Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8077a20a-f0c3-3f44-a701-0556a1962c92.roa
File:                     8077a20a-f0c3-3f44-a701-0556a1962c92.roa (raw, json)
Hash identifier:          3sfYwbj9/dP40iODLy3cVpuxhFHtZxEnl7194SIJKmg=
Subject key identifier:   EC:F9:A4:E6:FE:DF:12:E2:1E:A1:A8:4C:4F:C9:BE:EA:E4:62:4F:15
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849C4D4CCE3CDF12DDD7C1E8580
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8077a20a-f0c3-3f44-a701-0556a1962c92.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     174
IP address blocks:        2001:49f0:d00a::/48 maxlen: 48
                          2001:49f0:d00d::/48 maxlen: 48
                          2001:49f0:d023::/48 maxlen: 48
                          2001:49f0:d0ae::/48 maxlen: 48
                          2001:49f0:d0f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cc:e3:cd:f1:2d:dd:7c:1e:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=be3ee80a-e197-451a-876f-59d84b2549ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:40:b3:f5:df:04:62:db:75:3d:0c:58:99:
                    85:c7:e0:70:74:c9:11:dd:8f:9f:05:49:97:70:fc:
                    f8:d3:b1:4e:bc:4c:15:61:a2:b9:78:60:f3:70:ac:
                    df:ef:db:40:f3:8d:ed:95:9f:b5:93:0a:21:9c:04:
                    60:08:8f:6c:51:1a:d4:d7:54:20:68:03:1e:78:e6:
                    8f:b7:c4:27:c9:a2:77:83:17:7e:fa:69:63:f5:db:
                    d1:f4:69:3e:72:44:b2:41:f3:b7:3c:13:d5:d5:15:
                    68:c1:74:21:7e:23:92:31:1d:0f:30:68:1f:0b:47:
                    87:9d:cf:69:c2:9a:43:3c:8f:8d:4e:7f:0e:64:79:
                    40:e3:01:06:5f:6d:7e:e9:58:a3:41:c8:03:7f:dc:
                    2a:6e:9b:68:fa:3e:ba:0a:bf:cd:e3:fa:ee:fb:24:
                    d4:27:04:35:40:32:a1:a1:10:dc:b0:90:dd:ff:a1:
                    17:0d:e0:d0:fb:81:70:e6:e3:0a:fd:54:4e:0a:27:
                    6d:a1:d9:c9:21:c3:a2:6f:3e:58:d6:b4:ad:c1:4c:
                    98:bc:a2:73:8a:e3:bf:b6:9e:96:be:06:b4:1f:e1:
                    d2:79:a0:51:0e:0f:1f:57:fa:d9:e9:b4:ed:9d:14:
                    76:8a:60:18:54:4e:68:dd:92:ac:68:e3:76:38:4e:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:A4:E6:FE:DF:12:E2:1E:A1:A8:4C:4F:C9:BE:EA:E4:62:4F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8077a20a-f0c3-3f44-a701-0556a1962c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d00a::/48
                  2001:49f0:d00d::/48
                  2001:49f0:d023::/48
                  2001:49f0:d0ae::/48
                  2001:49f0:d0f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:2c:32:77:09:d8:09:7f:97:ae:a0:aa:97:86:8a:dc:55:
         08:c0:55:90:ad:a6:48:e8:98:ab:bb:60:a4:32:f1:fa:c7:a0:
         d3:41:f3:a8:20:4e:3c:80:c2:85:c4:2f:0a:bd:11:d9:5b:6d:
         65:11:48:63:2f:c2:71:36:54:db:8e:34:e6:1b:66:84:e4:27:
         43:3d:e1:d3:91:3b:82:3b:de:7a:0e:14:c5:33:dd:c0:b9:e0:
         53:30:fc:2e:df:ac:77:55:8f:aa:cb:bd:ae:42:5b:32:5f:01:
         1e:56:5b:4e:de:15:11:83:50:64:3e:c8:56:5a:3c:6c:99:73:
         66:25:e1:da:a7:49:a6:40:28:86:c6:35:e9:60:b9:12:8f:3b:
         15:35:8b:21:d9:43:6f:2b:82:91:14:39:13:64:34:27:71:4c:
         db:ca:e8:9d:38:8e:90:fd:c9:3a:e1:85:18:f4:85:d2:a4:59:
         95:f0:77:ba:3e:74:d5:1b:8d:d6:ba:37:93:36:dc:51:c4:4e:
         4d:1a:24:7a:c7:52:d5:87:ea:b7:57:0a:fb:c4:7f:d1:8f:9a:
         7c:34:97:1c:ee:80:72:72:ab:ae:af:f9:3b:c5:94:fb:62:85:
         0c:9a:e5:47:78:a3:28:f8:4f:71:d9:01:10:f9:21:93:a0:0d:
         55:6f:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:03:10 2025 by rpki-client