Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
File:                     8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa (raw, json)
Hash identifier:          MGNvVTHh0hvZwSAMHAlY4dM0nmxLolzhCsAi/Ukh+6Y=
Subject key identifier:   6C:B3:5B:9B:70:1A:45:8D:95:CE:C1:DD:5B:B4:17:5B:91:12:E5:0C
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328584A549B1A4E1BD38F6309D37200
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     2381
IP address blocks:        2001:4e0:1010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1a:4e:1b:d3:8f:63:09:d3:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=9dfde57d-be51-4f9c-bc58-59ceeb4f6446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:74:a6:59:58:54:dd:7a:70:f7:79:ca:95:
                    53:7c:8a:ba:c9:b3:cd:be:6f:cf:13:7e:a2:7c:e5:
                    d6:d8:9b:7b:59:c0:9f:d1:cf:63:96:d6:1f:9a:3f:
                    0c:ed:27:dd:0c:db:60:05:8f:e5:27:91:7d:d5:bc:
                    9a:44:90:3b:82:5c:7d:15:2e:69:5d:36:58:09:c4:
                    20:78:34:1b:c4:5c:13:9a:d4:9a:8f:60:de:cc:b0:
                    b3:c0:18:a0:bb:b5:dc:2c:9e:dc:a9:38:a6:98:9d:
                    50:2a:91:7b:3d:94:cf:db:5b:f3:b0:c6:c6:a0:98:
                    c9:84:2c:ae:bc:63:83:02:37:f3:8f:60:db:2b:c3:
                    95:75:6f:6a:c5:ca:4e:36:7e:d4:b0:43:55:3f:f1:
                    4e:4e:24:bd:c1:04:35:a8:1f:f6:09:5d:8d:b5:2d:
                    1a:d8:62:31:1d:64:fc:0e:06:09:c0:54:98:1a:ae:
                    b0:2f:5c:b4:01:ab:90:ab:85:32:ea:e3:0f:28:72:
                    f7:2e:22:dd:1d:06:61:f5:78:5b:1f:34:15:bf:59:
                    db:60:4b:98:31:c0:51:f5:8d:10:e6:0a:a8:b1:ce:
                    2a:32:94:c4:66:32:a0:23:1a:af:cd:40:9d:bc:ba:
                    a6:20:cc:ed:91:78:9f:04:36:70:ea:d5:bf:2d:51:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B3:5B:9B:70:1A:45:8D:95:CE:C1:DD:5B:B4:17:5B:91:12:E5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:8e:46:cd:67:07:15:a5:08:74:5c:92:03:a0:ff:09:ad:
         07:12:d1:ef:25:e1:11:f4:7f:4b:1e:3b:6c:e5:f6:21:d1:8c:
         ad:31:c6:d5:c3:ab:83:5e:c6:ef:2c:29:27:d9:2d:63:f8:12:
         bf:17:91:e9:b1:91:63:60:0d:dd:27:8e:15:e0:ce:77:cc:4f:
         35:41:78:fd:73:76:10:7c:56:68:f8:d5:45:d8:59:e5:90:b8:
         21:38:b8:47:b3:93:b8:b9:04:d9:ea:cf:70:ea:7f:46:d6:26:
         cb:50:9b:12:00:e1:2b:7d:80:6a:8e:6a:58:40:bd:93:d2:8d:
         ea:33:cb:47:de:d7:4e:01:7d:be:8e:6a:a8:48:a2:62:f6:58:
         e1:9b:f0:dc:56:15:17:d9:2c:98:3e:f9:79:59:01:8a:fc:5d:
         7c:df:a3:99:ac:d8:57:f6:23:20:03:5e:64:48:12:e7:8c:be:
         86:6b:5b:29:b4:17:99:52:39:5d:cf:78:41:8e:00:bb:e7:44:
         2c:f6:75:76:b4:ad:a2:7e:1d:a6:e1:9a:e3:32:1b:83:ff:7e:
         27:b0:88:42:38:87:6f:78:ea:9a:82:e1:9d:16:b3:b0:e7:53:
         cd:7a:33:c5:b1:99:88:72:ac:3b:9f:99:5b:94:38:ab:ad:61:
         f9:d3:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:47:10 2025 by rpki-client