Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa
File:                     eb9be52d-847f-3773-b517-8ee544c8fd23.roa (raw, json)
Hash identifier:          pU3fL+Sh9CEFWHQdXT6noZHhfQ9MFSOkAXAGL3iEmDc=
Subject key identifier:   C4:65:C6:A3:66:8A:33:5F:6D:55:4E:A2:61:D0:69:28:43:4F:04:BC
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848EF61446B9B8AB74000E80580
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:44:6b:9b:8a:b7:40:00:e8:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=279178fc-5bf0-48bd-985f-7d82dc23c3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:09:d7:e1:fc:c4:2d:3a:f8:46:d6:6a:31:
                    04:2d:9a:e6:a1:19:b2:c3:f7:7b:46:a4:20:e3:51:
                    aa:e0:e3:8e:e2:20:3e:4b:6c:e5:58:0a:38:22:8b:
                    ef:60:12:e8:15:a2:3e:b8:b6:04:9f:82:e7:ee:2a:
                    ed:fe:79:e9:64:29:e5:e0:c1:5e:8a:5f:74:7c:e9:
                    21:24:4c:81:80:83:a9:1c:01:20:f5:c2:6b:2f:48:
                    44:46:0e:e3:c5:8b:d4:d2:bb:5d:7a:89:f9:f0:68:
                    1d:70:6f:13:de:d0:78:d9:99:c9:cf:01:9e:ff:d8:
                    63:20:a2:1e:56:7a:74:6e:14:8f:e6:bb:23:d0:53:
                    24:3a:89:25:ea:f6:ff:e4:3c:a2:a5:82:6f:e5:12:
                    2e:58:ec:e0:b3:27:7c:1d:17:7e:db:16:84:4a:b6:
                    8e:c9:3d:7b:49:42:98:ec:60:5c:ca:1f:0b:98:11:
                    b7:98:61:f7:b7:66:41:4a:8d:c6:f7:43:86:c5:76:
                    ce:49:af:30:24:bf:4d:48:a4:d9:db:e0:d4:e4:db:
                    5e:25:68:c2:a5:ec:81:25:6d:4f:d1:24:4d:b6:33:
                    6b:95:97:97:8a:84:2e:6f:e8:fc:85:21:0e:1a:e6:
                    45:53:c9:be:6b:ae:1c:f0:d7:46:ec:33:ba:bf:2b:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:65:C6:A3:66:8A:33:5F:6D:55:4E:A2:61:D0:69:28:43:4F:04:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:81:85:da:fe:50:2a:b4:5d:70:1a:3e:e9:7f:ef:c0:a2:30:
         36:58:dd:e6:4d:7b:61:c5:06:60:0b:85:0c:15:d6:5e:4f:3a:
         a4:8b:d4:4a:62:49:16:d9:ef:15:3f:1e:33:72:a2:2d:cf:e3:
         ff:c0:35:7f:18:1b:04:8d:d2:08:29:1c:be:cb:c3:ad:dd:2a:
         9a:f1:1f:ff:08:6e:68:25:31:d8:82:22:80:97:aa:a4:94:99:
         d6:c3:be:02:df:27:ad:36:d5:06:4e:7a:16:cd:9b:d1:9f:30:
         ae:4a:bf:ab:8e:44:78:bd:41:74:0b:ef:58:71:cd:e1:54:95:
         d5:d5:3f:b7:a5:32:91:90:c8:90:d6:92:25:c3:d9:41:5f:9a:
         40:a6:bd:d6:55:c4:b5:e0:77:aa:19:33:91:88:ba:44:75:5c:
         f6:00:c9:af:fe:91:68:a3:ae:dc:97:10:6b:49:6a:5f:a3:86:
         e5:d0:cd:49:33:24:c0:10:30:0e:51:be:0f:8a:26:70:ed:96:
         95:ea:77:a4:28:e6:83:6c:db:05:0b:48:45:b7:1d:60:1b:79:
         00:fb:bd:72:56:f1:29:ed:3a:15:56:c9:3e:40:a2:a0:79:80:
         18:c5:8a:ed:74:4b:72:fa:81:86:24:fd:f5:56:78:70:8b:88:
         49:59:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:19 2025 by rpki-client