Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
File:                     c83d963c-2ced-33fe-8730-392675d7ca11.roa (raw, json)
Hash identifier:          NJEy3la32Om0pw1xnmdd7y+RE+auybi8eH4/8ZCdirY=
Subject key identifier:   BE:3B:14:FF:39:55:D0:B9:B1:C8:33:65:5E:CE:08:9E:5F:F4:06:6C
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F4328584A5CFB34C9C24F80EC7A51B2C0
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     5050
IP address blocks:        2001:5e8:0:1002::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:34:c9:c2:4f:80:ec:7a:51:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ad116a40-aacd-416e-978d-913907cbd192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:6e:78:66:3d:01:cd:89:84:60:bc:ec:03:
                    47:62:ca:9f:b7:c3:65:76:01:fa:82:9b:0d:3f:eb:
                    6f:54:87:b7:90:36:10:4b:6f:70:91:28:96:e7:50:
                    91:cd:d4:b1:b3:cb:f0:be:4d:00:95:b0:c1:8e:dc:
                    c1:2a:d6:b1:ed:77:cb:61:99:38:63:ba:cc:d8:ce:
                    c5:25:20:4e:c9:00:f8:40:3c:8b:cc:f5:66:a2:dd:
                    aa:37:c0:6e:5f:c8:78:b9:c0:00:54:d6:3a:eb:c2:
                    56:65:af:de:82:37:24:39:fa:3a:f7:0a:a0:83:02:
                    7d:70:46:83:ba:86:32:93:d1:7e:76:0b:bb:41:ea:
                    a8:22:2b:6c:ad:12:20:55:3f:bc:ee:c4:3b:6d:dc:
                    44:5a:7a:bc:c0:e7:b5:e7:0a:f6:d3:26:cc:a7:b1:
                    0a:67:26:1b:9d:e1:17:30:08:8b:c6:48:4d:5e:c5:
                    b4:61:32:98:d7:7f:60:5a:3f:bb:2e:b5:fd:1e:6d:
                    1c:1b:f7:08:2e:60:c6:0a:41:14:c0:27:c8:71:79:
                    e7:65:cf:7a:51:5b:b9:7a:e3:2a:90:80:25:97:b1:
                    83:21:92:dd:03:d1:42:2c:8b:c3:37:4d:bd:d8:52:
                    d9:59:12:db:d4:c2:fd:ec:34:75:6c:00:a8:97:87:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3B:14:FF:39:55:D0:B9:B1:C8:33:65:5E:CE:08:9E:5F:F4:06:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:0:1002::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a4:4e:ea:30:bd:56:9e:79:85:c9:5b:e2:69:12:7c:af:5f:
         07:e8:b2:9b:62:10:cf:68:32:b1:b9:54:98:12:c0:9b:bf:10:
         fa:ca:99:19:a5:de:56:c3:62:c7:05:9c:ff:c2:77:b7:ea:bf:
         8c:87:67:dc:86:c9:25:19:31:ce:86:1c:43:53:95:57:4f:c8:
         3a:e3:e7:35:5e:3f:d4:03:fd:88:fb:22:18:58:b1:7d:18:5f:
         30:a6:2c:42:17:94:59:bc:6e:27:82:6a:7f:cd:11:ea:21:7f:
         ff:86:64:20:af:6f:f8:8a:7f:9b:e6:c1:5f:c6:a1:0d:1a:d4:
         c9:dd:f0:6b:83:91:78:89:87:e0:8f:a1:fd:e6:fe:47:3e:f5:
         63:81:9d:f6:20:b4:1a:3c:e0:a2:2f:4d:03:d9:a3:a3:69:c8:
         2b:7c:60:ea:e1:c0:25:2f:23:32:72:5d:51:aa:c7:8d:7c:67:
         aa:53:bd:a4:11:c1:9f:18:c2:9f:7a:6e:63:40:fe:53:e4:aa:
         c3:c2:1e:f6:9d:bf:0d:06:80:6b:a9:2d:d6:1e:50:67:5b:b3:
         f8:63:92:09:8a:07:0a:54:38:c4:56:e2:00:cc:a9:a4:da:57:
         a5:f7:f0:6a:ee:6b:f9:3c:38:93:bc:ad:64:d0:8e:4b:fa:97:
         d8:4d:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:12:28 2025 by rpki-client