Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/09461b2c-58f2-3590-973c-05075c96bdab.roa
File:                     09461b2c-58f2-3590-973c-05075c96bdab.roa (raw, json)
Hash identifier:          mwWnGSyiiJ5QNd1NMtDUdYvddJdK0o9dow5enJtYuUg=
Subject key identifier:   BB:15:66:0D:40:1F:85:4F:B3:4F:5A:1E:75:BE:F4:BB:E6:7C:EE:2E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1BF0345283A272E56E980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/09461b2c-58f2-3590-973c-05075c96bdab.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11351
IP address blocks:        2600:5c01:eab3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:bf:03:45:28:3a:27:2e:56:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3e1a3c62-75fd-40c3-90a9-350e23796163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:75:d7:39:65:82:b7:c5:66:b2:6b:15:a0:d8:
                    0a:0a:e4:e2:de:18:44:fa:0a:77:f0:a4:a7:9a:6f:
                    1c:c4:d0:18:78:a4:fa:dc:bc:68:a5:f2:d3:78:fa:
                    be:ad:5b:6a:a5:6a:1f:d8:dc:73:3e:8e:a1:d1:60:
                    38:ba:22:c1:0e:7d:4f:b0:54:08:e6:4c:9e:6f:ab:
                    33:75:59:cb:c7:c6:e2:69:37:33:b2:76:fd:dd:5b:
                    83:06:04:b2:ed:2d:52:a4:79:45:76:12:e4:a4:bc:
                    7b:f2:44:8f:99:01:d0:a6:08:01:92:9e:d9:7d:9d:
                    68:ab:de:73:10:b1:b6:98:73:52:e7:9f:d7:43:b7:
                    c1:26:6d:47:55:7c:dc:4a:92:29:e6:c1:bc:ff:dd:
                    05:0e:2a:27:15:9c:50:22:1e:f6:64:22:07:bf:9b:
                    97:00:9b:58:c2:5a:c3:66:75:18:d6:69:0a:28:36:
                    86:13:52:d2:a5:12:64:98:4e:f2:e8:1d:65:44:bb:
                    e6:b6:61:4a:ad:b5:4b:00:39:16:05:e5:e9:ef:b9:
                    10:e0:8e:7e:f2:29:ac:66:c6:13:1f:d6:ef:12:df:
                    90:33:ab:bb:eb:ed:f7:fb:19:a1:65:fe:c0:74:38:
                    44:66:cd:04:4c:1d:c0:a9:e7:a1:d4:b7:46:3b:bf:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:66:0D:40:1F:85:4F:B3:4F:5A:1E:75:BE:F4:BB:E6:7C:EE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/09461b2c-58f2-3590-973c-05075c96bdab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c01:eab3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:02:df:94:66:ae:67:61:b1:8b:07:18:7d:aa:9a:6b:a6:
         1e:23:20:50:8f:5c:a0:d3:89:77:f2:2c:35:6a:ea:d6:1f:0f:
         13:7c:6f:7b:0c:a4:45:c4:fc:c9:83:9e:f9:48:c5:76:1d:8b:
         cf:bc:18:c9:19:44:f4:09:81:b0:89:8d:41:69:ff:05:25:4e:
         3f:b8:61:ce:26:fc:c4:6f:0b:e6:b4:9b:5e:c6:64:15:6b:7b:
         02:fe:53:e2:43:e3:a6:b1:f5:2d:1f:55:ad:37:18:7b:c8:ce:
         f7:d0:0a:2d:7c:14:8b:f8:63:d2:a8:6a:25:81:e6:ed:50:af:
         f2:ba:fe:b8:2c:62:af:97:27:c3:49:6b:a8:44:1d:06:20:1f:
         52:52:4d:ef:07:e5:e1:09:ad:ca:f1:74:8f:16:ff:18:dd:e1:
         db:73:b8:5b:bc:33:d5:95:83:e4:38:13:dc:34:36:9f:b1:72:
         80:f3:d9:9e:9b:26:96:7d:06:ac:15:49:d8:bb:cd:9a:c7:30:
         f0:fc:08:dd:cd:6c:58:26:bd:0a:f9:a6:08:35:c4:f6:84:b4:
         b2:e5:a9:67:c2:44:cc:bb:7b:8e:91:13:cb:76:56:10:d5:61:
         90:25:58:94:2d:e4:d9:5a:9a:51:fc:52:06:4e:3d:5f:b5:19:
         2d:d7:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:24:21 2025 by rpki-client