Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa
File:                     a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa (raw, json)
Hash identifier:          +N9mHx26TUf28AQWMA3d37KlL5RHZ6DFpFi6+twwOZ0=
Subject key identifier:   96:7E:7E:69:9E:80:CE:B7:8C:25:B2:0B:01:42:5B:19:3D:C3:18:91
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F43285849DCD20552DFE688EA70FF2200
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa
Signing time:             Thu 15 May 2025 15:14:50 +0000
ROA not before:           Thu 15 May 2025 15:14:50 +0000
ROA not after:            Wed 13 Aug 2025 15:14:50 +0000
asID:                     16527
IP address blocks:        2604:2900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:d2:05:52:df:e6:88:ea:70:ff:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: May 15 15:14:50 2025 GMT
            Not After : Aug 13 15:14:50 2025 GMT
        Subject: CN=8b61ffff-d320-476a-9365-210eff15edd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:95:f6:af:29:ea:07:f4:59:85:16:64:ec:
                    f0:62:34:b1:86:e4:18:fd:70:b9:e4:28:c2:73:38:
                    5b:b7:06:f8:af:26:95:13:c4:9e:00:e7:cd:e7:f1:
                    8e:97:71:f7:d4:5e:06:cd:05:e0:a5:5d:38:e5:23:
                    fb:15:a6:7d:e2:71:6e:39:a4:a9:45:3a:45:22:7a:
                    ef:f9:20:af:21:bb:6c:23:29:5a:27:1d:02:ff:c0:
                    e5:83:25:7d:89:bd:44:4a:e6:60:e7:7f:0b:dd:69:
                    e5:04:a8:16:5d:1b:a4:18:61:55:41:46:9c:06:67:
                    e1:27:23:1f:36:4e:fd:bd:c9:5a:4b:67:ef:e5:54:
                    9f:9c:78:4a:59:b0:4f:e3:d8:dd:24:0e:09:87:43:
                    6f:c5:7f:72:95:16:0b:e7:83:d2:0a:a2:fb:55:44:
                    72:9a:7f:ac:f3:85:68:9e:34:4c:17:c7:da:a7:f4:
                    c9:01:49:8c:29:91:74:ac:f5:67:c1:77:d9:7a:7b:
                    de:16:f1:ce:94:06:39:63:b8:33:dc:e6:06:92:e5:
                    8f:5a:b3:3e:6d:45:e1:dd:f9:a9:66:b3:9b:c5:ed:
                    e1:b1:ab:4e:91:98:c3:2b:2f:71:ef:6d:84:7c:4b:
                    2d:f4:ee:1e:40:c8:f6:38:bd:17:eb:9e:7f:d4:2a:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7E:7E:69:9E:80:CE:B7:8C:25:B2:0B:01:42:5B:19:3D:C3:18:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:14:9c:7c:e7:62:7a:67:79:cd:70:2e:4c:f2:7c:ad:e5:ee:
         e2:7c:4b:ef:77:37:ef:d3:8e:6e:78:c5:a9:b1:66:8e:d4:03:
         f3:ee:e5:75:b7:3b:f8:1a:4c:85:29:d8:45:e4:bf:dd:69:87:
         47:a8:61:fe:d2:45:e2:b8:18:2b:ca:47:d1:f5:15:ed:72:b8:
         3b:8a:df:7d:b0:38:11:ed:e3:96:d5:04:2d:a4:b7:2d:e6:97:
         5c:62:6b:d1:9a:f2:57:0c:83:22:4f:79:11:a3:64:44:d8:35:
         f6:8e:7d:ea:b1:a4:69:50:23:3d:38:3b:11:b4:e9:5c:bd:e1:
         e5:b0:ef:a3:1a:bc:70:ce:57:dd:21:aa:ce:b5:79:26:b1:1d:
         3c:fb:a5:2b:e5:77:0d:26:ae:73:9f:ef:22:96:3d:41:7e:a9:
         2a:b0:45:98:ca:2a:04:bf:66:01:d5:95:b3:de:f5:c1:0f:3b:
         40:50:3b:7a:18:83:83:a6:3a:5e:a4:34:fa:49:8f:df:64:63:
         9c:8b:ac:cc:05:86:1d:c4:d7:a8:54:cd:59:4d:47:dd:f6:0b:
         34:ef:f9:4b:a4:be:3a:02:d2:f3:c0:36:58:b5:8f:a5:06:51:
         f6:a7:19:5f:f9:0f:0e:8f:cc:f1:0a:06:bf:2c:49:e7:ae:82:
         a9:00:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:28:57 2025 by rpki-client