Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0eeb36e8-57f6-38b5-bd94-3e470cade386.roa
File:                     0eeb36e8-57f6-38b5-bd94-3e470cade386.roa (raw, json)
Hash identifier:          YzwDuZ752WOPW3AyvllKFnGW3NVvnsCyJHM7moEdXhg=
Subject key identifier:   46:66:A1:72:C6:B1:F8:35:00:DD:1F:E7:07:09:29:80:64:3A:58:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858492184372944D7160F1209DC40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0eeb36e8-57f6-38b5-bd94-3e470cade386.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:37:29:44:d7:16:0f:12:09:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=aa032b32-a6ee-4ea7-be0a-469c6b13c6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:f3:bd:24:d9:b3:17:79:ef:37:ba:1e:07:
                    70:83:7b:ed:8a:f5:aa:5c:2e:e0:ef:da:52:23:51:
                    52:12:fd:37:d2:9d:04:05:0f:ce:7b:60:76:e1:2b:
                    5f:e4:44:b6:4f:d7:c7:b5:fa:82:53:37:1d:4b:62:
                    d7:02:c0:19:1d:9c:81:00:71:24:03:e3:65:b2:64:
                    83:1c:58:10:cd:87:9d:f5:30:b7:d8:4d:85:31:d7:
                    cb:15:73:2b:ed:ab:59:a2:b1:e2:59:8a:39:a8:b0:
                    28:57:fc:a7:b2:61:ae:c5:b9:38:b2:e2:54:24:c0:
                    cc:25:98:2a:c3:17:a9:a8:7c:5f:59:24:e5:e6:c0:
                    27:da:b9:ba:f8:37:73:b4:db:a8:a3:39:76:d0:83:
                    38:e2:3f:f5:49:a7:8f:9d:3a:34:52:1f:11:8f:c2:
                    c1:85:9c:54:cc:a2:fb:88:5e:08:96:8d:78:90:29:
                    e9:6e:05:ac:d0:38:d7:8f:14:d4:7d:a4:4d:2c:1c:
                    9a:00:97:d6:bb:e3:3d:a5:ac:e6:da:5d:01:05:2f:
                    7d:07:a3:54:9d:56:84:eb:42:09:f2:ee:69:be:b2:
                    26:a4:db:7a:04:d9:a6:10:2d:b2:17:a0:a7:0d:3e:
                    bf:5c:4d:4a:48:84:87:09:96:6e:77:44:4f:c7:45:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:66:A1:72:C6:B1:F8:35:00:DD:1F:E7:07:09:29:80:64:3A:58:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0eeb36e8-57f6-38b5-bd94-3e470cade386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:35:86:d7:c8:bd:29:ce:70:33:ea:f3:e8:4e:0c:1f:9b:7b:
         1b:9d:51:c7:b8:a1:61:c3:c0:03:4b:b5:63:5e:e9:78:56:c0:
         67:0a:20:f4:5d:2d:0f:2b:20:3f:50:bb:eb:97:88:7e:96:75:
         65:b9:af:fb:3f:5e:89:1e:5b:2a:d6:8e:91:66:7f:3e:cd:41:
         41:3d:a3:e2:da:9c:5f:b4:0a:c9:50:01:0d:33:5d:78:8d:59:
         20:c0:12:70:77:cd:92:8d:b7:35:57:c1:05:fa:b7:2c:56:53:
         71:9f:5c:01:6c:67:ca:a6:16:b5:da:d3:ce:6c:64:3f:dc:c7:
         48:57:d6:c0:5c:21:9d:1c:75:7c:51:53:e5:6e:e2:29:98:4d:
         21:02:78:ff:7c:31:c4:9f:c9:a7:95:8b:9d:24:4b:7d:01:48:
         0f:51:4b:c6:04:aa:b6:e0:1e:47:e5:af:9c:7b:22:59:5a:d5:
         41:1c:d1:42:1a:1b:e6:3f:4e:1e:b9:a0:1d:ed:9c:54:c9:de:
         2d:23:54:e0:f9:19:c9:b5:07:a5:95:0b:24:46:4c:01:4f:9e:
         21:6e:4a:c3:f3:1b:01:ae:a6:4d:23:b6:04:2c:3a:53:21:ea:
         9c:c6:13:0c:44:07:f1:f8:4f:a0:5d:03:d8:41:46:67:f0:ff:
         18:01:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:05 2025 by rpki-client