Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ae7790f2-c8af-3118-b1c1-faf0ea4d7690.roa
File:                     ae7790f2-c8af-3118-b1c1-faf0ea4d7690.roa (raw, json)
Hash identifier:          AcColQzHByXVXJgtja5qsEztNw5FCU0CFWtQjkb8abE=
Subject key identifier:   AC:D9:19:B4:C2:3D:E3:A4:AF:63:F0:07:FF:98:C2:3E:75:29:EC:4C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A63F5B8EC23B4FBA94E8BB5C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ae7790f2-c8af-3118-b1c1-faf0ea4d7690.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     30058
IP address blocks:        2001:49f0:d13d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b8:ec:23:b4:fb:a9:4e:8b:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=b4d672b3-5a0a-41ee-a57c-10cdbe30ddab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:28:d0:64:2b:86:f5:77:35:97:2d:9a:0c:
                    c4:13:e9:56:19:be:29:2d:fa:3e:f3:aa:3f:3d:de:
                    41:c3:3e:f9:7a:2b:06:be:dc:0d:52:41:e8:4b:d6:
                    6f:b8:fb:dc:64:56:88:b7:99:dd:81:33:e8:09:16:
                    bb:64:54:b3:86:f6:36:2a:ec:3e:eb:f5:26:b2:79:
                    58:a8:d6:fd:ac:fb:73:59:e2:c9:81:f0:aa:e0:5d:
                    ef:3c:86:1e:52:ca:c0:72:1d:71:80:f9:40:96:55:
                    d6:d2:f4:78:8f:3a:d3:26:d1:f4:24:8a:0f:54:63:
                    1d:b5:0c:ab:7b:13:d2:f3:ae:ac:29:2c:3a:28:89:
                    b3:f9:44:6e:68:cf:5b:55:34:6e:12:4e:35:ea:e4:
                    74:bf:62:90:fe:c5:0f:a2:35:0e:9b:04:40:1c:2d:
                    6b:a0:c4:0e:df:29:4b:50:91:ef:0e:55:2f:9a:be:
                    0e:3e:5f:98:0e:7e:e3:33:b4:b4:e5:2f:d8:3f:23:
                    3c:d0:0d:6d:26:67:23:6c:8d:d8:7f:e6:8c:49:61:
                    e8:80:48:09:a7:10:bb:b1:68:1c:0e:24:96:cf:7b:
                    9b:90:16:71:6c:91:90:90:db:b3:0f:36:b3:72:0a:
                    55:5e:b0:e1:61:fa:82:37:d7:e2:f8:cb:94:3e:72:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D9:19:B4:C2:3D:E3:A4:AF:63:F0:07:FF:98:C2:3E:75:29:EC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ae7790f2-c8af-3118-b1c1-faf0ea4d7690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d13d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:e7:70:2b:d1:e4:84:d2:ff:31:57:02:04:5c:72:6b:e0:
         8f:85:63:90:1f:cc:f4:64:e5:41:36:2e:92:a8:fa:a4:b6:da:
         d7:bb:5a:ad:bd:00:d9:01:41:e9:fb:fc:29:c4:f5:69:1c:7c:
         50:c7:b7:f2:a9:ca:34:fc:9d:1d:b2:1b:73:d0:fc:ca:3e:d4:
         bc:09:8d:34:48:e8:ea:31:e3:dd:11:64:af:51:7a:a7:9a:a8:
         b8:c2:43:da:39:ea:be:92:cc:4a:7b:03:ba:18:d5:88:53:0d:
         17:90:14:25:00:28:0a:13:52:b0:24:6d:fb:fa:b0:b3:b2:0e:
         62:d4:0f:b5:4c:05:16:3c:07:69:f8:06:04:86:b8:64:cc:6e:
         e7:fe:8a:ec:84:d7:ad:b8:4e:40:ee:a5:3f:2b:2c:49:91:41:
         ed:eb:c3:7f:fa:e6:1c:03:39:0a:52:ec:fe:2d:58:54:38:ce:
         62:98:f9:99:13:d0:70:7d:97:c2:dc:df:83:77:2c:f3:f6:74:
         8e:7f:37:7b:0d:94:6d:34:f7:98:d9:4a:18:11:51:80:28:0b:
         bd:70:35:b7:f4:b9:22:ca:99:c1:bb:5f:8e:e1:b9:6c:85:fd:
         c5:d7:d6:e5:47:02:22:d9:ab:f4:06:f6:44:23:13:95:66:00:
         c3:54:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:58:42 2025 by rpki-client