Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa
File:                     ea3a997d-103b-3338-81e2-bcee3c92c06a.roa (raw, json)
Hash identifier:          Z12cIKajUQwah81i5WBDpvex0AionXUjqhozg/c+J7c=
Subject key identifier:   51:61:8B:3D:72:A2:83:22:7C:51:2D:FC:24:6B:D3:7C:26:2A:4D:1F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858492CB21D57A6AE8CFC35EA4400
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        2602:80a:f004::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1d:57:a6:ae:8c:fc:35:ea:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9ec0ceac-3681-411d-bd37-cc67034397c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:a9:91:ff:c8:d5:4a:27:d1:c5:39:54:4e:
                    0f:f6:ad:16:99:41:b1:d3:93:b9:d2:9a:74:ff:6f:
                    df:68:74:1b:35:3a:45:23:e4:cd:9d:e1:85:58:80:
                    cc:d3:a9:10:18:bc:14:b0:e1:f6:c4:a9:13:10:f1:
                    c8:11:46:dc:d2:ab:2f:52:0d:32:a2:e4:bc:67:55:
                    19:f4:3a:04:39:7a:4b:a9:49:4c:23:01:91:23:01:
                    26:2c:e0:45:61:4f:37:89:86:1d:7f:e6:67:b9:47:
                    59:f2:bb:9a:7c:11:ed:44:a1:64:6c:21:65:c6:1b:
                    4c:af:12:7d:5a:2d:f1:f1:ca:b5:ac:9e:1d:9c:8f:
                    b7:c5:23:c7:ca:c7:27:6f:09:df:d4:c4:c4:6b:81:
                    8b:fa:17:dc:6a:14:d0:46:b5:b7:62:2a:e0:c3:12:
                    2b:6e:cb:d9:bb:96:36:72:a1:25:34:b1:db:00:d3:
                    a7:35:3c:12:f0:2f:ce:51:a0:1b:af:18:aa:e5:92:
                    0d:c3:10:32:6a:07:bf:e8:6d:47:5b:43:d7:21:2f:
                    2c:78:f6:f6:dc:a1:98:2c:05:9a:9f:b3:66:5a:bb:
                    5c:31:d3:03:3d:75:d1:87:4a:28:56:04:00:83:a8:
                    1a:a3:87:35:7f:d8:63:bc:f2:c2:f8:49:34:c3:dc:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:61:8B:3D:72:A2:83:22:7C:51:2D:FC:24:6B:D3:7C:26:2A:4D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:f004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:a9:84:b3:3b:61:e5:23:4d:87:c6:1e:33:38:dd:16:fa:
         bd:80:fe:c5:85:6b:1e:f1:30:d7:49:f7:c0:0e:45:f8:34:20:
         76:36:9b:7d:a4:db:38:88:5e:88:21:80:e2:d1:bb:57:67:01:
         9a:6c:6e:18:c7:28:6f:24:c5:f1:df:9e:eb:ad:99:3e:23:db:
         4c:f1:82:cf:f0:0a:bf:02:ce:ac:b6:af:26:70:a4:f7:2f:04:
         3a:ff:19:cc:3e:83:22:11:1f:21:2d:c7:69:01:5e:8b:a0:23:
         a0:22:c5:6f:76:cd:fc:31:fd:ab:7a:fe:bb:e5:7c:38:3f:c8:
         cd:f4:35:0c:5b:10:5c:bc:f1:ea:06:53:93:ef:3a:4b:f1:11:
         e7:63:08:bf:c4:48:22:88:2c:a5:bd:72:b7:ef:65:9f:aa:57:
         23:a3:65:d3:b7:2d:03:0e:f5:7f:ef:34:dd:48:ca:f2:67:d0:
         fe:ce:f2:f9:89:c6:76:a5:a0:72:5c:67:08:27:5b:80:0c:45:
         d1:69:f2:41:39:f3:3e:01:0c:a1:2f:72:4c:11:ce:7e:b1:31:
         f1:99:4d:35:11:d2:30:86:aa:ad:d6:56:10:df:ee:3d:b2:5a:
         2b:02:9f:a0:55:ca:8f:8d:93:e4:e9:db:f4:39:af:3b:88:f6:
         63:80:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:07:13 2025 by rpki-client