Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
File:                     8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa (raw, json)
Hash identifier:          vrIXErDDx74qwBpAohJas09GpgdpixVCf5UqurNUpJs=
Subject key identifier:   29:18:5F:71:EE:D0:2F:3C:79:35:DD:65:B6:21:67:6B:5F:45:C9:14
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584965E975FA60D84779D2FF9CE0
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     30513
IP address blocks:        2001:4968::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:75:fa:60:d8:47:79:d2:ff:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=21fa0124-a67c-45f7-ae43-7546f4e4c271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:6f:52:b1:a8:06:fc:16:c9:64:fe:77:01:
                    18:34:ba:0f:77:ab:64:fb:c1:1d:6e:6c:60:fa:14:
                    3b:43:6d:41:b1:55:94:95:ad:61:5e:ee:b8:21:18:
                    d5:a5:9c:62:9c:91:cf:b3:b7:c4:17:1e:a5:28:1d:
                    2d:18:8c:1b:39:7b:73:b9:63:78:d2:22:9a:0a:8f:
                    cf:af:19:38:d8:0e:0a:f8:de:c8:a3:d4:c5:8e:bf:
                    dd:91:27:a1:d8:c0:9a:ff:1e:e9:95:47:ee:5a:1a:
                    95:5e:93:b0:8b:1a:6f:3e:bc:26:87:53:dc:2c:2f:
                    85:7a:1a:1b:52:84:22:0f:33:e5:6d:ca:eb:87:7e:
                    11:69:21:b0:47:e1:e8:3d:7c:c8:50:91:2e:a2:0f:
                    3a:50:15:92:be:da:81:fe:83:89:07:e2:58:ac:c7:
                    4c:19:31:ad:41:0f:09:92:d0:99:9a:85:e6:f4:c8:
                    a8:da:87:28:f5:bd:af:70:a6:da:58:c1:95:9e:eb:
                    e8:bf:77:d8:17:ca:d2:cc:b5:d2:ba:87:1c:a9:42:
                    cd:82:e4:67:6a:f7:81:ab:05:db:92:1a:1e:de:d5:
                    3f:05:b6:99:2c:82:39:b4:00:b2:68:d3:b4:63:9c:
                    e7:d1:26:a1:cf:17:36:73:77:18:53:3d:48:1b:ec:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:18:5F:71:EE:D0:2F:3C:79:35:DD:65:B6:21:67:6B:5F:45:C9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/8c716d2b-9b2f-397b-817a-08e1c0a402c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4968::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:48:c4:f8:64:c6:42:fb:7e:ab:04:17:ab:50:0b:8f:56:94:
         5e:04:f4:8d:89:ff:87:a9:fc:95:e4:64:ff:77:40:53:b1:1c:
         7a:e2:e2:87:6f:78:3c:c5:a4:0c:db:a7:aa:59:07:c4:4f:be:
         ea:79:c3:98:e5:09:74:90:fd:dd:87:11:a7:91:7a:c3:3e:6e:
         ee:59:72:d3:11:2e:02:bb:63:6e:22:05:a8:95:af:30:c4:50:
         41:92:bc:26:60:9f:a4:6c:91:e2:f7:ac:3b:1d:e4:be:b6:21:
         b2:f8:02:30:e1:70:e2:27:96:c9:51:21:fa:c4:ba:ab:a8:8f:
         02:f7:87:1e:80:18:16:24:35:da:04:47:3d:03:c9:ab:34:4b:
         68:b8:6a:90:22:e5:19:b1:9e:e7:9f:08:20:36:30:8a:2b:70:
         3c:b6:6a:c8:db:a3:30:30:f0:15:70:ba:9c:ec:dc:ef:68:84:
         f1:c9:a6:df:3c:68:ae:b5:3c:83:08:3a:3f:1a:d1:83:3c:42:
         23:32:65:67:c7:dc:cf:df:28:ea:35:27:91:fc:0d:33:b2:0c:
         e6:b6:44:ef:88:f8:af:f2:1e:07:09:b0:9b:f3:fe:d5:be:27:
         93:cd:93:a0:e4:29:e4:67:49:3d:cf:92:56:82:5f:96:cd:65:
         a6:80:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:50 2025 by rpki-client