Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
File:                     c983825e-c67d-363b-8674-4ab78008496c.roa (raw, json)
Hash identifier:          gbo40FiUtpvTNYBld1yCZI2hDvfRRSGd4z2avZEJjH0=
Subject key identifier:   57:1D:48:19:3D:45:E0:F7:76:02:1B:2D:B8:D7:33:C2:55:FF:7F:44
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584AD9364E8215AFFD47ED942480
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     20205
IP address blocks:        2001:4950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:4e:82:15:af:fd:47:ed:94:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=6018ac07-a281-4191-893a-17edbc0f6d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:0d:47:0e:7b:a1:d0:a0:bb:3f:9b:0a:23:
                    14:c1:00:4b:3e:9b:5c:9d:ae:6d:57:ec:1c:a1:85:
                    15:76:b6:ff:99:49:70:a8:6a:97:05:81:5a:51:58:
                    57:58:34:47:cd:80:fb:57:f2:7d:c2:1e:1b:ae:22:
                    bc:ca:60:d0:00:c3:cf:7d:e0:2f:ca:62:71:b2:ac:
                    bd:4f:bd:8c:e4:d0:89:49:7d:37:d6:64:02:fb:7e:
                    d5:03:e4:8c:fb:ee:4d:e0:f7:ea:16:d0:30:99:01:
                    87:59:f3:19:c5:0c:50:bd:de:0e:65:1a:11:7a:a2:
                    15:e7:e8:69:45:8f:5c:c0:f3:7b:82:72:d0:73:d0:
                    fe:8b:df:58:f2:b2:c3:e9:65:97:f3:e5:0d:73:57:
                    db:2d:d6:f9:6a:76:74:c3:8b:74:df:da:39:11:27:
                    9b:1c:62:d5:7a:6f:5a:b0:09:18:19:5b:dd:04:fc:
                    9e:ac:ee:81:a8:a9:20:b1:14:72:cd:24:21:ea:20:
                    ea:55:4f:04:94:53:e4:93:5e:2c:81:de:a0:aa:ea:
                    05:49:ac:3c:1c:49:09:47:d1:b1:65:6d:ff:51:73:
                    67:f6:e2:1e:aa:16:ee:3e:69:ff:44:7c:ba:fc:8e:
                    0e:3d:6e:c3:29:b2:06:47:a3:64:59:99:26:59:7b:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1D:48:19:3D:45:E0:F7:76:02:1B:2D:B8:D7:33:C2:55:FF:7F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4950::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:de:de:0e:13:f9:39:c2:5a:37:10:17:0a:17:c4:18:38:
         60:c6:31:a2:1d:e4:97:7f:bc:3a:26:49:ad:f3:2a:90:5a:95:
         41:ef:b8:c6:eb:e5:9b:06:4b:4a:95:2f:e6:48:70:75:56:72:
         b4:19:74:6c:ee:92:d9:e9:68:ca:99:e2:2a:bd:9a:70:5a:b2:
         80:30:e9:1c:e7:af:af:7b:a9:61:27:b3:57:42:2a:ff:9a:41:
         93:ed:e0:e0:64:73:68:d6:60:83:24:b6:98:25:71:c9:b2:d1:
         e1:c9:3e:bc:d3:10:05:91:e9:70:87:67:65:b6:bc:e2:17:01:
         3c:a9:6c:d8:0f:fd:82:ab:1b:f0:e7:d9:c8:e2:b4:a7:9b:bd:
         b0:e2:b8:56:77:d0:2b:13:59:a9:a5:83:c8:88:57:82:45:c1:
         b0:ea:3a:a8:4d:03:72:40:29:1b:e9:07:a3:1c:cd:52:c4:56:
         87:b4:ce:1d:9e:39:c7:6b:df:e3:9d:89:ad:da:24:4e:90:4a:
         ad:1c:7d:f2:84:e5:e2:a3:7f:b1:59:05:1d:ba:de:67:60:32:
         87:e7:f4:11:7b:02:b9:c5:5e:cb:53:4b:ae:de:69:a2:90:7e:
         2e:7f:b5:d2:ec:42:f3:42:16:8b:2f:4b:fa:77:1d:c6:75:53:
         df:92:ff:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:50:49 2025 by rpki-client