Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa
File:                     e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa (raw, json)
Hash identifier:          iFeI1nDG/tdVgqEwFpgrqWPapXQqxZDHndz5GIf6mJQ=
Subject key identifier:   88:1F:67:3C:2B:29:0F:AE:3E:C9:C6:0D:FD:25:6D:E4:74:12:1A:9C
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F43285849B57A0E7F054C3742B15FE080
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     1206
IP address blocks:        2001:5e8:ffff:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:0e:7f:05:4c:37:42:b1:5f:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=423ad747-7a72-4793-9657-10aa2ec81fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:f5:bb:0e:a0:73:09:7e:f6:32:e9:45:08:
                    23:c9:49:f2:04:4e:c7:8a:45:ad:89:38:0d:41:6a:
                    30:81:42:bd:95:c9:ca:8f:24:a4:8f:8d:af:10:53:
                    ee:bb:a9:17:1d:41:12:a9:62:a1:7d:cf:e0:fd:65:
                    3b:04:10:c1:97:9c:0d:e6:ca:0c:a1:30:05:83:6f:
                    fa:6b:13:87:a6:b7:bf:39:15:ef:8d:75:f9:0c:82:
                    8b:1d:6e:1b:b5:4a:76:f8:d0:ab:28:25:d2:d7:eb:
                    45:30:5d:6f:2a:05:6e:a6:55:77:90:26:e4:82:06:
                    73:ca:50:0d:51:25:3d:16:26:6a:a0:eb:c9:6a:18:
                    4a:95:71:bb:de:44:6e:71:c1:59:58:a2:11:29:0c:
                    4d:82:d8:40:61:e1:29:df:21:24:fb:13:72:82:c2:
                    5d:e5:e3:fa:01:66:7c:8a:a6:25:d1:df:bd:4c:8f:
                    bd:c3:39:f9:a2:a8:45:e5:29:62:d0:1d:dd:23:11:
                    aa:8f:26:e2:bd:11:ee:ac:7a:9d:f1:ba:8e:d3:ab:
                    c5:fb:5d:0e:1c:0e:b6:11:b2:b1:7b:41:c7:44:a5:
                    b7:21:05:17:5a:0f:ed:10:ef:8b:ba:af:31:da:44:
                    0b:c8:70:bc:12:7c:95:90:fa:15:fb:84:3a:4b:75:
                    ed:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:67:3C:2B:29:0F:AE:3E:C9:C6:0D:FD:25:6D:E4:74:12:1A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:ffff:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:02:a5:a8:b0:9c:4e:9c:65:02:9b:e1:31:ff:14:c7:d2:
         14:fb:ee:b5:be:46:15:47:2f:d4:3a:6b:de:68:dc:65:2c:44:
         a9:4f:08:f8:9b:2b:a5:ec:49:96:a4:79:4f:ca:39:c2:68:5d:
         ed:bf:53:de:e7:d5:56:6a:0f:5c:25:24:f5:6a:87:76:cd:fe:
         83:2a:90:19:3c:17:ff:0b:6e:ee:e9:1b:db:7c:02:8f:29:0a:
         f8:dc:3c:91:51:f0:42:66:25:72:a0:93:84:60:bb:99:b1:07:
         c1:06:fa:4b:58:bc:f7:25:bc:54:e7:2b:c6:12:2f:a6:10:20:
         a2:9d:eb:ca:47:59:f8:dc:78:5b:42:d8:34:1a:c5:ea:7d:60:
         74:a0:7a:6c:aa:c2:89:73:46:74:90:09:95:23:ca:ea:04:b2:
         86:27:18:ec:15:9f:8d:70:38:47:86:ca:6f:d2:0e:b6:10:53:
         62:bb:f5:d5:68:f8:36:7e:68:96:99:cc:03:7d:5c:1a:7e:a1:
         b4:fd:2a:c2:5f:68:49:d9:17:2f:80:75:9c:74:04:8d:06:0e:
         09:38:50:42:a7:9b:61:bd:8d:dd:d6:66:6a:7f:69:62:f6:a3:
         14:dd:4b:fb:6f:24:ec:4a:62:cc:cd:75:da:0d:d8:85:cb:04:
         94:5b:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:33:02 2025 by rpki-client