Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002384be-bdf4-39c1-91f8-16a723311540.roa
File:                     002384be-bdf4-39c1-91f8-16a723311540.roa (raw, json)
Hash identifier:          Y2ShO7DzLULmWBDm21KNelsoeYwXBmPHVDXfdMPfSIM=
Subject key identifier:   A5:87:3A:BE:57:7A:6F:0C:29:D9:E5:ED:43:46:84:E8:7C:9E:66:E0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC2021B67DC03D29446340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002384be-bdf4-39c1-91f8-16a723311540.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:4039::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:20:21:b6:7d:c0:3d:29:44:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=e0c2ef2e-ba90-479b-899c-1cd7d3cd7470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:90:6d:1f:62:f8:c0:ce:58:63:b8:2d:c3:ac:
                    1a:c7:21:69:1b:44:e2:2d:0b:d1:30:8d:b1:5f:b5:
                    0d:d3:38:e2:08:3b:a6:9a:f7:a5:24:a2:eb:4d:8c:
                    72:17:6a:b1:6b:19:18:6d:d6:ff:eb:c7:fd:bd:85:
                    1d:db:8b:4d:b7:6f:f7:20:b0:d9:c8:b2:b8:2d:e6:
                    44:f4:0f:6f:f0:3a:0a:a9:d8:7f:18:a2:01:01:35:
                    97:9a:33:37:5c:e0:ba:6e:72:52:7f:d8:b4:87:14:
                    cb:71:eb:ed:94:9e:90:5a:e5:53:20:ef:7c:98:e3:
                    00:7b:d7:58:12:e8:3a:a1:24:12:7a:8b:15:30:a8:
                    f5:e7:c8:89:bf:ac:ec:b3:6d:61:87:1a:c2:c3:57:
                    50:e4:de:c8:44:b7:0c:85:09:71:6f:f8:bb:18:1c:
                    8a:3e:9a:f0:5b:01:bf:c1:38:ee:1b:f5:78:45:39:
                    2a:37:d9:c5:54:83:b5:f5:d4:61:13:9d:f2:61:de:
                    50:f4:96:1d:c3:45:64:47:10:4e:8c:57:bc:fd:33:
                    ea:04:d6:48:10:30:01:b2:fc:2b:5b:c0:ee:ce:70:
                    0a:c5:2f:67:19:83:e5:2e:ea:e2:72:46:89:70:67:
                    1f:08:14:eb:86:3b:15:0f:ca:f1:99:56:8a:ef:20:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:87:3A:BE:57:7A:6F:0C:29:D9:E5:ED:43:46:84:E8:7C:9E:66:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002384be-bdf4-39c1-91f8-16a723311540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4039::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b9:da:69:50:45:a3:b7:95:53:d9:2b:48:77:2b:4d:ac:1b:
         e6:9e:46:d2:20:2f:7a:e6:06:d8:97:de:f4:1e:76:61:30:2d:
         5c:b2:26:e0:c6:27:5f:9b:c1:9c:9d:8f:dc:eb:d5:bd:33:8b:
         40:df:1f:c4:a2:46:17:96:83:71:be:65:30:35:75:7e:91:c8:
         6b:58:1f:03:31:e6:21:61:ed:90:fb:ae:67:6e:6b:b6:9f:ae:
         44:b2:a2:92:c6:d8:1d:8d:f6:38:ff:00:22:d4:12:a8:73:88:
         ce:5f:5b:3a:df:58:63:a0:01:5a:95:52:d6:71:8c:85:17:35:
         a5:2f:15:db:37:c8:51:9a:23:2d:1b:2f:14:a1:70:f6:f3:8c:
         c2:90:c1:81:3a:41:3b:fc:2b:b9:06:fb:72:7b:d3:06:28:9e:
         c6:3e:2c:52:74:08:44:87:b0:e0:a6:29:0b:4f:35:bb:22:25:
         85:62:fd:ce:f1:83:de:f8:47:f1:1a:76:bc:d5:16:1d:3b:9c:
         6b:ea:99:47:63:4a:fb:94:d6:93:5e:ad:4b:32:86:7d:86:67:
         f5:e9:82:16:87:c6:22:90:f0:c7:b8:83:bd:be:7d:7c:22:49:
         a5:5f:47:5d:3f:58:9d:ae:b6:f3:5c:34:6d:4a:62:d5:b5:96:
         85:0f:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:59 2025 by rpki-client