Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa
File:                     bac42415-fae2-3af2-804e-7915f8309a0d.roa (raw, json)
Hash identifier:          ps4ce/CxFk628DHgEgBnsJ6gdievx069rptQVTTvSIc=
Subject key identifier:   07:64:36:BC:7D:E8:79:B2:59:B2:02:F4:CD:44:C3:0D:9E:24:E0:5A
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F4328584A0C0571CCA4F115B3E9601440
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     1207
IP address blocks:        2001:5e8:ffff:3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:71:cc:a4:f1:15:b3:e9:60:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1f3e47d0-9925-4c48-a638-d1f7d5dd57e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:de:e5:14:5e:8e:13:cd:ff:f4:b0:b2:db:
                    d2:b3:10:04:50:6c:52:8e:b1:6d:e5:79:be:14:9a:
                    a5:d7:9a:dd:f9:9f:b6:5c:15:be:3c:86:00:23:22:
                    5f:19:b9:09:2e:2e:3e:58:1c:a6:83:c3:19:ed:44:
                    ba:8c:f0:77:f4:5b:7a:2c:20:38:40:50:0c:38:00:
                    99:f2:b8:69:61:bf:5e:a2:76:ce:d3:82:60:8e:8c:
                    68:ad:5f:b7:59:64:4f:89:7c:96:ac:4f:96:b5:77:
                    d9:e2:00:1b:4e:25:7d:6c:fd:24:a4:78:2d:61:fe:
                    6f:62:d0:ab:b1:40:a3:30:94:6c:31:2b:eb:fc:97:
                    82:97:49:27:a2:7e:3c:89:7a:b6:29:ae:98:c5:c0:
                    65:e4:e2:da:40:08:58:81:1e:0c:51:d2:87:a0:e7:
                    41:6a:31:df:83:a9:41:10:b8:8a:c6:db:63:c4:45:
                    0e:ac:23:e1:19:1f:0d:3b:e3:6e:aa:74:b5:08:0d:
                    6b:63:ef:cc:ab:41:11:dc:bb:17:86:e4:05:cf:0a:
                    14:7f:a5:0c:65:74:2f:a3:98:f1:56:f3:65:8f:43:
                    71:82:56:c7:38:cc:5f:e8:d8:fc:01:01:ea:06:71:
                    a2:fb:f3:fb:ef:94:12:5c:03:b7:63:f6:89:ad:0f:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:64:36:BC:7D:E8:79:B2:59:B2:02:F4:CD:44:C3:0D:9E:24:E0:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:ffff:3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:84:86:e6:34:60:99:a7:20:07:9c:b6:95:2f:dc:32:aa:
         3e:3a:29:e0:2d:42:ae:b7:56:22:dc:d6:43:80:d8:38:de:b3:
         5f:28:b5:85:fd:e4:f4:86:15:14:18:7d:58:2e:3b:3a:da:9d:
         59:f0:49:dd:21:1a:af:af:b7:85:64:71:fb:94:80:be:df:af:
         6d:2b:d9:40:45:a2:8c:d8:ae:37:5f:bc:2d:c7:67:a0:b8:11:
         91:b3:a8:49:09:b3:f6:35:1f:24:ae:e3:17:1e:8f:c8:ca:1b:
         21:ac:4b:de:ba:ae:96:02:eb:19:d5:a9:ce:a0:07:43:50:e5:
         50:dc:46:51:7f:6a:5b:d6:fe:c6:3c:2a:b1:bb:c7:76:9c:db:
         b2:d3:f0:ae:6a:3f:9c:d5:cc:f9:ef:16:1d:fa:43:39:a4:27:
         88:1a:1a:13:0d:7f:dc:a6:74:a1:64:f7:6a:84:9f:9a:8f:f6:
         ee:fa:bd:19:6d:ed:cd:50:88:18:94:26:23:8c:c1:4b:cf:4e:
         d7:fd:58:b4:b7:16:2c:46:08:42:5a:98:34:4f:f1:1c:54:d2:
         7f:89:44:88:81:69:a0:e8:c1:f8:76:6b:bf:d7:04:ec:32:da:
         a4:9c:97:f8:54:24:71:f3:27:6c:09:43:4c:6c:d2:95:38:7b:
         d6:01:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:42 2025 by rpki-client