Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/181dfc09-5fd6-30f9-b001-94cf6f5e4474.roa
File:                     181dfc09-5fd6-30f9-b001-94cf6f5e4474.roa (raw, json)
Hash identifier:          GZ73wfgAoBx31w3FNdVXLtmcB4epM/b9wPq2zwR1Kd0=
Subject key identifier:   38:F4:3C:F8:36:6A:63:95:9D:8C:23:42:EB:BF:9B:2C:F8:CB:7C:B8
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F43285848FC1E8DF914A56463A54F6F00
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/181dfc09-5fd6-30f9-b001-94cf6f5e4474.roa
Signing time:             Mon 24 Feb 2025 03:32:09 +0000
ROA not before:           Mon 24 Feb 2025 03:32:09 +0000
ROA not after:            Sun 25 May 2025 02:32:09 +0000
asID:                     8079
IP address blocks:        2602:f718::/48 maxlen: 48
                          2602:f718:1::/48 maxlen: 48
                          2602:f718:2::/48 maxlen: 48
                          2602:f718:3::/48 maxlen: 48
                          2602:f718:4::/48 maxlen: 48
                          2602:f718:5::/48 maxlen: 48
                          2602:f718:6::/48 maxlen: 48
                          2602:f718:7::/48 maxlen: 48
                          2602:f718:8::/48 maxlen: 48
                          2602:f718:9::/48 maxlen: 48
                          2602:f718:a::/48 maxlen: 48
                          2602:f718:b::/48 maxlen: 48
                          2602:f718:c::/48 maxlen: 48
                          2602:f718:d::/48 maxlen: 48
                          2602:f718:e::/48 maxlen: 48
                          2602:f718:f::/48 maxlen: 48
                          2602:f718:10::/44 maxlen: 44
                          2602:f718:20::/43 maxlen: 43
                          2602:f718:40::/42 maxlen: 42
                          2602:f718:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fc:1e:8d:f9:14:a5:64:63:a5:4f:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: Feb 24 03:32:09 2025 GMT
            Not After : May 25 02:32:09 2025 GMT
        Subject: CN=d8709be2-d069-4d1a-876e-6c2055b25374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:4f:0b:8a:77:c1:fb:eb:1d:ee:6a:15:04:
                    62:c8:91:78:f9:6e:89:c7:a3:bc:fa:ca:cb:2b:cb:
                    77:d5:c7:3b:51:5b:1b:2e:a6:98:73:27:76:4e:86:
                    42:c8:e3:37:e0:6a:b3:56:75:5f:eb:61:4f:3c:b1:
                    91:af:f2:65:c2:f1:4c:c4:54:0f:f2:d5:4d:4d:f0:
                    57:5b:2a:03:50:7b:e2:5a:a7:2b:58:7e:4f:c5:f2:
                    51:a7:ed:37:7b:69:94:89:24:66:8a:09:88:b7:1d:
                    a0:b3:d9:38:4d:48:e1:cf:26:e9:ed:15:5c:00:0d:
                    cc:d6:6a:3c:d6:99:b5:2d:d7:42:93:7e:74:08:71:
                    eb:a9:d4:39:46:51:25:cd:e4:9a:f5:1d:19:71:9d:
                    62:32:9b:ed:8e:de:49:72:73:cc:08:67:53:0d:64:
                    40:97:9a:5a:c5:de:fd:c7:8e:62:2e:10:1e:d6:68:
                    4b:36:51:23:1b:23:e8:2b:88:ec:82:47:d0:db:28:
                    9c:b8:88:55:42:db:1d:d3:43:fe:51:17:60:16:63:
                    7d:cd:9a:48:48:47:d0:62:0d:ef:fb:37:e3:8a:9d:
                    cb:e0:eb:d4:6f:d5:db:4f:cb:c9:57:8c:7a:71:a7:
                    7d:f1:71:a6:be:10:0d:af:1e:1b:c0:ff:04:41:eb:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:3C:F8:36:6A:63:95:9D:8C:23:42:EB:BF:9B:2C:F8:CB:7C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/181dfc09-5fd6-30f9-b001-94cf6f5e4474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f718::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:16:a7:75:ae:b2:88:f9:c5:e6:a4:17:11:f0:6b:97:c2:30:
         f8:98:72:d3:c3:c0:ce:84:17:8d:aa:20:c6:4f:a5:a1:ef:25:
         fc:2c:3e:ef:6d:2d:57:ca:3d:61:ac:b8:b9:80:4a:56:04:e0:
         c3:9c:4d:c1:3c:d8:26:2a:be:1e:b0:8a:3f:3d:70:22:42:78:
         28:b1:14:74:d3:ef:e9:e5:b7:87:a0:92:ae:e2:e6:49:69:d0:
         6f:51:d3:18:1e:81:de:fc:e1:53:67:81:ab:5b:d7:dc:57:e2:
         43:98:5b:99:9c:f3:12:85:bb:cc:3b:ff:0a:4f:df:00:25:32:
         f4:90:a5:b0:e9:10:0a:4b:be:9a:77:2b:c2:88:8b:f6:8b:f7:
         2d:09:3f:5c:35:de:c1:db:e7:68:f3:04:11:8d:f9:8f:fa:c7:
         89:44:9b:c0:39:4e:a9:fe:0b:4e:61:f3:98:58:92:67:0f:cf:
         6d:36:0a:c0:f1:7f:50:a2:1f:e0:3d:f9:f4:58:74:52:47:67:
         a6:68:67:9a:8a:0a:1d:a6:c7:ec:f1:c3:1b:62:1a:1c:66:bb:
         7e:45:25:5d:f7:14:c4:22:d4:54:5c:91:a2:8a:71:f3:a6:a6:
         55:5b:38:c7:22:ac:f6:06:60:19:94:fc:48:20:cf:95:48:4b:
         42:c8:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:09 2025 by rpki-client