Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2f3c0a11-30ff-3853-860b-b870e9ce1762.roa
File:                     2f3c0a11-30ff-3853-860b-b870e9ce1762.roa (raw, json)
Hash identifier:          VZToR90v5ocAfk9AFKFp05AOkqp266cO7smjzYyZn3M=
Subject key identifier:   19:E9:27:F7:39:8E:6F:01:33:CA:A2:9F:D2:F8:8F:42:37:FF:27:67
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858498EB737D28E3EE8B16A059CC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2f3c0a11-30ff-3853-860b-b870e9ce1762.roa
Signing time:             Thu 17 Apr 2025 15:47:46 +0000
ROA not before:           Thu 17 Apr 2025 15:47:46 +0000
ROA not after:            Wed 16 Jul 2025 15:47:46 +0000
asID:                     30058
IP address blocks:        2001:49f0:d04f::/48 maxlen: 48
                          2001:49f0:d0ad::/48 maxlen: 48
                          2001:49f0:d0c1::/48 maxlen: 48
                          2001:49f0:d0c2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:b7:37:d2:8e:3e:e8:b1:6a:05:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 17 15:47:46 2025 GMT
            Not After : Jul 16 15:47:46 2025 GMT
        Subject: CN=5c638298-87e0-4160-acb2-121a03e698d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:5f:52:2f:b7:2b:f5:87:5a:64:cb:43:59:
                    05:74:d7:f3:db:26:45:5c:10:cf:b6:d0:f2:10:26:
                    8b:a0:30:b8:fa:17:58:84:de:41:95:10:13:f4:89:
                    42:59:5c:71:4b:4c:e0:54:fd:4e:07:11:69:48:c8:
                    86:30:e7:46:be:7b:e4:60:e6:01:4a:c9:55:d2:e9:
                    3e:22:a9:27:04:3e:7f:21:3d:21:b7:37:e1:f1:29:
                    68:f7:19:1d:a0:66:58:b4:d4:ab:45:6d:4a:2c:ef:
                    bb:24:1f:86:24:30:d4:2d:61:4a:24:80:94:8c:c7:
                    e9:48:08:6d:e7:e3:71:fd:e4:8e:95:09:3b:ae:a7:
                    9e:ca:c9:8e:8d:2f:df:07:dc:23:0b:f4:23:ae:67:
                    e0:6d:2a:e8:24:1a:bb:71:30:a2:c6:a0:8e:88:41:
                    69:86:d0:81:cb:25:2a:3b:0c:9a:2b:b8:38:27:b8:
                    33:23:40:63:4a:e3:9c:c5:98:3b:1c:a4:b5:d2:72:
                    c7:aa:29:08:24:a0:1a:b6:d3:ae:eb:3a:c5:c7:47:
                    fc:49:f6:39:8f:62:76:c5:45:85:55:e2:11:4a:ea:
                    db:9c:cf:42:ac:f4:ae:d3:f3:96:47:ab:35:ed:73:
                    05:c4:91:83:72:4d:ca:dd:16:ed:3d:f3:bb:63:c6:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:27:F7:39:8E:6F:01:33:CA:A2:9F:D2:F8:8F:42:37:FF:27:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2f3c0a11-30ff-3853-860b-b870e9ce1762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d04f::/48
                  2001:49f0:d0ad::/48
                  2001:49f0:d0c1::-2001:49f0:d0c2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:04:43:1b:64:8c:66:b1:d7:dc:df:df:8b:ba:0e:49:5b:82:
         79:03:f7:f6:bc:f9:6e:02:44:90:81:7c:6b:60:81:70:ee:e9:
         7f:64:14:36:27:e1:1a:62:cc:c9:7e:4d:c8:4e:2f:95:f8:13:
         36:6b:3f:6a:67:3e:56:22:0c:a7:44:64:52:d8:31:7c:63:4b:
         5c:ea:f1:21:6f:8b:54:67:6b:8b:60:b7:48:4d:9c:f9:17:89:
         fb:e0:6b:ed:0c:8d:5e:29:46:c2:40:8a:94:61:5a:bc:33:d5:
         dc:2c:05:2b:55:a2:15:b1:a5:04:ee:f8:bc:52:39:54:6f:0f:
         2c:19:85:74:f5:fd:fe:20:42:3c:51:69:16:fd:bd:c5:f6:26:
         13:58:c3:e1:90:2d:03:f5:48:80:49:b5:5d:d0:cf:b5:57:e6:
         15:2c:a3:f3:24:c7:e5:b1:28:03:14:76:a6:0b:29:c4:46:be:
         80:ef:be:01:09:f7:bb:90:62:c1:ee:14:a0:1d:50:ec:39:40:
         03:96:9c:cb:7c:9f:d4:a6:80:d2:29:2d:74:4a:0f:62:67:29:
         03:c6:31:29:21:29:c5:61:74:35:db:14:88:96:4d:72:99:4f:
         a5:62:9c:17:5a:a2:52:04:61:65:ae:d5:cb:b3:e2:c0:46:77:
         83:ea:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:35:33 2025 by rpki-client