Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c32ac609-3d3b-3033-ba65-645e5095e2b5.roa
File:                     c32ac609-3d3b-3033-ba65-645e5095e2b5.roa (raw, json)
Hash identifier:          C3jEQu2tr4ELHVsGJXsl+vVY9p2aNiHYfKUrsetXMJY=
Subject key identifier:   65:97:0D:3A:FD:A8:B4:58:80:95:7D:18:09:AD:25:F4:A0:70:EF:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218436CF4453318379ECA900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c32ac609-3d3b-3033-ba65-645e5095e2b5.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8034::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:36:cf:44:53:31:83:79:ec:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=1d0f4849-c1ab-4a11-ae30-6c7a5335a074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:0e:82:f0:dc:35:ee:02:bf:38:33:1b:04:
                    51:76:2f:ba:30:6c:1a:07:71:28:bd:d7:47:ba:3d:
                    24:ba:4e:4a:b8:bb:8c:c8:6e:70:72:ba:78:13:ee:
                    89:1f:03:55:aa:e4:8a:e3:c9:08:b3:1e:24:7a:25:
                    e0:d6:f2:54:4a:bd:82:d8:34:4f:88:b2:aa:0c:cf:
                    57:94:e8:4e:69:0c:d1:97:f2:13:4e:b3:81:03:e4:
                    11:a9:7b:00:37:cb:42:8c:26:b0:9b:12:84:7c:8d:
                    ef:1f:13:bb:b4:86:93:71:7b:99:19:09:67:b4:05:
                    3a:23:18:26:fc:ce:59:24:c3:88:c4:c2:c4:90:ba:
                    eb:88:84:bc:e0:8c:57:3b:de:6b:98:63:e7:bb:6a:
                    e0:5e:53:e9:a1:f2:53:cb:e5:5b:0e:75:5a:ce:9d:
                    71:d3:6f:be:84:1b:38:c2:cc:c9:0f:cc:68:4f:7f:
                    ed:a3:5f:07:16:07:57:f3:76:db:ba:5f:72:65:15:
                    07:e2:5b:d5:b4:ca:a1:98:df:05:1d:84:b0:54:cd:
                    1f:85:32:9c:5c:3b:e0:76:3d:34:73:ce:73:b0:83:
                    d4:a0:c3:2f:21:b8:fc:f3:ce:07:4c:fb:c5:91:3e:
                    52:85:83:6a:65:23:41:ff:39:d4:f7:db:cd:72:ee:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:97:0D:3A:FD:A8:B4:58:80:95:7D:18:09:AD:25:F4:A0:70:EF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c32ac609-3d3b-3033-ba65-645e5095e2b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8034::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:58:b0:ee:0c:8b:51:22:04:37:4e:50:4a:61:e4:7b:46:
         6d:6d:17:82:38:96:3f:f8:8b:4f:9c:7c:86:7d:c8:99:a6:f8:
         d4:85:16:11:e3:f8:18:96:4b:c3:4d:8c:28:1a:c3:a9:6d:2b:
         a8:7c:ec:44:06:39:df:dc:5c:b4:3f:b8:40:66:06:11:79:ee:
         66:b7:87:ec:88:50:21:90:09:55:91:bf:8e:4e:94:0c:c1:42:
         59:98:ed:9b:39:81:c9:82:4e:56:26:cd:d3:a2:71:c0:19:f7:
         a3:06:b2:c9:d8:8c:5c:69:71:b8:cf:d0:f5:8e:68:3b:b6:ee:
         6a:94:c3:36:43:b1:a3:1a:df:18:b2:01:8f:de:13:e8:10:40:
         dc:4f:a2:bd:9d:78:5e:e6:45:d5:5c:7b:2a:c6:5f:9c:ea:df:
         c1:ff:e2:f7:62:51:33:c8:ad:fe:a7:1a:bd:4a:79:d2:12:70:
         eb:7a:9e:36:7c:8e:83:f7:8d:41:3a:93:87:26:a8:04:fa:44:
         e8:0b:f7:40:74:7d:b4:c3:29:97:be:2c:e8:92:36:aa:9b:c1:
         aa:c1:39:92:2e:27:25:c3:32:4b:f5:af:26:be:98:95:dc:9b:
         fd:fd:8c:26:75:a3:79:8f:e1:c0:1a:99:b2:48:65:d7:53:5e:
         02:1d:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:18 2025 by rpki-client