Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa
File:                     81dfee83-ca80-33e1-87cc-87e91050e0e8.roa (raw, json)
Hash identifier:          cmjl81K/EfQ7CuYJSVMy7RbXWxJSAV6ZzSK3OqaASZA=
Subject key identifier:   44:6D:62:1B:FE:57:65:4E:C1:E4:58:27:13:37:FC:78:22:47:E9:14
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584937D93B2098838694BBF0F700
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     30045
IP address blocks:        2620:62:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3b:20:98:83:86:94:bb:f0:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=74209be7-32a9-44d9-a724-f94e97785254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:1f:43:c0:58:6c:e1:b7:4c:4f:1e:93:55:
                    12:eb:b2:29:f4:98:8e:f8:17:0e:6e:47:9e:ef:d9:
                    6a:55:c5:6a:14:ec:6e:38:94:b5:06:97:a0:b5:a4:
                    3f:47:2b:8d:6c:ab:4a:40:bb:ad:3a:65:5c:47:65:
                    dd:72:0a:66:64:99:df:80:f9:2a:e8:cb:25:39:e0:
                    19:57:fa:b1:f9:23:cc:af:35:81:3e:2d:65:d5:d6:
                    6b:89:b1:8c:b9:d7:1c:3a:69:dd:03:ff:9d:13:63:
                    c4:fc:ea:8e:d8:4c:37:ac:fd:53:d8:77:dd:33:e1:
                    e6:31:1d:ef:c3:0c:a5:16:85:ec:7c:55:42:ac:60:
                    6b:70:c5:53:42:d8:7f:c0:f9:41:75:e2:c9:15:ef:
                    6b:2b:8e:da:f3:9c:fd:12:00:29:f3:38:d1:fb:b6:
                    24:aa:56:cd:5f:16:f7:f7:b3:58:94:68:b1:7c:bf:
                    9c:f3:24:f3:7f:62:a1:73:7e:f1:b9:c0:98:8c:28:
                    b3:a6:54:54:37:d1:71:86:51:3b:3b:d0:c2:24:ca:
                    b9:f4:37:c9:ae:c5:f9:1d:47:8f:83:cb:d4:16:59:
                    c2:3a:76:cb:dd:fd:70:86:9a:82:62:00:03:ef:ab:
                    96:bf:4e:96:23:6b:c7:a1:c3:e6:c4:1b:84:a4:56:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6D:62:1B:FE:57:65:4E:C1:E4:58:27:13:37:FC:78:22:47:E9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/81dfee83-ca80-33e1-87cc-87e91050e0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:62:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:81:2d:18:fa:9d:bc:88:d4:89:bf:62:cc:a5:62:1d:64:
         85:57:34:ed:da:1f:89:b2:81:d7:b8:83:05:50:73:37:c6:84:
         1c:c3:eb:bb:52:5d:b6:0e:60:1f:a6:31:f0:7b:4d:f2:72:74:
         ac:60:94:04:55:94:18:b2:01:aa:fa:24:5e:94:7b:c1:86:ee:
         93:5f:e2:50:dc:30:72:5c:73:95:09:e8:45:09:e6:31:d8:75:
         ad:17:c5:ff:c3:f1:66:7d:7c:0b:c9:82:e1:2f:cf:a8:48:1a:
         07:56:4d:78:d8:0b:e5:33:7f:6e:fa:cd:6e:2e:d5:2f:11:22:
         60:55:99:4f:aa:d6:11:a2:ca:da:b3:c9:12:66:06:73:03:f9:
         42:18:4d:7c:8e:1b:15:fa:4e:5e:80:3d:7e:9b:35:80:f9:2a:
         48:ad:56:5d:11:ec:77:72:e3:19:bd:a7:52:69:30:b1:7b:ad:
         ea:ce:12:72:ca:c3:c2:0d:9a:e5:cb:93:9e:2a:41:be:90:0e:
         ff:23:c0:c2:a8:da:8c:eb:96:40:17:ec:33:fd:78:a6:a0:70:
         42:ec:3a:7d:74:1b:de:57:9a:39:c6:52:d6:1e:49:96:0e:2d:
         31:60:4b:9c:b1:87:a9:dd:79:03:66:c2:c0:74:da:f1:da:d0:
         32:fd:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:33 2025 by rpki-client