Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa
File:                     c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa (raw, json)
Hash identifier:          JIN7SscsZgZ3jzv8eP1sB/HmHCaaEDnTe5Kvt+Sgirc=
Subject key identifier:   47:5E:12:91:66:5B:35:57:11:09:8F:8E:45:8A:7D:C1:44:1F:27:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF4D64D36995E0A188720
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:803d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f4:d6:4d:36:99:5e:0a:18:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e6720058-b9b4-4067-a321-09709924bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:69:97:68:98:98:db:05:b3:74:ec:ad:3d:
                    d8:4b:f3:4d:54:50:45:23:ad:39:15:bf:5f:df:4c:
                    3a:91:fe:9a:8d:35:a1:a5:3b:30:5c:8f:f9:90:08:
                    f6:eb:c3:1f:07:21:6b:ab:2b:17:f7:28:09:97:a6:
                    9a:8a:d6:4f:64:0d:05:1b:ed:b3:4b:6c:74:4e:11:
                    d2:1a:02:9b:93:2d:6a:a2:ee:96:0f:bf:a2:c9:dc:
                    27:ff:a8:36:09:bc:92:f1:e8:b3:80:6e:81:c7:ec:
                    94:74:db:ce:1b:03:3d:b8:18:88:1e:4a:48:01:7f:
                    0a:6c:17:63:0c:bf:be:f8:3d:ae:f9:9f:37:1e:1b:
                    b1:b1:13:98:2d:54:06:0b:7f:ba:01:aa:32:11:db:
                    66:d9:a6:c1:40:13:12:e5:87:eb:33:87:ca:02:f7:
                    97:c1:16:4b:17:df:8c:e5:0f:ee:87:31:28:6b:33:
                    81:db:6b:da:67:97:f9:7a:da:70:52:cd:99:f7:34:
                    b2:c3:5e:df:4f:fa:3f:84:1c:b5:b1:41:11:ce:b3:
                    98:8b:16:1a:2d:cd:48:a3:0e:51:fd:b3:95:0e:4f:
                    5f:be:0e:bc:d0:87:77:71:cd:42:aa:76:cd:28:e1:
                    8d:69:6b:2a:1f:4e:17:28:07:39:60:60:b3:92:8f:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5E:12:91:66:5B:35:57:11:09:8F:8E:45:8A:7D:C1:44:1F:27:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:803d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:87:02:74:b9:c6:71:6e:c0:ca:db:59:02:b5:8f:af:5f:
         0c:35:68:9f:d8:b5:53:2b:66:a7:6f:db:e2:53:3e:eb:48:c9:
         db:5a:e6:36:34:8b:b1:68:93:e5:7d:aa:04:6f:0a:5b:2a:89:
         86:32:1e:7a:f3:e5:89:be:cc:16:90:a6:2f:68:5f:52:1d:be:
         25:99:0f:ef:14:15:b7:df:92:b1:0e:f6:e5:e1:19:2a:6d:66:
         5c:47:b1:46:39:43:6e:45:1b:d6:05:91:0a:3d:49:e8:de:50:
         e0:d4:1e:55:55:74:2f:10:73:fb:6c:b8:f0:16:dc:2a:37:64:
         bb:88:6a:c5:9e:5a:2a:e9:2e:87:04:3f:9b:70:37:2a:a8:22:
         be:c8:3d:5c:f1:cc:e8:48:17:23:99:ad:e3:88:fc:94:43:d5:
         88:e8:d3:6e:5e:03:6b:7c:87:88:d3:33:e1:77:4a:e8:66:72:
         a1:da:04:b1:32:42:c9:39:0b:28:7f:cf:46:c2:9a:be:24:43:
         bd:b3:c6:71:b4:bd:5a:71:f0:44:92:2d:96:dc:07:ae:4e:20:
         a5:d3:3e:9e:22:84:56:5c:f2:c9:71:1a:46:4a:0f:af:e9:2c:
         15:68:c0:5e:4a:60:3b:63:4f:0b:5e:3b:65:8f:38:2d:d0:e3:
         a1:5f:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 07:49:54 2025 by rpki-client