Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa
File:                     0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa (raw, json)
Hash identifier:          7vMbtrMtR0k5oXXloIKNtVlaYGNvB+jwiknrovUlDKk=
Subject key identifier:   36:AA:4E:F7:84:D8:DE:3E:1C:A3:9A:F2:5C:86:C7:02:45:46:C9:89
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285848D90BB684F138326F250A7800
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa
Signing time:             Tue 11 Feb 2025 14:00:52 +0000
ROA not before:           Tue 11 Feb 2025 14:00:52 +0000
ROA not after:            Mon 12 May 2025 13:00:52 +0000
asID:                     12198
IP address blocks:        2602:f919::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:0b:b6:84:f1:38:32:6f:25:0a:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Feb 11 14:00:52 2025 GMT
            Not After : May 12 13:00:52 2025 GMT
        Subject: CN=d2bb31af-16aa-4694-a735-f928280dd6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:f9:41:65:33:84:21:d5:bf:09:e4:a8:b2:
                    6d:90:71:ab:6e:50:82:aa:14:42:12:28:a5:85:e6:
                    a4:46:20:30:fe:5c:b2:7b:96:fb:ea:37:90:41:ce:
                    0e:27:79:23:44:2d:95:d4:c4:a6:79:f0:4c:c7:63:
                    d6:91:a2:0a:d2:9f:d1:27:cb:90:2d:b9:33:06:53:
                    e3:79:2e:54:a3:e4:ec:c0:67:28:78:51:1b:d9:81:
                    ff:da:83:8b:37:d1:47:60:de:e3:ba:6a:c6:da:e7:
                    38:bc:78:a4:16:f4:ea:46:07:0a:a9:9f:e7:e7:4b:
                    78:85:87:d7:72:b9:f7:12:bd:ea:b2:a2:fe:a1:aa:
                    7a:f4:da:1c:1d:2f:7d:7e:7e:ba:2f:13:24:84:0e:
                    9d:97:d6:77:c4:78:2a:48:d8:d3:aa:27:57:50:00:
                    16:8d:bf:18:87:e7:6a:a6:cf:66:2a:71:db:3e:1a:
                    5d:60:6a:93:98:1c:a3:c2:7c:17:8b:0c:a0:67:3e:
                    43:ec:15:b9:0c:37:f2:e8:a1:b9:5a:2e:04:95:ba:
                    a3:c5:97:5a:ab:83:00:c5:c6:f1:80:2c:98:86:61:
                    24:06:b6:ea:72:6f:d4:96:52:a4:4b:2f:13:db:50:
                    bf:28:68:e2:5e:7c:1c:e2:89:54:cb:df:34:81:a6:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AA:4E:F7:84:D8:DE:3E:1C:A3:9A:F2:5C:86:C7:02:45:46:C9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0eb1b002-9c88-3faf-8166-6c2b5b9a93c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:b5:ab:59:57:45:6f:05:8a:74:91:74:8f:c6:94:77:7b:
         e4:f0:02:b7:f0:69:06:e0:3d:83:1b:e9:bb:fb:5d:a7:d5:bd:
         a4:d3:08:a6:3e:a2:27:4b:e0:1a:32:ad:94:9c:2d:ff:c1:10:
         7d:80:52:5c:fd:4f:8c:3c:a3:19:03:2e:03:8d:a4:78:39:1b:
         3f:a1:e8:46:c3:e4:1e:08:97:95:79:ce:40:77:50:78:46:31:
         b2:27:71:83:e3:67:ef:fb:e9:05:fa:b5:b5:67:ac:c7:36:86:
         51:03:c4:dd:3a:51:b6:d9:bb:1a:fd:fb:e0:61:6a:6f:7e:b6:
         67:ae:8e:d6:70:af:ca:81:47:41:43:ff:09:83:63:f3:36:13:
         c0:3d:c5:b9:08:83:b1:7f:11:1a:f6:db:ad:81:be:f4:4c:44:
         2d:18:ba:f2:24:16:83:f5:22:82:1e:9f:6b:bc:66:4e:2c:36:
         c3:0e:4c:07:21:95:c5:c4:c6:5d:79:94:15:1a:2a:f0:03:de:
         69:60:b0:84:10:a7:07:ad:42:97:6e:3d:ab:79:97:3d:0b:75:
         71:3a:15:cd:87:7c:05:d2:6d:2d:15:30:0d:39:4e:b5:e8:f6:
         f7:a1:36:b4:17:8a:4c:7b:f5:6a:2a:f8:df:ca:af:61:57:81:
         d9:ec:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:40 2025 by rpki-client