Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/54c31081-5edf-3d66-9141-16ad9664c40c.roa
File:                     54c31081-5edf-3d66-9141-16ad9664c40c.roa (raw, json)
Hash identifier:          ibpNbAcFjBVmUPApJqQ2qSq0dnXV9gw9xvbYn8ua4fc=
Subject key identifier:   B8:19:EE:A6:54:2C:15:F8:E6:C2:40:F0:65:CD:4A:65:98:1E:FC:B0
Certificate issuer:       /CN=eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3
Certificate serial:       010D0C9F43285848E2D10A89A102B47AB6458680
Authority key identifier: DC:53:D8:4C:71:47:8F:7C:DA:13:E2:54:FA:1E:C0:5F:B9:E6:75:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/54c31081-5edf-3d66-9141-16ad9664c40c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     16866
IP address blocks:        2607:f990::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0a:89:a1:02:b4:7a:b6:45:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a6a08148-cf8f-42ac-8dd2-4a2dada71750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:1f:2b:7e:c5:22:20:47:e7:d8:71:80:98:
                    98:fc:45:66:1e:c2:dd:75:04:28:fe:7b:6e:14:ee:
                    9e:17:41:aa:28:42:18:35:e0:f1:22:41:cb:72:18:
                    d3:2a:93:46:08:74:bd:a3:5c:ad:09:1d:ce:c5:89:
                    a6:d1:55:b4:df:c3:03:23:88:30:93:ef:a2:89:e2:
                    c0:a6:97:06:36:45:1e:80:c6:71:34:c8:ff:86:1c:
                    dd:1f:7e:36:26:60:e8:5c:f9:7b:82:e6:d4:b6:68:
                    22:d2:6c:92:c0:29:0a:6f:4e:1a:7d:4c:8d:c7:da:
                    02:cb:24:7e:e0:9c:6b:d0:8e:f5:36:8b:61:28:96:
                    b0:22:1b:b4:cb:5f:ad:d0:5b:62:20:d0:a7:1b:9e:
                    12:75:8f:83:f2:5d:9e:63:ae:e2:de:d6:bd:e3:e4:
                    03:86:d0:b7:b7:22:3d:a6:5a:5d:38:5e:6f:5e:da:
                    d4:71:28:e7:bd:67:6b:9d:c0:81:59:90:e2:68:51:
                    22:2d:19:38:f4:b2:87:09:97:5e:7c:c2:98:42:b2:
                    95:10:8a:be:b1:0d:46:24:1d:f9:0a:b1:11:de:74:
                    2c:fc:fb:d4:8a:59:1f:52:50:66:9d:81:e2:94:58:
                    ed:80:4e:6d:17:6e:5d:f3:34:0c:65:5d:40:3b:c2:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:19:EE:A6:54:2C:15:F8:E6:C2:40:F0:65:CD:4A:65:98:1E:FC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/54c31081-5edf-3d66-9141-16ad9664c40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.crl

            X509v3 Authority Key Identifier:
                keyid:DC:53:D8:4C:71:47:8F:7C:DA:13:E2:54:FA:1E:C0:5F:B9:E6:75:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb5792b9-3c61-4b0a-ac2a-c5a77e14e7a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f990::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5c:ae:cd:24:84:74:12:50:25:fc:d1:fe:40:27:a6:29:0d:
         3d:c6:94:74:dd:62:6c:90:c4:4d:14:94:95:4f:ab:1c:b4:eb:
         75:15:fb:20:ae:b6:2f:d9:2c:08:e8:84:84:21:fe:67:c0:b0:
         1c:0e:9c:61:24:a0:7e:a3:96:62:a7:e3:2c:0b:82:96:69:07:
         3a:cb:4d:3a:b7:2d:77:5d:58:e4:f8:71:3a:d8:14:0b:12:ed:
         9c:e0:fc:1f:be:e1:d9:f0:62:43:b7:b7:a2:63:a5:1a:ca:d3:
         29:3b:d8:b2:57:fd:de:65:bf:54:16:23:3d:e6:ee:db:3b:e4:
         47:b8:3c:76:5a:26:cb:f4:00:6d:bf:7a:ea:dd:d6:06:25:67:
         ac:89:5f:54:78:0c:d2:48:78:4e:26:16:b9:05:ef:e0:74:fd:
         72:bf:67:0f:12:87:a5:a2:13:49:3a:7b:4b:98:b0:56:2f:2d:
         8b:9c:3e:74:99:5c:22:76:23:72:aa:5b:19:05:56:a8:e3:bf:
         aa:ea:13:3e:a5:23:d8:10:41:5e:48:8d:b1:84:0e:cb:60:6a:
         04:1d:e1:26:7a:00:c7:e6:bb:c5:ab:15:b3:40:38:b3:4a:22:
         eb:02:3a:72:b5:5e:3b:ab:f4:be:e8:5e:e0:ec:f9:9e:a5:30:
         2d:48:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:02 2025 by rpki-client