Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa
File:                     3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa (raw, json)
Hash identifier:          CHDsfTQd2dU2tGVGk3x9D288YJcnZAfZ0ARs6KIJkT4=
Subject key identifier:   6A:66:C7:83:27:D3:7C:E2:A0:AB:67:DA:9E:B0:12:1A:09:EB:E5:A0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858491941862ECAE01D315CBF0D00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2001:418:1401:25::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:86:2e:ca:e0:1d:31:5c:bf:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=5e7aa3d1-7229-464f-bc93-2be0e9dadd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:ff:b0:c8:34:76:e5:9b:a9:84:90:52:67:
                    97:5a:72:03:c9:ba:43:89:45:9d:c4:c0:27:71:2c:
                    74:86:9e:33:25:87:a4:2a:fd:02:5e:a8:a2:3b:7f:
                    b6:29:36:70:cd:01:cd:df:87:59:48:ec:9e:1d:5e:
                    34:64:51:fa:88:97:7b:92:ec:43:26:48:db:52:38:
                    96:9c:60:a8:4a:a6:8b:21:ad:dd:b9:65:08:9c:1c:
                    80:ad:15:21:e6:08:3d:4d:93:85:6b:c5:d8:cd:c9:
                    cd:55:e7:9c:a4:d0:88:bb:2f:36:c2:6f:60:b6:31:
                    cb:ac:a7:cc:78:4f:df:b3:fe:60:b4:44:ee:87:b4:
                    7b:ed:05:cc:01:e8:98:33:03:33:fd:0a:8b:b0:90:
                    52:5a:76:f6:8f:cd:52:23:2e:2f:65:c7:47:8e:e1:
                    fa:9e:65:f0:5b:d4:57:b9:58:04:95:70:18:cb:51:
                    cb:e6:83:4b:cc:c5:c1:9b:0d:d5:8b:d2:0b:04:ae:
                    77:27:b9:31:b5:ed:1c:47:c7:9f:2e:02:20:d2:7f:
                    ff:1e:5d:c2:34:15:16:c4:28:36:b4:10:0f:0a:51:
                    45:a3:e2:63:44:f7:4f:5d:ff:76:e0:ab:2c:fe:82:
                    99:4e:b3:86:1f:70:53:a5:76:70:3b:ed:9d:b6:01:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:66:C7:83:27:D3:7C:E2:A0:AB:67:DA:9E:B0:12:1A:09:EB:E5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:25::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:87:0d:74:87:ef:18:49:0c:87:b8:75:58:db:17:96:3d:
         b0:cc:c2:7a:78:a2:e0:f6:52:6b:bc:55:98:71:d6:34:18:44:
         46:c7:45:bd:11:45:36:b7:08:ab:f2:d9:30:31:51:f2:e4:ea:
         6d:f8:4d:20:4e:0c:a1:1d:c0:1f:a4:4b:a5:0e:f4:d1:ae:22:
         90:7d:09:de:08:88:5d:9a:e2:f3:ac:b1:0c:66:70:1b:3e:e4:
         61:a7:6f:69:e2:16:6a:26:84:31:16:55:56:0f:81:7c:b1:2d:
         dc:8d:0d:63:44:44:c5:d7:86:2c:0a:7f:41:e3:89:e2:39:4f:
         34:c6:de:18:51:36:07:64:e3:4a:27:2d:b8:96:d1:8c:fd:ae:
         71:4e:b5:bf:91:b6:76:d7:02:30:70:74:7b:a9:69:9a:7f:29:
         e7:a1:96:0e:a9:de:c4:85:d0:76:27:ce:ac:a0:f6:f3:c5:33:
         25:1a:45:53:19:91:68:ff:3e:54:0f:c6:25:76:73:57:a9:a8:
         ad:f6:61:c1:d6:a6:a6:ee:86:68:3b:3a:3a:3c:d0:e1:af:a7:
         1d:ef:e2:93:ba:d2:93:0b:ad:ab:0a:57:eb:41:4a:ad:2b:a3:
         c1:fc:ac:92:61:d2:f2:9a:5d:cc:dc:a0:fc:4d:83:2b:c1:1c:
         3a:98:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:22 2025 by rpki-client