Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78ccc37b-617d-3256-ad33-76e24181776a.roa
File:                     78ccc37b-617d-3256-ad33-76e24181776a.roa (raw, json)
Hash identifier:          30AO6ZkfX0dn0leWkcZ47XYHZXAhCJjeSRFBVBt33s8=
Subject key identifier:   5F:93:78:10:9E:81:97:98:85:64:E1:28:4A:73:F0:28:DB:37:57:F3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A25A6B4214C54FB14BEA06200
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78ccc37b-617d-3256-ad33-76e24181776a.roa
Signing time:             Tue 10 Jun 2025 17:21:33 +0000
ROA not before:           Tue 10 Jun 2025 17:21:33 +0000
ROA not after:            Mon 08 Sep 2025 17:21:33 +0000
asID:                     3939
IP address blocks:        2001:418:7:5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:a6:b4:21:4c:54:fb:14:be:a0:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun 10 17:21:33 2025 GMT
            Not After : Sep  8 17:21:33 2025 GMT
        Subject: CN=ed01e827-8e9f-4d50-b0f4-d7b5290b0fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:11:27:fa:9e:6d:13:d2:3a:d2:48:68:9f:
                    e9:78:2d:3c:18:fb:43:59:3e:c5:49:b6:93:2d:c3:
                    b7:2f:2e:08:b7:3b:2f:23:1c:d3:34:7f:c6:64:68:
                    44:11:4e:21:a7:41:cb:a4:7d:57:3b:64:d1:ea:af:
                    2e:e1:ee:58:3d:4e:ce:1b:63:d0:48:f2:5a:fc:0d:
                    39:76:89:73:9d:20:3e:a5:e0:46:0a:9a:0f:eb:5a:
                    ba:34:3c:2e:a8:aa:24:34:35:09:23:ed:fe:21:8f:
                    9f:a6:8d:46:83:34:ff:4c:df:24:79:55:ed:a7:63:
                    f5:03:64:d8:b9:42:40:3e:4f:f5:31:a7:2c:ef:52:
                    22:81:9c:32:28:d4:82:70:16:a9:df:89:41:3a:ec:
                    ba:37:7b:dc:b2:83:90:e1:0d:44:23:f0:fa:ae:d1:
                    2d:c1:d7:c7:fa:6c:c5:3b:46:a9:fc:57:ff:1e:9c:
                    de:35:d9:78:de:08:0e:67:c1:25:86:20:49:a3:ab:
                    de:84:a6:7d:1e:64:d4:ee:cb:a2:f9:ab:25:7f:8f:
                    87:8b:17:99:00:87:ef:b2:2e:b8:ee:4d:90:06:10:
                    80:d2:6b:5f:64:40:76:6b:1a:30:2d:a1:34:88:0f:
                    7b:b3:c1:d9:8f:c4:cc:5a:04:83:c8:72:6c:6a:eb:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:78:10:9E:81:97:98:85:64:E1:28:4A:73:F0:28:DB:37:57:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78ccc37b-617d-3256-ad33-76e24181776a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:7:5::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:8f:e2:5d:5c:32:bf:cc:92:7c:9f:cc:7d:3e:3b:b2:64:
         3d:8a:9c:ea:6b:20:c3:5f:af:57:7e:ec:44:ad:1e:87:53:1e:
         cc:7c:fd:88:80:f1:81:95:74:5e:a5:12:59:60:3d:d7:dc:fe:
         07:f9:0c:fe:a2:1a:0f:d4:df:81:03:5f:de:f4:3e:3b:03:85:
         7b:90:27:76:cc:e9:04:97:0f:96:e7:b4:7e:2e:fb:97:cc:7b:
         70:a5:36:15:99:ba:1d:4d:cb:ee:3b:ef:e1:44:e4:b3:e2:16:
         cf:bd:e7:37:af:0e:1c:ab:75:8d:a3:18:f0:f2:ed:2d:f7:64:
         be:93:76:e0:e6:f7:54:d4:cd:9d:2f:12:a1:68:6e:b6:33:f7:
         93:14:ad:40:96:49:da:d5:81:bb:45:61:e0:72:33:b9:3d:b7:
         49:9e:67:62:32:a8:43:38:9e:11:39:e0:cb:4d:01:79:70:91:
         97:25:f3:80:a1:77:c0:50:3d:44:b6:4e:76:c6:83:09:a7:76:
         fe:d6:c6:eb:22:1b:7b:f7:b1:85:ab:92:86:81:be:4b:74:53:
         53:af:78:06:26:92:e5:c1:12:59:a1:42:29:5e:61:75:e8:51:
         2d:0f:2e:9a:7b:b1:db:24:38:74:a7:5b:1a:bd:e7:16:eb:aa:
         8d:fe:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:01:59 2025 by rpki-client