Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ebd2d198-ae9a-3c43-b444-5801d8156855.roa
File:                     ebd2d198-ae9a-3c43-b444-5801d8156855.roa (raw, json)
Hash identifier:          jRKmwJG/jU0yjkKFPdfiwEV46jhQ8KY/NY8XcMGl99E=
Subject key identifier:   FF:5E:F4:25:6C:60:92:45:C7:AA:64:5D:72:41:A8:B0:A2:08:04:13
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F43285848FEBBD45A2D314BDA3ECB1D80
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ebd2d198-ae9a-3c43-b444-5801d8156855.roa
Signing time:             Tue 25 Feb 2025 02:00:39 +0000
ROA not before:           Tue 25 Feb 2025 02:00:39 +0000
ROA not after:            Mon 26 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        2601:1904:1140::/44 maxlen: 48
                          2601:1904:1180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fe:bb:d4:5a:2d:31:4b:da:3e:cb:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: Feb 25 02:00:39 2025 GMT
            Not After : May 26 01:00:39 2025 GMT
        Subject: CN=a0646835-37e5-4c6a-86d3-070a9c40a093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:1e:43:a2:43:79:87:a3:83:36:4b:ce:2c:
                    57:1e:d2:a3:6e:1a:a7:ad:1d:53:72:e4:f8:4b:e0:
                    32:b3:78:1f:2f:e9:62:44:60:ef:90:50:16:ee:7a:
                    b4:52:80:21:9b:d6:3d:92:89:a8:85:99:d1:7e:0a:
                    c5:81:8c:67:de:32:c5:e1:db:58:14:ee:c1:db:c8:
                    f5:af:9d:e5:ec:25:00:61:fd:e6:1f:f2:7c:48:d3:
                    09:0d:9c:10:4b:a9:fd:7e:22:f6:ac:8a:f3:b3:b5:
                    fc:33:0a:cc:d0:b7:36:cd:24:50:8f:f5:1d:14:4d:
                    bc:7d:c8:2c:2d:92:a0:60:db:00:9a:31:72:02:0c:
                    f5:22:c8:5f:f5:eb:79:cf:8b:cb:a7:86:9c:0c:db:
                    eb:fe:bc:57:dd:39:89:a4:0d:dd:3e:b3:71:53:28:
                    0d:69:7d:ec:2f:57:3a:da:44:13:1b:da:7e:ed:22:
                    bd:de:56:6f:35:ac:77:4f:d3:ff:d6:83:3f:79:1c:
                    25:51:88:9b:94:58:ef:d6:4f:19:4f:74:71:e6:5e:
                    62:97:d0:f3:f8:f2:9b:6a:ea:9a:f5:5c:80:90:84:
                    3f:d3:f7:f0:d8:38:32:a5:bf:28:67:bf:68:60:5e:
                    68:9d:ae:35:6d:e5:0c:86:14:aa:10:c2:db:9c:a9:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:F4:25:6C:60:92:45:C7:AA:64:5D:72:41:A8:B0:A2:08:04:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/ebd2d198-ae9a-3c43-b444-5801d8156855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1904:1140::/44
                  2601:1904:1180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:c3:e2:30:94:99:1e:17:cb:2c:36:51:ec:02:04:87:79:
         d6:89:b5:51:e1:45:50:c5:93:37:a2:04:65:43:ac:d1:e7:14:
         88:1b:d0:36:ec:62:c8:db:36:39:f8:62:a4:73:62:d9:48:94:
         27:37:db:27:cb:48:e2:29:ba:6c:3c:2f:d2:a3:bb:73:3e:b0:
         57:bc:38:c1:a9:fc:e2:8f:ed:28:3f:31:b9:06:56:c3:55:69:
         e8:a6:63:c0:5f:39:9c:56:af:5f:62:d2:fe:2b:bb:b2:9d:a4:
         3f:ec:29:5c:15:4c:f7:b6:f5:17:57:14:2c:81:69:88:87:7b:
         f4:37:7e:02:0e:4c:1d:df:b0:e8:3d:c5:39:29:d4:d3:82:b4:
         b6:d4:7d:8b:7a:a7:f8:4d:7d:52:09:1c:42:97:6d:4b:35:4c:
         8f:56:3f:84:7e:11:0d:c9:a9:04:0b:85:29:1e:fc:ac:f2:ae:
         87:53:b5:dd:2f:b4:85:52:69:cc:42:7b:44:7d:7e:0f:c0:2f:
         6a:2f:78:41:38:80:07:85:6f:87:a8:6d:d3:ef:d6:eb:46:dc:
         2c:e2:68:8e:ba:6d:9a:e8:28:ac:88:94:bc:ff:3f:8d:ad:28:
         81:2d:74:c7:c1:3d:95:09:03:55:34:d4:e5:6d:12:0f:c6:71:
         42:1d:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:33 2025 by rpki-client