Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/096fdb2d-30b0-3d99-b80e-94aa6ffb5b47.roa
File:                     096fdb2d-30b0-3d99-b80e-94aa6ffb5b47.roa (raw, json)
Hash identifier:          kjmK8O2dwzTfl7IvfyBDhTv7aYAMkVUxjq/9n7W1FcE=
Subject key identifier:   F7:A5:88:50:BB:31:50:02:BF:73:F1:8B:F5:EE:6B:60:35:2B:A7:FD
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A173006D13EC723C7A7F635E0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/096fdb2d-30b0-3d99-b80e-94aa6ffb5b47.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     174
IP address blocks:        2001:49f0:d129::/48 maxlen: 48
                          2001:49f0:d12a::/48 maxlen: 48
                          2001:49f0:d12b::/48 maxlen: 48
                          2001:49f0:d12c::/48 maxlen: 48
                          2001:49f0:d12d::/48 maxlen: 48
                          2001:49f0:d12e::/48 maxlen: 48
                          2001:49f0:d12f::/48 maxlen: 48
                          2001:49f0:d130::/48 maxlen: 48
                          2001:49f0:d131::/48 maxlen: 48
                          2001:49f0:d132::/48 maxlen: 48
                          2001:49f0:d134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:06:d1:3e:c7:23:c7:a7:f6:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=a2753857-50fc-4898-8e61-cddf2089a12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:6a:fc:51:2d:fc:55:e6:17:5c:9c:33:a0:
                    10:e1:41:a3:fa:2f:e5:91:f2:7e:81:76:2e:de:60:
                    90:24:43:51:8d:08:f4:f2:91:05:a2:79:9b:cb:1a:
                    36:58:72:7f:0c:0d:d8:00:92:d0:c8:4a:3a:8b:93:
                    8b:aa:2a:d2:4f:73:ee:5c:ec:58:fa:1b:44:51:5f:
                    97:88:89:cc:42:bf:5b:dd:83:f4:b1:97:30:d3:27:
                    25:56:bd:4e:90:0d:44:01:0e:70:f0:32:a9:75:bc:
                    78:d9:66:b5:43:23:3e:ec:00:e7:00:e3:89:8f:64:
                    0e:2b:b3:d2:23:84:13:85:95:c7:74:f2:50:d3:5e:
                    df:ee:af:22:42:33:16:e4:11:47:9e:e2:7a:5b:5d:
                    4b:80:e6:bf:69:37:5b:83:00:60:bb:5e:ed:2c:2a:
                    ff:02:84:14:d6:03:f8:6b:da:53:22:e6:1b:c7:ca:
                    d5:3a:53:16:53:1f:54:3f:bf:69:33:d9:3e:bd:08:
                    66:ad:65:91:6b:38:95:ea:32:80:de:78:3c:a0:42:
                    b2:4b:80:d3:5f:5a:1a:e8:ec:d3:ba:b9:ad:87:f6:
                    1a:e8:32:54:44:4b:ec:e8:e8:56:ae:43:63:ec:0b:
                    48:e8:3b:0b:fb:7e:dc:eb:55:b8:7a:53:80:9a:6a:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A5:88:50:BB:31:50:02:BF:73:F1:8B:F5:EE:6B:60:35:2B:A7:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/096fdb2d-30b0-3d99-b80e-94aa6ffb5b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d129::-2001:49f0:d132:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:87:34:63:38:09:f1:af:11:96:47:3e:7d:f2:dd:b6:92:35:
         93:a9:f0:f9:72:b9:0a:69:75:c5:8c:d9:52:b1:ec:e5:1c:11:
         90:c2:12:58:30:9d:4d:7f:b8:06:b5:cd:bc:f3:4d:6b:75:2e:
         2b:e3:80:97:48:8d:44:c4:84:d8:94:28:94:19:99:a1:88:05:
         80:87:88:e7:dc:16:d0:dd:62:55:42:de:f2:03:c4:13:b2:6f:
         ce:3b:51:74:70:ab:18:04:46:c9:98:07:d6:dc:1f:ca:4d:19:
         ec:b1:5b:1b:1e:2f:35:73:3c:97:8f:43:64:7e:48:06:79:b4:
         da:7a:98:a2:72:b6:98:ab:c3:8b:58:49:37:7b:e7:7d:7b:06:
         2c:cb:d6:bb:62:c5:a5:85:68:29:04:eb:99:71:9a:90:6c:db:
         6e:65:44:2c:65:18:3f:d2:bd:8e:eb:23:1e:48:55:8f:8c:9d:
         73:01:6e:cb:89:3a:8b:7c:6a:2a:3e:85:bb:70:66:3c:26:a3:
         ce:2f:3b:43:d7:22:4c:93:fc:b3:83:38:bc:3d:8f:42:4b:72:
         6c:b3:59:64:5e:36:08:64:0f:4f:ec:3c:b7:a7:d2:f3:38:03:
         02:74:b8:ba:51:d7:f0:7a:1d:15:88:3b:fc:ec:1e:d0:c0:67:
         23:c4:79:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 10:56:35 2025 by rpki-client