Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/b5e1b732-26c6-314b-b759-08981fac0c79.roa
File:                     b5e1b732-26c6-314b-b759-08981fac0c79.roa (raw, json)
Hash identifier:          6vLEvPVlLRGJLBXtWR9Ui3o1LmLX3uyLBqOdhBpRpS8=
Subject key identifier:   8E:C3:31:A0:F5:86:B8:81:BB:90:0B:A3:75:BE:23:BB:50:D0:83:F7
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584909E69804352B17184B937F00
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/b5e1b732-26c6-314b-b759-08981fac0c79.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     401012
IP address blocks:        2602:f956:71::/48 maxlen: 48
                          2602:f956:72::/48 maxlen: 48
                          2602:f956:73::/48 maxlen: 48
                          2602:f956:74::/48 maxlen: 48
                          2602:f956:75::/48 maxlen: 48
                          2602:f956:76::/48 maxlen: 48
                          2602:f956:77::/48 maxlen: 48
                          2602:f956:78::/48 maxlen: 48
                          2602:f956:79::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:98:04:35:2b:17:18:4b:93:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=0781997e-9ecd-4ade-9819-8d6200e44118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:b1:80:cf:30:1a:9b:e4:8e:9f:fe:84:60:
                    ff:9f:a7:1c:58:e7:7b:80:67:95:8e:78:69:c2:c5:
                    ff:73:92:7b:50:d3:26:42:88:9b:bb:62:9f:ff:36:
                    d6:ad:62:fe:36:b5:89:b6:52:ac:52:ed:ac:25:d1:
                    eb:dc:17:9f:f3:6a:52:14:d1:80:7c:aa:de:9d:dd:
                    a8:36:42:52:cc:92:a2:17:38:1e:80:ad:fb:01:36:
                    1d:58:eb:36:77:4d:07:2d:d4:df:e1:12:b1:74:b4:
                    36:a4:23:d1:69:f7:44:c4:ea:9c:e9:22:5e:4e:d1:
                    95:e6:8b:d8:89:f8:63:04:80:8d:c1:8c:cb:16:b2:
                    d9:3c:79:47:90:e7:0c:0d:ee:f8:e2:6a:82:fa:66:
                    d0:39:20:6e:fe:22:e3:1f:4c:1c:9a:bb:2f:1c:69:
                    11:98:44:ad:d6:72:33:76:64:71:51:2f:3f:e1:ea:
                    e3:77:5d:80:84:6a:35:e6:71:ce:bb:66:d0:21:2b:
                    7f:b2:c3:da:5c:3e:34:4b:d2:b3:03:0b:6a:f5:42:
                    db:33:6e:ac:3a:f0:fc:4e:e6:74:10:b2:57:13:02:
                    e1:18:dc:2c:0b:54:c0:28:d9:6a:27:26:bb:e4:6e:
                    64:f9:5f:da:d4:d2:93:cf:58:93:2f:ab:a5:9f:97:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C3:31:A0:F5:86:B8:81:BB:90:0B:A3:75:BE:23:BB:50:D0:83:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/b5e1b732-26c6-314b-b759-08981fac0c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:71::-2602:f956:79:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:88:2b:be:60:9e:42:e9:f7:71:ef:93:b5:81:d2:36:8c:e8:
         4c:b4:a4:36:db:09:f5:25:fb:79:a1:71:2d:e9:fe:0f:76:b5:
         e2:69:9d:d9:06:bf:64:dc:9c:3c:aa:04:c5:79:8e:8e:26:e5:
         58:c0:74:0f:3e:a7:d1:4a:ae:7f:0c:df:04:86:82:e9:d3:67:
         84:99:ee:da:b3:5c:d9:e2:c9:61:3c:3f:36:30:28:87:1f:40:
         85:a0:03:7c:c2:48:80:66:a3:5c:bf:dc:5e:fe:a3:2f:03:6b:
         14:1f:a9:fe:90:56:a3:39:f0:2b:fe:28:b4:5f:a3:5b:db:f2:
         d7:cc:42:ed:1b:fb:a9:a5:f5:55:3d:df:0a:0c:f4:62:10:f6:
         c5:b4:fe:ae:81:92:8d:7f:d1:c4:4d:d9:0e:76:bc:51:86:3d:
         ff:98:ba:25:32:d5:18:ac:04:c9:94:de:36:86:b0:c5:c3:72:
         8b:ce:a6:3d:ce:fc:ca:50:51:3a:db:de:ab:e6:4a:a0:cc:7f:
         32:17:a0:2d:95:c2:94:59:4c:90:ce:01:e8:95:07:d5:ee:84:
         3b:25:11:e2:02:72:e2:aa:86:25:96:01:ec:5a:14:ef:5e:82:
         62:25:bf:0c:9d:b0:54:e9:89:fb:af:67:d4:c6:26:7c:49:39:
         ab:62:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:42 2025 by rpki-client