Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e8ad0efb-1b14-3eca-bfb7-29ff14cc1e73.roa
File:                     e8ad0efb-1b14-3eca-bfb7-29ff14cc1e73.roa (raw, json)
Hash identifier:          JOoUbWDDr6hqZsN0Q++x9oT4sJ5W18j8ul8tFlsFHsE=
Subject key identifier:   B0:C6:AA:88:63:35:60:40:9A:0C:2C:9D:18:F3:75:5B:2D:E4:FD:8C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858494B640636C918DD9706E65090
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e8ad0efb-1b14-3eca-bfb7-29ff14cc1e73.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     62651
IP address blocks:        2604:c980:1600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:06:36:c9:18:dd:97:06:e6:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=6ce7f05c-4392-44ca-8e6d-48bfe2b555af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:7a:d9:4a:b0:c3:67:54:25:c1:3d:2f:a7:
                    98:92:06:4f:3e:29:72:ed:3a:d5:f5:c9:fc:97:12:
                    b5:f0:96:6a:5a:67:35:70:7f:55:d3:95:75:8a:ba:
                    77:f8:27:87:0b:e2:72:92:22:9d:66:a7:9d:46:91:
                    80:7d:73:22:64:2d:98:29:3d:56:6e:85:c6:cd:b4:
                    75:d7:d9:da:26:a2:ee:b3:fc:3c:6f:2c:2f:5e:16:
                    65:29:12:b6:8f:20:83:6f:e0:96:a3:e9:c7:f9:bb:
                    70:25:fe:b1:a6:5c:c3:bd:b9:27:c0:4f:a3:62:1a:
                    5f:c7:f9:65:a4:8e:f7:61:3f:33:ab:c3:b3:31:c7:
                    40:8e:28:c9:91:17:b3:2e:ae:8c:40:c1:68:56:ab:
                    4a:12:81:55:3b:b8:03:11:a5:2c:3b:4c:9b:70:7b:
                    b9:d7:33:0b:97:80:c1:77:b1:b9:45:aa:df:75:68:
                    2f:fa:f6:36:4e:78:9d:99:3f:c8:3b:b5:78:4a:3a:
                    23:77:d3:f1:5b:45:2c:58:db:1f:2f:7e:e0:49:6f:
                    45:8c:e8:34:2f:77:04:85:09:e9:39:14:b3:dd:c5:
                    81:38:77:f9:74:3c:1f:54:29:1a:83:d4:ca:53:72:
                    d5:63:e0:00:97:3a:e5:1f:33:ec:ad:3a:e3:17:6b:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C6:AA:88:63:35:60:40:9A:0C:2C:9D:18:F3:75:5B:2D:E4:FD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e8ad0efb-1b14-3eca-bfb7-29ff14cc1e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:1600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:4e:3f:17:d1:58:4a:5c:76:fc:58:31:a9:c8:a7:c9:d7:
         6b:e2:9f:62:93:af:58:b9:07:b7:71:ba:31:84:a4:73:75:ff:
         77:cd:b9:48:cd:83:3b:22:f4:db:a1:16:9d:45:cf:86:e6:c8:
         1d:b7:81:ac:c6:e5:35:c5:d9:32:ea:c9:22:ac:0a:96:e9:f9:
         a5:34:19:fe:11:bb:31:d7:74:a0:67:d7:8f:0d:54:c7:82:d7:
         4f:8c:91:05:3b:64:c3:61:75:42:b9:bd:d7:39:38:29:7a:3d:
         48:5f:af:8a:6a:5a:51:f7:b7:fd:9e:c4:94:15:85:8d:0e:81:
         30:c2:28:6d:fe:5f:57:85:87:50:71:15:52:81:b1:66:88:58:
         64:e9:f0:7f:ce:18:02:d2:c3:12:4c:55:0e:8a:20:87:e6:aa:
         85:56:52:02:36:c7:e9:37:8a:da:72:1d:c9:9e:ea:f9:86:e7:
         eb:2a:f5:f6:21:8e:31:ff:3d:15:03:e8:2e:23:36:cd:96:69:
         c8:d9:d8:61:ee:6d:10:9a:1b:a4:4c:7c:be:ec:1a:ed:ba:bf:
         9e:7c:9d:43:0b:c4:0f:d1:b5:80:f1:45:9d:28:0f:f4:58:3e:
         fc:fc:a3:f8:f1:74:4e:82:fb:6f:f4:cf:96:b5:bb:7a:b3:fd:
         68:ad:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:21 2025 by rpki-client