Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa
File:                     eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa (raw, json)
Hash identifier:          9m6eHd9QJizifD6OCBBdoE9Rq57hGXvA6cRIahyVupU=
Subject key identifier:   58:04:34:22:95:2D:CF:9F:23:87:B4:22:A2:1F:D9:AD:E1:B9:36:DD
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F43285848696068C33DEA30C4C86C1E20
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     393885
IP address blocks:        2604:4a00:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:68:c3:3d:ea:30:c4:c8:6c:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=dcbadcee-238d-4b4c-a66a-19444757d558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:d7:fd:db:c0:98:2c:93:57:ef:f7:4d:45:
                    cf:f0:35:32:45:6c:0b:8a:4c:40:d7:d6:a6:3d:4e:
                    ee:89:de:48:c3:ab:96:20:0c:45:b8:15:4e:b9:c9:
                    f8:fe:65:f8:1b:48:5c:72:61:ec:b8:d7:3c:dc:9b:
                    48:e8:35:bf:fb:3e:72:95:23:68:83:e6:d7:7e:49:
                    d6:04:68:af:4c:6d:c7:d7:84:be:c8:67:28:e6:b0:
                    00:75:0d:e2:f8:7f:82:ed:4f:75:6b:f7:12:25:d0:
                    57:0e:d7:3e:4f:93:19:f1:3b:b7:69:8c:c0:da:f2:
                    5e:55:72:01:14:54:b5:df:d8:fe:9b:88:8b:55:41:
                    5f:4c:54:98:c9:90:07:ed:c7:36:81:e7:a7:00:f6:
                    37:40:5d:c8:86:31:f2:9d:00:ea:ca:0c:2c:a1:9b:
                    c2:c4:6e:55:4c:97:6c:f3:dc:fa:51:ee:12:ca:7f:
                    5a:93:2c:d9:11:1a:15:58:3f:04:79:48:89:29:87:
                    1f:6e:0a:0d:94:9d:b0:ca:65:8c:fe:d9:8d:d7:b4:
                    eb:ce:87:65:13:ec:45:9c:1b:b3:db:3f:04:97:13:
                    ec:55:9a:01:c5:eb:c1:80:87:b5:3f:8e:01:9c:66:
                    a0:69:d5:84:47:1d:b4:9a:55:25:1c:36:56:3b:4a:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:34:22:95:2D:CF:9F:23:87:B4:22:A2:1F:D9:AD:E1:B9:36:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:d4:cf:2d:c9:f6:69:c5:99:4d:f7:7c:44:9f:06:70:fa:
         37:ed:35:7b:0f:08:ec:21:49:bc:18:ac:f0:88:38:4e:cb:3f:
         23:2a:d7:46:92:c4:4f:b4:13:ec:e6:56:29:77:f3:b9:e0:e8:
         e2:57:4e:8c:99:3e:3a:4f:3e:5e:13:87:9f:d7:c6:6f:e2:64:
         bc:84:8f:8c:2c:49:1e:09:d3:53:78:ba:be:8b:58:71:ec:64:
         20:77:7c:de:72:db:01:91:fd:49:85:69:49:30:e0:86:70:3f:
         61:0d:ef:27:be:e5:42:15:12:77:3d:f3:34:c6:0c:eb:4a:fb:
         4c:21:f4:3a:19:77:3a:50:65:21:7a:89:93:5f:f7:b6:01:5c:
         33:64:7c:8f:f3:fe:b1:33:ec:29:49:a6:68:2b:d8:41:b2:c2:
         fd:5e:c5:11:64:ec:9b:59:f7:c6:20:26:9f:eb:52:2b:4f:bd:
         c2:18:59:c4:ff:72:ce:88:bf:20:b2:53:3f:57:14:b3:ae:07:
         74:6b:a0:30:c3:22:60:1d:93:7b:9d:87:c9:83:b1:4f:f7:66:
         13:6b:db:b4:b2:e6:96:6a:3e:54:9c:a4:41:1b:4f:69:7b:5b:
         b4:f2:a7:f2:1c:5b:44:6f:b8:09:32:04:e7:cf:d4:94:bb:23:
         c4:0a:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:24:22 2025 by rpki-client