Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eecbca98-1213-3cf3-ad76-4abd1d89aa07.roa
File:                     eecbca98-1213-3cf3-ad76-4abd1d89aa07.roa (raw, json)
Hash identifier:          w2KIJbLQZiRfz6K2JrWAhcLop8BZfYN336calyM8H/A=
Subject key identifier:   FB:18:2E:6C:7E:A4:68:3D:6A:5D:A0:8E:E9:93:3E:C3:E4:5D:32:C2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC23040DB0C11D98058940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eecbca98-1213-3cf3-ad76-4abd1d89aa07.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     203898
IP address blocks:        2606:54c1:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:23:04:0d:b0:c1:1d:98:05:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=223df08f-7a74-4ccc-afa1-2a47606e30bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:f3:15:3f:7b:bc:9e:98:61:65:7b:e8:f3:
                    35:ab:2a:5f:bf:72:db:85:42:ad:f8:cc:3e:31:cc:
                    51:6a:32:7a:2b:e2:da:73:9a:9b:28:02:0c:83:5d:
                    e9:0b:85:63:e9:99:26:96:37:75:ed:74:83:dc:a9:
                    ec:4c:b9:53:32:d1:a0:63:c3:ee:ac:69:55:e6:30:
                    28:92:0d:dd:06:57:ee:92:e2:39:db:13:1c:44:d2:
                    76:5e:87:2b:3d:aa:fd:1b:2f:25:c8:16:30:16:63:
                    27:4e:5f:3f:0a:16:00:82:0d:33:e9:bf:ab:8f:e1:
                    1c:96:97:01:d6:80:cf:ff:0a:f7:40:e7:e6:00:01:
                    ba:f3:12:02:e4:4c:9a:fd:10:40:b8:a2:73:d9:46:
                    56:a5:0a:9e:7a:8c:0b:0f:b2:a9:ec:03:f0:d3:c2:
                    95:e4:2b:73:59:be:a1:9c:91:cc:d6:31:d4:cf:3b:
                    2b:18:69:14:c8:6d:1a:b9:19:d8:3c:7d:65:81:54:
                    6f:79:fa:42:a9:0a:8c:56:95:d0:5d:91:98:3d:73:
                    de:14:53:15:01:d9:72:a0:e4:5d:3f:71:a9:45:58:
                    ce:e5:44:d7:1a:ce:92:46:4d:be:c2:dc:14:10:35:
                    78:d4:cf:34:47:23:e8:a6:88:d3:e5:b5:af:52:3e:
                    9e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:18:2E:6C:7E:A4:68:3D:6A:5D:A0:8E:E9:93:3E:C3:E4:5D:32:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eecbca98-1213-3cf3-ad76-4abd1d89aa07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c1:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:25:55:cf:51:dd:ba:9c:ff:94:e3:bf:d2:04:df:2b:83:
         c4:2f:3d:c3:e1:ef:83:7c:44:6b:e3:76:33:d7:21:5d:7c:06:
         ec:6e:6f:a0:ab:66:45:3f:43:b8:42:d2:18:a6:af:68:23:87:
         be:63:f3:bd:1f:9a:6d:a0:81:e7:c1:70:e6:a8:10:6f:64:1d:
         39:90:32:cc:8c:3e:8a:36:bf:12:d6:64:4e:94:e6:1e:bc:ad:
         73:dd:2d:38:43:92:4b:de:cc:7f:1f:54:09:52:45:54:09:aa:
         54:33:b6:ee:07:00:ab:d3:1e:35:11:07:37:b1:e4:e7:55:3a:
         fd:85:0e:a9:c2:76:30:a4:a0:e3:05:b5:0f:b8:cf:8d:94:87:
         1f:27:b2:3e:93:cb:94:64:9d:af:23:9f:49:26:ab:6e:d0:47:
         d9:18:c1:18:61:83:79:5d:ea:a8:65:ca:34:ca:48:de:37:da:
         08:dc:91:cd:df:27:60:ad:62:36:fd:1b:81:de:91:2f:19:f6:
         75:7c:3d:e2:01:ac:15:e6:35:ed:03:1e:39:26:72:ca:e3:a6:
         50:ab:7d:6e:c9:9c:cb:a5:66:72:54:92:0d:b3:1f:ca:a8:7e:
         41:b6:0f:95:f1:e4:7f:d7:98:e2:4a:ae:c4:cb:dc:7f:44:f7:
         6c:48:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:15 2025 by rpki-client