Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cb6a971-a582-3a64-9b79-dbe316170068.roa
File:                     8cb6a971-a582-3a64-9b79-dbe316170068.roa (raw, json)
Hash identifier:          Mi5DegAFdBWi76Kwbwr2yVupUzstkjL5GYs5IwG8pZ4=
Subject key identifier:   8C:CC:7A:27:6C:B4:74:73:A9:46:F6:D0:6A:4D:04:16:07:C3:99:83
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6BD854664CA9B0AF95880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cb6a971-a582-3a64-9b79-dbe316170068.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        2606:4700:4400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:bd:85:46:64:ca:9b:0a:f9:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=d82ab8d9-62cf-4574-8cbd-89a62ce879c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:17:ed:b4:8f:a6:4e:1b:0b:cc:1b:80:a5:
                    ee:f7:03:2e:8b:95:3b:3a:15:3a:8c:c6:de:b0:25:
                    13:15:7a:27:c7:62:7d:d0:78:ba:41:7c:24:2c:98:
                    72:78:2e:db:34:f7:a5:94:90:77:68:7e:b1:d3:e7:
                    81:55:c3:80:d9:9c:6e:bd:02:35:2d:1e:41:24:6b:
                    af:95:3d:60:55:cb:34:68:79:ea:77:e5:64:88:93:
                    cb:66:26:82:be:f6:20:df:78:4c:84:73:29:ad:c8:
                    09:5d:08:ec:d7:03:fe:61:f3:46:7d:a9:9b:4f:5f:
                    09:bc:4f:7f:73:73:29:b8:bc:e0:03:46:3e:07:d0:
                    d6:c6:55:d5:af:9c:c4:8e:73:e2:df:5f:56:7a:4e:
                    e9:23:a9:73:2d:cd:4b:27:93:66:90:9e:ae:12:9a:
                    9c:82:f9:f9:4a:91:85:30:91:6a:20:d6:87:7f:77:
                    4c:86:f6:55:76:41:5a:a6:63:e6:b5:b8:d4:a0:75:
                    d9:cc:c0:fe:4d:0a:1f:79:d3:6b:04:9d:39:8c:da:
                    cc:46:9d:f6:6e:a9:aa:a0:ef:da:27:3a:d6:ee:69:
                    5b:4a:34:81:a4:5f:de:4f:af:82:77:ff:2f:88:19:
                    cf:3b:6e:f3:17:82:dd:13:c2:43:e2:02:2d:ff:1e:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CC:7A:27:6C:B4:74:73:A9:46:F6:D0:6A:4D:04:16:07:C3:99:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cb6a971-a582-3a64-9b79-dbe316170068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c2:ee:fb:8d:02:72:86:89:f9:48:ca:70:76:b9:9f:a2:5c:
         42:0d:ac:5c:af:f4:53:56:65:cd:d8:9c:39:d0:78:ee:a9:cc:
         df:07:3e:9a:5e:12:0d:d0:01:5c:3a:1d:71:15:93:d4:5c:e4:
         7e:94:f0:34:8a:32:1e:09:e0:72:f8:1e:9a:96:6c:cc:94:f1:
         d6:45:19:ab:7e:54:03:49:ef:e8:74:78:38:e5:66:21:10:0b:
         e0:cb:40:5e:b9:ae:75:a8:d2:d8:6a:f3:6e:81:26:97:8e:92:
         a1:be:62:11:3b:d7:74:16:d3:7e:6a:2f:8d:05:f3:62:29:ec:
         98:18:c6:38:6b:85:57:97:ca:55:26:de:e5:be:90:89:18:81:
         2d:4a:ab:52:2c:e5:69:e7:96:9a:a2:8a:65:37:e6:2f:99:ec:
         1d:60:5e:4f:29:f7:11:f6:a4:0b:6f:4e:c2:1a:43:cd:0b:5d:
         e2:71:56:80:17:91:11:9e:ba:c6:47:ce:31:99:4e:76:45:64:
         70:fc:7b:27:34:ff:87:c1:8e:6f:6d:4c:3b:4c:2b:5f:f3:1a:
         f6:6d:68:a8:e8:f7:46:03:cd:69:56:37:24:e8:7f:61:ec:2c:
         73:24:a3:c4:19:6b:65:90:ff:c5:51:62:cf:43:cd:16:d5:a6:
         4b:17:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:00 2025 by rpki-client