Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
File:                     12742b04-3c62-302c-a844-0e1fc03e34d6.roa (raw, json)
Hash identifier:          Ei1aoUMtR9WdoLDKzUF2hVEbCmcocPyCa6xXOOuVEhg=
Subject key identifier:   2B:66:BB:DD:E9:95:EA:6A:EB:26:34:EC:B4:C6:32:D6:CA:75:EC:4E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584988CF2BC56E31D36A85EFE300
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     8987
IP address blocks:        2605:4300:2c1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2b:c5:6e:31:d3:6a:85:ef:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=fc586de8-2364-4e5c-a488-f969c1900231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:fe:65:bc:fd:aa:cf:ac:87:fb:b8:36:ca:
                    1a:d2:ec:f7:25:69:eb:40:94:44:da:06:71:16:1e:
                    66:34:bb:b6:38:b7:ad:0d:0b:af:71:8a:05:ee:86:
                    2e:30:7a:f6:a0:78:8d:1e:23:68:1d:af:9f:11:99:
                    33:e1:7f:ba:97:01:68:1b:db:dc:df:c5:96:f6:9d:
                    79:4f:62:fe:83:20:15:46:1f:cf:10:8d:28:b3:d2:
                    04:40:2d:57:15:95:db:11:26:8e:87:b4:37:5c:d2:
                    11:6d:4b:50:49:e0:47:ae:af:2a:10:3f:ed:46:86:
                    d1:17:b0:db:f0:ff:d4:79:fe:e8:6c:b9:96:dd:4e:
                    a5:6a:9b:88:a3:14:02:b3:e8:a2:e1:e5:f8:2f:c2:
                    35:7d:9f:f9:59:ab:9b:82:31:b9:1a:bb:f5:4a:df:
                    df:f7:8c:7d:7c:8d:be:47:d6:80:f2:9a:b9:be:f9:
                    84:a4:2e:ca:29:ee:30:c8:77:df:bd:24:92:5e:b3:
                    e6:b4:84:0b:ea:49:26:77:01:90:7c:db:5c:1e:33:
                    af:62:56:84:e5:66:ec:98:af:c5:64:90:57:9d:b3:
                    fc:72:f8:7a:8f:52:93:ce:3e:f3:5c:56:7a:3a:67:
                    f7:b9:f8:0e:b7:5f:d0:91:fc:ac:d6:0d:22:bd:04:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:66:BB:DD:E9:95:EA:6A:EB:26:34:EC:B4:C6:32:D6:CA:75:EC:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/12742b04-3c62-302c-a844-0e1fc03e34d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:14:f8:28:81:69:7d:51:9a:64:9c:9c:fb:95:f6:f6:09:1f:
         05:f9:c3:3a:bf:45:19:36:ce:de:a5:2e:e2:ba:83:b7:ef:61:
         e5:b0:2f:48:15:a0:b8:45:93:b7:81:a1:21:79:06:04:ce:08:
         ae:09:9b:15:62:47:fb:04:bc:c1:ce:95:0d:5c:08:97:11:a8:
         bb:5d:e2:6f:4d:81:b6:2e:13:6a:76:5c:c9:25:94:ba:f8:5e:
         dd:bf:8b:65:4f:9b:b0:24:3e:49:57:0d:d8:da:8d:f1:ef:f0:
         02:eb:73:45:b6:08:a0:e3:12:e3:1a:41:3d:88:a9:36:6c:21:
         28:2a:4c:e1:32:4e:55:dc:ce:21:46:9c:35:37:48:2f:2c:32:
         c4:0a:3f:05:ac:1c:5a:be:ae:46:5e:32:90:35:76:e7:20:87:
         1e:1d:48:1b:28:49:70:e9:f9:bd:ba:0b:04:4d:59:f9:b8:3a:
         37:b1:b4:f7:ca:da:c0:a9:87:59:1e:b5:16:a1:83:9c:95:0f:
         e5:97:90:b0:dd:d3:1b:61:12:a0:69:c6:de:c5:0c:ed:0f:dc:
         c2:eb:56:07:23:5b:8e:6a:98:72:89:27:e9:7e:1b:bb:e6:e7:
         f9:a2:63:b8:ac:43:02:31:d8:81:b8:0a:a8:3a:a8:96:97:a1:
         cd:94:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:52 2025 by rpki-client