe:c8:b6:d8:c7:50:a0:8e:bf:
                    97:dc:f8:58:b9:c9:8d:65:10:14:e5:d3:69:2f:9c:
                    86:0b:f3:50:e9:e9:1a:39:29:37:41:10:a6:31:2f:
                    f3:9f:01:50:a5:55:48:50:46:2d:76:5d:c2:29:de:
                    0c:37:2d:c1:e8:3f:7b:7e:a0:77:69:a3:fe:7f:4e:
                    32:2c:c6:f7:b4:57:5f:55:6c:b1:99:47:4f:1d:6c:
                    b6:a4:a9:b7:36:bc:05:6c:58:37:9f:6f:d8:f1:56:
                    14:95:23:74:53:2e:63:ca:08:10:be:45:23:8f:d1:
                    9d:4a:c3:cb:e5:98:69:61:62:58:66:13:82:09:d0:
                    da:1b:f3:42:be:6a:52:06:54:f1:ea:b4:c8:c8:34:
                    80:bd:8d:a2:be:04:85:a4:d5:f0:be:98:2f:ba:e8:
                    ac:0c:02:26:a8:81:12:5d:4f:cb:93:23:0a:fc:53:
                    47:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:DF:C5:60:88:63:B8:97:22:BC:24:D1:4A:37:8C:8A:0A:4A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/45c94860-3721-39a9-b970-0d8db8f5f689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:1063:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:42:06:04:72:c9:54:f9:eb:fd:43:2d:5f:6c:5e:c3:f0:74:
         0d:83:94:40:10:53:4b:bf:8f:9a:e1:ad:aa:54:c2:c6:6e:3e:
         71:26:0d:66:81:63:ba:d8:aa:5b:06:d2:4f:36:1e:ad:05:b3:
         70:69:40:cd:ca:9f:ef:7f:b2:91:d6:55:c8:01:0a:89:95:4d:
         d4:26:7c:ff:08:9e:59:35:dd:df:06:83:54:6d:c0:62:33:30:
         a9:76:47:c5:22:ab:c2:00:de:91:2e:10:cf:b4:96:8c:22:61:
         cc:17:3e:78:9d:02:5c:c5:e0:6d:ed:bf:b2:51:4f:76:53:c8:
         42:7c:57:5f:6d:73:ad:7a:08:7b:ec:5b:64:fb:c9:e4:85:33:
         3d:db:d5:bf:34:55:17:98:f6:10:36:d0:62:a9:90:14:f4:88:
         1f:1e:da:be:34:62:f8:fc:b1:d4:76:01:2e:3d:5b:86:72:a3:
         eb:6a:f6:bb:30:ba:08:6a:8f:19:2e:64:6e:ac:5c:ac:22:89:
         ec:94:fc:d2:2a:f5:3e:c8:15:e3:4b:4d:25:c8:fa:3a:24:b8:
         f1:7c:32:d8:42:f4:b8:fa:6a:fc:73:af:b9:68:52:b1:30:22:
         79:d2:06:56:0e:db:45:6b:c1:d3:35:07:d0:30:96:e6:55:d4:
         75:ff:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:48:58 2025 by rpki-client