Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa
File:                     b9aad819-313c-3590-a1f8-29719cfeb007.roa (raw, json)
Hash identifier:          KxNSlsTaHUJ3PhBSNlm/Kvuo7z+JglrRSspQM73pODY=
Subject key identifier:   DD:97:F6:2F:E2:CA:78:7A:D8:39:E3:EC:0C:91:F7:7C:A1:5D:FA:86
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F432858495D89685831D1303AD8078400
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     26383
IP address blocks:        2605:e440:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:68:58:31:d1:30:3a:d8:07:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=be020a2d-651d-45f3-8691-97848d24e7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:e4:c9:71:b0:93:3c:a0:0f:98:8f:55:55:
                    66:87:0a:94:df:71:a7:0f:4c:d1:56:28:c4:8c:c7:
                    6a:0c:ff:9c:d6:f5:c3:91:f1:0a:6c:15:1e:44:be:
                    a0:ba:4d:98:5f:d6:e4:d2:9b:52:16:01:e9:26:4c:
                    93:1a:b9:d4:76:18:ff:05:aa:88:68:98:e7:db:e1:
                    bb:5f:70:51:97:83:d5:26:29:31:90:04:5b:fb:69:
                    98:e4:da:40:63:6f:09:5a:f4:6b:db:3f:3c:67:6e:
                    da:bd:0e:e1:31:ab:58:f7:93:e9:24:c2:e5:b8:46:
                    95:a2:f6:28:18:1f:17:3b:81:37:4d:a3:c9:d9:46:
                    c7:2c:cd:06:92:1b:af:b8:63:f5:d3:dd:87:4b:10:
                    ca:ee:a0:16:25:f4:ca:ab:6b:72:47:c9:e5:b1:00:
                    7b:80:01:49:d5:4c:63:c5:81:11:91:02:13:d8:5f:
                    cf:8a:a3:3d:b1:d6:2a:f7:f6:6c:9e:65:ca:78:19:
                    75:ec:b5:b6:02:ee:02:a5:1e:f6:ec:44:78:b6:31:
                    c2:4a:09:61:4a:58:29:d6:fe:4d:cc:95:90:ea:9d:
                    ab:6e:c7:25:27:f3:a5:72:d2:7e:3f:6c:66:c0:46:
                    6f:9c:8f:f7:cd:fd:72:dd:75:2a:94:2b:bb:1c:9f:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:97:F6:2F:E2:CA:78:7A:D8:39:E3:EC:0C:91:F7:7C:A1:5D:FA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:ba:81:fc:12:37:84:e8:41:fb:94:15:d7:c2:85:e9:24:
         af:df:c7:3f:8a:49:95:9a:25:a3:f2:15:22:17:ac:9c:fc:fb:
         e7:96:6a:92:6f:05:0d:32:a0:a0:12:b4:0e:bc:ca:4e:49:c9:
         ab:ad:fe:49:79:dd:7d:3a:87:86:bc:18:e8:67:7d:0b:69:f0:
         88:f7:5a:c6:f6:eb:4e:a0:51:92:46:9e:51:a6:e1:90:62:fb:
         3b:a1:a3:87:f2:fc:ca:5c:f3:47:50:a4:74:74:35:26:83:3e:
         b6:91:c1:9b:6b:71:52:26:f4:a8:0e:31:8f:04:a2:22:ff:df:
         fb:30:9b:9d:64:fa:bf:fa:a4:8b:ce:1a:93:5a:0f:eb:37:04:
         de:e2:2d:ec:f3:92:f1:90:39:0d:93:71:38:9d:93:ca:a3:11:
         4d:14:51:50:f4:4d:d9:ff:f0:2a:8f:67:b7:2c:17:f1:91:e6:
         59:d4:9c:e7:aa:be:a3:48:61:87:87:61:5c:7f:65:41:72:8d:
         f9:cc:58:31:16:68:d5:96:a8:e8:5d:f7:13:6c:a9:dc:6a:3d:
         60:1d:04:c5:13:da:a2:e3:4e:98:d1:83:d0:dd:39:64:1c:71:
         1f:53:8e:92:ad:3c:9a:b3:4c:d3:12:df:c7:c7:5f:4a:bb:23:
         aa:49:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:18 2025 by rpki-client