Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa
File:                     fae98359-f003-3f79-a8ba-12ae14bdda4d.roa (raw, json)
Hash identifier:          QnXaa1bXP4j+IZeQRx551sPFULnWPvJQRzj7nTOHjR8=
Subject key identifier:   8B:FD:0A:5D:C0:27:E9:32:57:AF:6B:C2:6A:90:2D:F4:E3:58:B5:E1
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584A1557148F19F0CB7F638E7300
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa
Signing time:             Wed 04 Jun 2025 21:08:12 +0000
ROA not before:           Wed 04 Jun 2025 21:08:12 +0000
ROA not after:            Tue 02 Sep 2025 21:08:12 +0000
asID:                     14618
IP address blocks:        2620:8:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:15:57:14:8f:19:f0:cb:7f:63:8e:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Jun  4 21:08:12 2025 GMT
            Not After : Sep  2 21:08:12 2025 GMT
        Subject: CN=0aefc5dc-46cb-4742-a4ea-5411c5abdff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:d8:11:0e:5c:ce:d5:2f:72:ae:9f:89:a2:
                    c2:65:80:0a:de:d1:cd:0b:ee:ec:d6:e3:c5:01:78:
                    d3:cf:1c:46:9c:f4:be:0d:c2:fa:52:0a:45:40:00:
                    40:a7:60:85:bb:62:91:46:d2:e8:c5:76:d4:7c:bb:
                    c1:d6:31:f3:6d:79:2f:a7:f2:d6:9c:45:ae:ba:3c:
                    69:1a:18:84:c3:b1:7b:cd:78:05:5d:6e:01:84:85:
                    d7:31:25:68:89:b9:55:38:45:4f:43:9b:68:4d:d6:
                    bb:24:e8:ad:98:69:e9:4d:a5:e2:58:be:34:e6:e3:
                    5e:d8:c4:7d:d6:e2:4b:dc:47:0f:2a:7f:31:76:70:
                    f3:8f:5a:91:b9:d2:5c:4f:ad:a0:38:b9:9f:bd:56:
                    08:55:8c:3c:0c:d7:4a:46:a5:d2:e9:7d:74:8c:28:
                    6d:b4:cf:0c:3b:0a:da:02:fb:db:db:57:40:36:da:
                    67:04:d4:e1:88:f9:63:2a:1a:14:8a:64:81:8d:3b:
                    14:d8:af:d7:6a:59:24:c2:c6:ab:d5:b2:5b:97:da:
                    c4:12:07:5e:83:06:7b:88:90:bf:dc:10:d3:01:b8:
                    6e:82:2d:9f:e8:ec:49:84:5e:90:18:3d:72:bd:aa:
                    83:6c:57:a8:ca:51:0d:55:6d:68:e5:08:d7:cc:b7:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FD:0A:5D:C0:27:E9:32:57:AF:6B:C2:6A:90:2D:F4:E3:58:B5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:4300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:03:38:86:d4:eb:71:7c:9b:01:96:38:97:5c:f5:bb:ca:d1:
         71:8f:9d:5e:dc:fc:32:18:3d:05:6c:e4:41:90:30:df:b7:b4:
         6e:b3:55:a0:a6:d8:6f:56:ca:96:5a:88:a0:c1:7e:28:d7:17:
         5c:83:50:65:a0:a9:78:43:64:f0:b4:a1:ce:cf:de:f7:20:77:
         f4:00:b9:5b:be:e2:31:40:bd:55:e5:86:3b:fd:6c:1f:48:80:
         11:00:cd:c9:3a:43:9b:3b:0b:30:b4:3c:73:01:88:fd:88:3f:
         df:0b:f9:a3:1a:6f:3e:90:e3:7e:d0:ef:dc:d4:c2:49:bd:42:
         0f:7b:b2:3a:64:e8:78:92:d7:53:96:4f:eb:fb:5a:ef:3c:15:
         bd:06:1e:8e:b9:09:db:5b:ae:66:87:91:37:64:03:8e:72:ca:
         4d:8d:d9:bd:1d:ae:24:1f:8d:db:50:26:a1:1e:88:1a:fe:4a:
         4f:76:f2:6e:a3:53:56:8a:77:44:f9:5c:1f:bd:00:90:d0:99:
         b2:66:32:41:a1:a8:c1:aa:44:9b:36:4b:95:06:b5:3e:cf:ee:
         5a:1b:3f:7e:73:2b:4b:ca:1a:a6:87:8f:66:ce:b7:10:22:fc:
         d0:08:4c:09:fb:8d:c6:14:0f:7a:ef:c9:80:a1:5e:c4:b0:a5:
         dc:90:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:25:08 2025 by rpki-client