Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa
File:                     ef20946f-57c3-3a83-97c2-6893c93b3951.roa (raw, json)
Hash identifier:          NypF1ShT7RPNcCvlRXMMwGCJyFJmw2IUkcCqlDk8YpU=
Subject key identifier:   45:40:CA:43:11:69:AA:C6:FC:0D:E3:AB:AA:C4:3E:DB:3E:01:A3:2F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E17AEC4736B3E30C469C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        2606:4700:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:7a:ec:47:36:b3:e3:0c:46:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=e59bfe2e-855a-4be6-bca9-8b10b664164a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:0c:e7:fd:7d:a6:cf:d7:b7:e7:eb:fe:9b:
                    de:55:f1:32:b3:a6:61:17:1d:02:2e:d3:ef:45:84:
                    9e:da:55:37:e3:3a:4b:77:27:3c:5f:b9:42:73:62:
                    86:8e:24:dc:e9:70:4e:47:36:05:58:07:3a:12:bf:
                    f5:3c:4f:03:a1:b1:ce:81:25:06:82:78:5d:09:f8:
                    05:d9:e0:4b:0d:b7:a7:79:55:1e:37:19:9a:07:3a:
                    6d:b2:58:16:0e:61:d1:02:8e:c4:6f:81:03:cd:34:
                    e1:9d:a0:3a:bf:82:e2:59:06:d2:b9:aa:2d:88:26:
                    a3:3d:2f:91:d5:19:33:b6:c5:35:a7:2a:8e:05:64:
                    84:76:4f:d2:89:66:4a:b8:40:14:42:82:3b:8c:10:
                    c5:5b:f6:86:c3:ab:4f:ac:0f:00:13:0e:ed:e9:8e:
                    d8:8c:74:95:da:91:07:f6:46:5b:30:5e:5b:00:02:
                    9c:b1:12:6b:96:e7:52:b0:f3:99:b7:0d:5d:ec:b1:
                    8b:a1:70:b5:be:7a:7f:fb:57:79:fa:ab:c2:76:6b:
                    3b:9a:d7:51:cb:f6:80:d9:50:d6:16:d2:d5:e2:76:
                    e9:c3:79:ad:af:c5:72:c2:9a:c9:a6:62:c1:a5:86:
                    c4:64:4c:46:7f:2e:dc:a4:64:77:00:f0:9b:82:9a:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:CA:43:11:69:AA:C6:FC:0D:E3:AB:AA:C4:3E:DB:3E:01:A3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e1:6d:a8:43:73:cc:b9:d6:f3:49:ae:0d:1b:fc:a7:08:8c:
         e0:de:e1:52:d5:59:e4:64:96:ad:47:0d:f2:9d:df:42:ba:0b:
         8e:6e:b1:d2:17:c9:8b:a7:e0:24:fb:33:3d:f5:9d:95:d6:c3:
         aa:18:e4:41:59:75:aa:5d:41:df:0e:a7:bb:30:a3:1a:14:ec:
         74:da:b0:41:01:67:3f:42:9e:b9:ff:be:6e:ca:e6:f9:4f:30:
         7c:8d:5e:83:41:21:a7:cf:34:35:27:8d:9a:44:d6:a4:46:ed:
         aa:be:88:80:7a:00:ed:67:7f:4e:3d:7d:85:11:10:ad:b0:ce:
         9b:94:07:ea:3d:66:c3:5e:43:ba:64:09:db:3f:6d:b7:4b:7a:
         bc:c6:d3:37:fc:c0:78:f4:f4:41:5e:5c:1b:57:ef:d7:dd:8f:
         2b:db:c9:46:bd:70:ef:cd:08:e9:85:b2:f6:d4:88:31:fc:55:
         b2:f5:a7:75:e2:ed:86:ab:e4:81:a7:ea:d3:25:23:df:9a:4e:
         9f:08:f0:a7:b6:2e:7e:bb:17:3b:7f:0a:80:a2:11:c1:73:cc:
         ea:a3:b3:6f:0d:84:9f:9f:94:8b:e8:83:95:80:ad:e6:15:37:
         d0:6c:6b:0c:d8:a6:3b:b4:36:81:40:58:56:86:41:4e:d1:67:
         41:db:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:10 2025 by rpki-client