Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
File:                     04623bed-8a51-304e-9d94-54b88dab4623.roa (raw, json)
Hash identifier:          IaI32yRypJvJtvMQdE2H/v/Sj9A8CZBsjC4a+Hs2Oz0=
Subject key identifier:   16:86:37:EE:96:3C:BE:D9:2A:79:96:D1:57:54:79:5B:C4:E8:56:33
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F43285848A99628BA88527A103947AE00
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2602:fcee:ff8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:28:ba:88:52:7a:10:39:47:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=d9bce333-2b36-4d1c-af82-7d12b92496fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:dd:24:61:75:16:39:42:68:c3:e7:0c:b5:
                    55:1a:c9:32:33:7d:b5:63:7f:9c:34:8a:33:36:70:
                    f0:86:51:3c:38:0f:b4:ce:de:e6:e3:73:fc:94:cf:
                    f8:60:7e:3b:75:e5:05:d9:f7:79:28:1c:18:1b:5d:
                    8f:a8:32:23:ba:57:70:6f:37:2e:8f:64:2c:ae:f1:
                    5b:25:65:a7:b0:b8:d1:95:a3:68:df:35:50:fb:3e:
                    1d:9b:97:bd:b3:a1:38:d8:1b:fd:0a:d3:48:3a:0a:
                    88:5a:a3:6e:e2:f0:e4:f6:42:58:ba:c2:98:3b:e4:
                    f4:82:d0:64:14:a4:ae:3f:1f:55:0a:fd:ed:51:eb:
                    0d:13:05:ea:ba:df:e2:2b:74:32:6c:64:32:c6:27:
                    7f:8c:df:e7:50:db:58:89:a4:51:45:9d:11:2d:2b:
                    19:f5:cd:2a:fa:f0:62:ca:ab:cd:10:39:0e:62:5d:
                    9d:8f:cf:96:22:e5:ca:70:71:da:e8:eb:07:9f:b5:
                    66:0a:49:2c:ec:e6:bf:64:04:98:a7:d8:72:39:2a:
                    00:03:61:a6:ea:38:64:43:92:2b:12:a2:6e:82:61:
                    4b:0d:b5:76:b0:9b:87:c2:9f:a1:6f:ad:d3:17:00:
                    9c:56:ef:90:56:b6:32:1f:99:eb:ea:b4:17:6e:30:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:86:37:EE:96:3C:BE:D9:2A:79:96:D1:57:54:79:5B:C4:E8:56:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:ff8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4d:ee:cf:c4:ab:c1:18:dc:ed:1f:b6:d0:de:7e:b2:ee:eb:
         5d:f4:8e:dd:ff:55:7c:68:be:c2:2b:84:19:7c:05:f7:0a:36:
         13:f8:89:3a:9a:c8:a8:d8:b8:33:44:1f:a7:5e:bc:7c:e4:96:
         78:ac:96:c1:3f:cb:c2:83:81:90:f3:a3:63:d8:81:8d:33:35:
         1b:40:76:97:4d:8e:7f:b7:10:7e:e2:68:2a:60:a0:a8:8e:d6:
         d7:9d:39:41:c0:c6:1b:b4:10:25:dd:71:3d:7e:e8:20:34:45:
         ad:69:a0:05:d1:fa:5a:49:2d:c3:45:e4:bd:ff:db:cf:b6:c7:
         09:21:4b:5c:a7:b0:cc:2b:73:22:50:bf:ba:9b:95:00:92:fd:
         2a:e9:64:16:3d:e8:4d:d2:3c:e0:2f:06:2b:f6:84:57:30:87:
         5e:82:89:4e:6a:d8:20:5c:52:64:2d:01:76:15:61:31:d6:8f:
         c6:96:5c:11:00:cd:c7:ce:47:a9:26:25:66:74:87:bb:ba:44:
         0d:7f:c5:c8:cf:4d:af:81:86:3a:4e:e1:5f:13:a6:fc:a3:a6:
         11:d2:3f:de:77:ff:9b:35:5e:26:f7:11:8a:81:47:98:b8:e8:
         db:3e:f0:72:57:5e:ee:eb:aa:25:b5:35:07:9b:c8:9d:28:32:
         18:42:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:20 2025 by rpki-client