Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2b01728-013f-3557-9948-5b88792d34e2.roa
File:                     e2b01728-013f-3557-9948-5b88792d34e2.roa (raw, json)
Hash identifier:          TEydEikftlxzatDVGH+HXXLdkAWcME2yJUTL62TOk6U=
Subject key identifier:   AF:D6:46:93:ED:54:67:E9:CA:B8:01:30:F8:9B:0C:E4:3C:14:69:AB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849192D15D932293B16AFDD4140
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2b01728-013f-3557-9948-5b88792d34e2.roa
Signing time:             Thu 06 Mar 2025 13:19:52 +0000
ROA not before:           Thu 06 Mar 2025 13:19:52 +0000
ROA not after:            Wed 04 Jun 2025 12:19:52 +0000
asID:                     207266
IP address blocks:        2001:500:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:2d:15:d9:32:29:3b:16:af:dd:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar  6 13:19:52 2025 GMT
            Not After : Jun  4 12:19:52 2025 GMT
        Subject: CN=4405d5ef-bd9d-45db-8b2e-2b26298c7d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:93:ca:42:25:a0:ae:f7:68:50:4a:9f:38:
                    e6:77:26:97:9a:2c:65:65:49:d3:4a:28:72:e0:11:
                    8f:eb:a1:da:af:af:4d:cc:fd:53:90:74:79:14:46:
                    69:d9:f1:61:54:73:09:76:be:80:79:0e:11:4f:fb:
                    44:e2:d3:26:41:9c:c2:20:8d:a1:10:e3:10:28:14:
                    00:c4:63:c4:f6:d9:41:65:7e:9e:5a:3c:84:79:1b:
                    65:b9:fb:11:e6:26:b2:2a:d5:03:dc:af:d0:99:ca:
                    38:c9:4c:31:eb:4d:f3:c2:b5:d2:a3:f5:dd:47:7b:
                    90:10:5c:75:8f:52:b0:ea:ee:c7:f3:74:cb:f0:65:
                    d9:af:92:63:58:55:0c:40:ac:d8:3c:ce:e2:f5:0e:
                    f9:32:9d:9d:81:11:7a:d4:de:83:fb:d0:5d:f2:80:
                    07:32:94:32:b2:16:ee:82:56:4d:2d:49:c8:b8:38:
                    5a:30:74:ef:2e:80:38:f8:9f:c7:69:36:5d:44:6c:
                    e2:bb:73:32:65:8b:f0:6b:8f:63:2c:01:5c:2f:d9:
                    d3:83:2d:40:de:5f:2b:2a:e0:68:f8:64:23:8f:15:
                    76:be:57:a4:60:1c:33:89:09:53:d0:b0:82:7c:5e:
                    2f:7b:92:37:c6:4f:2d:ce:9f:37:16:86:28:77:0b:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:46:93:ED:54:67:E9:CA:B8:01:30:F8:9B:0C:E4:3C:14:69:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e2b01728-013f-3557-9948-5b88792d34e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:30:34:e6:cf:1b:6d:f2:67:e5:46:08:e4:d3:04:36:8b:
         d2:3e:93:ee:fc:58:42:a0:7d:67:9a:12:33:fa:c6:cd:5c:ab:
         60:f4:40:c0:2a:5a:a1:08:ad:86:9f:7c:bd:f4:08:c9:74:04:
         14:2d:15:d5:47:3e:ee:86:30:cf:96:77:8c:2e:ff:e5:43:6f:
         10:b8:1a:51:c6:75:90:33:ee:14:a2:ca:bc:c6:86:fd:04:6c:
         b2:26:57:95:ff:27:09:2c:fe:72:f1:37:20:60:ef:53:1d:15:
         50:f6:a5:03:f3:7f:db:37:53:55:c5:31:8b:85:18:09:8a:ad:
         9c:d6:25:2e:38:77:8c:64:0a:53:16:68:d9:fe:a2:63:af:7c:
         83:3a:63:99:24:58:73:79:56:e9:40:ae:86:54:b0:3e:6f:46:
         9d:13:c1:a9:67:14:7b:44:6a:b5:e7:29:25:f6:ad:ba:dc:39:
         b4:a9:e7:54:ac:5b:9b:54:23:7b:ff:98:1b:52:4e:1b:e3:94:
         63:12:50:79:ae:43:c5:f8:22:68:b8:0d:05:81:27:3a:12:64:
         cf:af:4b:94:70:a2:57:43:c2:b9:5e:b6:db:53:5e:fd:77:97:
         90:4f:eb:0b:ff:2b:35:d2:44:6b:90:19:8d:eb:a9:1e:f3:46:
         9d:af:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 06:16:10 2025 by rpki-client