Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/027cdea3-3e6f-3338-aa14-c0aea267feab.roa
File:                     027cdea3-3e6f-3338-aa14-c0aea267feab.roa (raw, json)
Hash identifier:          YyBmAMZockZG+f1/eBXi3d67i/MVdyuZvSuMJqOCgdQ=
Subject key identifier:   96:B9:F4:1B:CC:32:CC:6C:C2:98:90:39:EE:16:64:9D:07:69:E4:F8
Certificate issuer:       /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
Certificate serial:       010D0C9F43285849CBCF8DEF2EB378F7C37F4380
Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/027cdea3-3e6f-3338-aa14-c0aea267feab.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14432
IP address blocks:        2001:504:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8d:ef:2e:b3:78:f7:c3:7f:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=431fa119-615c-4113-90e1-efbac5e639b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:8d:eb:57:53:8a:e8:98:fd:92:fe:99:ca:
                    11:7b:aa:80:51:7d:dd:f5:d2:93:75:c2:80:45:a7:
                    a1:e8:b7:7e:43:52:93:2c:ad:4b:93:9e:bd:74:ad:
                    6a:91:f7:2e:2a:88:96:42:d8:55:e8:04:83:35:a7:
                    53:96:5c:9f:af:18:f4:53:e8:4b:10:d5:d6:8a:42:
                    69:66:3b:59:98:b0:13:e6:f0:34:32:69:c3:01:1d:
                    9f:d3:ae:99:28:56:ee:e0:c8:ee:13:fb:47:53:ef:
                    1e:bb:47:22:6b:6f:6d:cc:bb:99:54:4e:f1:8f:94:
                    13:e9:83:c4:e4:f4:63:5f:c7:20:7b:a1:38:38:68:
                    81:95:c1:fe:e5:77:eb:56:aa:d1:21:9c:f7:0b:38:
                    cc:92:93:cb:11:ed:55:75:ba:b8:8b:36:c1:0f:41:
                    29:ce:3c:5b:bd:6c:a7:ef:96:a4:0e:6d:5e:e9:24:
                    35:8f:17:03:f4:64:35:c3:d7:f8:12:1f:98:d0:e4:
                    84:05:ca:4c:6d:d1:df:7e:5e:05:84:12:9c:1e:5d:
                    8d:66:cf:6b:57:d3:eb:28:6f:bf:01:0a:83:6b:68:
                    e4:5d:45:7b:a7:61:86:4a:3d:f9:0b:73:1b:ab:4c:
                    86:50:5d:55:77:ac:d8:4e:97:0a:1a:a9:ed:75:f3:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B9:F4:1B:CC:32:CC:6C:C2:98:90:39:EE:16:64:9D:07:69:E4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/027cdea3-3e6f-3338-aa14-c0aea267feab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl

            X509v3 Authority Key Identifier:
                keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:77:5e:ca:43:39:e1:a5:d1:7c:85:c8:0a:5c:cc:79:70:
         ed:f9:70:6a:30:94:45:71:de:88:92:5a:b0:2a:b4:3c:69:1c:
         12:56:31:bd:02:d3:b0:00:54:bc:d9:e7:18:c5:75:40:22:2a:
         4a:aa:9c:8a:24:d6:a4:fe:94:26:3f:8a:94:6e:9c:13:2c:7f:
         fa:70:37:66:1e:4a:0e:e4:f7:28:8d:5b:6a:b5:0a:e9:bc:53:
         1b:92:18:af:36:63:06:35:92:bf:dd:cd:f9:38:24:c0:4d:4a:
         0a:87:c1:df:3f:f3:b3:f1:0b:1b:cf:11:14:1f:1e:79:43:25:
         65:ea:9f:aa:cb:af:20:5b:ae:ed:d5:91:b9:6e:3c:fb:3f:56:
         ce:ed:23:ea:c5:21:1e:fb:23:14:9d:75:a4:95:6a:b6:c7:5d:
         c9:7f:4a:7e:50:30:fe:ff:eb:ec:ed:0e:35:0b:ba:19:6c:29:
         8c:9d:f9:83:f4:3c:f5:52:56:4f:e0:5d:a2:98:d4:9b:a5:8e:
         59:1b:c3:9e:c0:91:68:03:7e:b6:64:9c:5c:9d:b6:10:c2:d2:
         69:dc:94:09:27:38:b2:bb:75:71:ac:54:0d:11:c1:71:9b:7c:
         d2:ed:49:b0:a8:1d:43:73:4d:c9:37:bf:29:c7:98:af:ba:a4:
         ef:7c:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:00:50 2025 by rpki-client