Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa
File:                     69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa (raw, json)
Hash identifier:          F3kuoXmrqh4d+HM0i/oJAoSHB1PH76oc/pYU2pXyNiA=
Subject key identifier:   C0:E8:A4:16:48:6B:A2:3B:22:F2:F1:84:4F:C0:DB:87:A6:08:41:D2
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F43285848D6410EE9E59B030A9CB52160
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     1206
IP address blocks:        2001:5e8:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0e:e9:e5:9b:03:0a:9c:b5:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=3a796e01-8a5b-4847-9351-ff23e1ef2930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:e3:53:21:a0:2c:c4:86:dd:8c:48:05:42:
                    48:19:37:a0:54:85:5a:4d:ce:f3:29:ea:5f:eb:96:
                    1a:8a:ec:01:d5:57:80:63:99:f1:69:7c:ba:76:7d:
                    cb:32:ef:e2:2c:e5:a4:ac:b9:d6:f2:0d:05:14:b7:
                    f6:b7:b1:fb:d7:5f:44:50:ee:db:2d:4d:79:8b:a0:
                    14:12:89:ca:6d:fe:08:50:32:81:9d:b3:41:4b:be:
                    60:72:07:65:98:18:93:e3:24:86:b2:31:0a:0b:a0:
                    8e:2f:91:d9:65:6b:00:23:b4:1b:09:c5:ac:f7:eb:
                    a8:90:c7:c0:2e:06:8b:09:73:21:f7:e0:6e:b2:99:
                    47:2d:7d:92:34:4a:78:1b:30:2c:4c:5d:0f:ce:c1:
                    76:6b:62:b7:ea:66:ec:ba:e7:64:9d:52:75:80:f1:
                    db:76:dc:10:aa:5b:6c:f5:63:3f:4f:c5:fd:82:8a:
                    0d:ef:3e:90:6c:eb:38:7b:10:d5:fa:06:cb:1b:ee:
                    0d:b0:e0:60:21:af:2e:ca:ca:77:72:d7:74:46:38:
                    1b:56:ed:18:12:f4:dd:9f:de:53:83:0e:f6:9c:6f:
                    3a:fd:a5:29:98:e5:7a:75:04:b2:4f:63:b0:c5:3e:
                    a7:60:94:0e:7f:06:44:24:b5:1c:a5:e8:66:3c:12:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E8:A4:16:48:6B:A2:3B:22:F2:F1:84:4F:C0:DB:87:A6:08:41:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:a4:50:ed:e2:53:98:c1:cb:79:a0:60:cc:56:02:2f:50:
         29:d5:cd:d8:23:5c:2d:1e:45:f1:1d:c2:87:08:2f:82:09:f4:
         1b:92:ce:d4:dc:56:1f:27:0c:bc:2e:73:55:a3:b1:a1:ba:a8:
         23:4a:a6:73:80:cf:1d:71:a9:bf:00:07:9f:e9:c1:4c:1c:7e:
         d5:b8:6d:04:fc:00:8e:83:8a:ab:7e:6a:d4:4e:41:b7:30:a7:
         07:1d:c7:2f:c5:46:65:08:9f:a5:fd:ab:22:c4:b2:2e:09:9b:
         ff:49:4a:2c:c3:93:ae:33:fe:8d:0e:fb:92:c6:74:4e:8e:95:
         b8:12:13:79:63:56:1a:a4:b1:7c:4c:2a:71:7a:f4:ae:0d:41:
         88:81:a1:6f:97:e8:71:1a:8b:57:54:f5:00:7f:5e:85:18:38:
         b1:aa:50:96:f3:26:e1:61:91:81:a5:ba:db:49:2d:5c:34:2c:
         4b:2f:42:16:da:7e:fd:0d:2d:65:7d:0a:bd:47:84:72:d4:6d:
         3c:da:19:a2:cb:7b:29:95:96:31:24:f9:d6:2a:ae:c0:26:ef:
         19:2d:eb:69:1e:e0:48:4f:a6:25:e4:61:1d:7a:9e:54:d4:2f:
         37:eb:15:b4:75:12:f1:fb:82:f3:b8:3a:0f:d1:72:a7:ba:d7:
         ab:67:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:02 2025 by rpki-client