Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa
File:                     e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa (raw, json)
Hash identifier:          3nP6iu7Ezjq2dUi883IbnBkOhRXcN7mD1ODFmfaFssk=
Subject key identifier:   FB:C0:0B:49:74:E5:A8:C2:61:80:55:C8:41:5A:37:B4:FD:9A:24:A3
Certificate issuer:       /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
Certificate serial:       010D0C9F4328584913AC191EBBEE31A369F09C00
Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     30165
IP address blocks:        2604:e540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:19:1e:bb:ee:31:a3:69:f0:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=077de937-ae43-4a76-ac01-5d373ca531da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:12:8a:71:18:20:bc:cc:6b:84:0e:ff:74:
                    06:75:5c:65:b1:0c:9b:4d:19:e1:b4:1e:bf:e7:fb:
                    57:9b:a1:82:8b:bd:aa:44:52:39:45:ea:68:2e:60:
                    e4:39:a2:1a:35:54:83:4c:99:55:0c:5f:a4:8e:bb:
                    66:98:24:7f:d1:ba:17:6b:17:4a:ed:29:0e:57:41:
                    aa:6c:e3:0d:1a:6d:94:e2:fb:b8:7a:b6:c2:47:ff:
                    a0:dc:49:a2:de:3f:71:a7:ea:61:85:40:b7:09:4e:
                    8c:ea:09:10:14:4d:28:63:46:81:1c:2e:0e:e8:6f:
                    b9:f6:96:53:1a:82:b3:a8:fc:ea:85:ae:a0:49:1b:
                    fa:a9:b8:56:a0:63:68:73:e6:fb:a7:39:98:77:67:
                    29:67:52:4e:31:7c:85:50:f4:43:01:c2:90:39:00:
                    7d:c4:67:21:d3:e9:64:1a:24:0f:99:65:4c:e6:30:
                    6b:28:0f:27:34:d9:1d:f0:3c:46:09:1b:18:1e:45:
                    30:7d:25:fb:85:68:0e:98:12:c4:48:6f:1f:89:e1:
                    74:75:d3:4c:74:05:9d:70:a8:76:46:3e:b0:aa:5e:
                    b0:da:f6:69:2a:7c:8e:1a:86:84:e6:67:21:de:0f:
                    29:4b:02:7d:14:5d:0a:77:e6:4d:b8:67:45:65:e9:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C0:0B:49:74:E5:A8:C2:61:80:55:C8:41:5A:37:B4:FD:9A:24:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl

            X509v3 Authority Key Identifier:
                keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:9f:65:95:a8:ba:d1:51:63:e5:b0:ea:7a:93:09:a2:35:
         22:7d:c7:64:b6:c4:86:12:10:15:f0:f0:ba:6a:3a:77:d7:f7:
         1d:4e:fe:98:02:db:ee:ac:83:91:d8:9e:82:0b:c4:e9:ec:51:
         94:0e:0b:91:1e:06:b9:2c:b9:94:c2:40:24:10:e6:cb:84:3a:
         d9:2a:d5:d0:1a:ce:82:d1:3b:fd:15:9a:27:a3:01:2a:84:b2:
         49:bd:8e:74:97:10:4d:97:43:2d:19:a3:21:7e:bc:fb:62:d0:
         ff:40:e9:96:09:54:cd:99:de:12:dc:b9:c9:c9:2e:cc:7c:0e:
         b0:a6:d8:e6:19:fa:d6:0f:1e:45:10:1e:23:ff:48:43:9d:78:
         9a:14:c0:6a:3d:36:8a:b3:60:75:18:61:c1:c9:bb:03:c9:16:
         b4:3e:d8:50:c6:56:4a:a8:04:78:c8:c7:3b:14:71:64:c2:20:
         bc:15:5b:ad:1b:8b:a6:d2:91:e8:d8:2e:60:c7:7a:26:2c:7d:
         07:b6:09:2f:51:62:d0:3c:9f:da:c3:8d:03:e3:3a:fb:6e:ca:
         78:9b:fc:24:40:06:d9:db:60:fa:f5:10:1e:03:c0:2f:d0:50:
         83:ca:f3:75:d8:b6:83:4c:67:61:3c:ac:e2:c8:ea:ec:7e:d4:
         39:cc:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:04 2025 by rpki-client