Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/e85ccb3d-55a0-36b1-b7e2-18cfa74ef7bd.roa
File:                     e85ccb3d-55a0-36b1-b7e2-18cfa74ef7bd.roa (raw, json)
Hash identifier:          DnRqKmGm8ySJjiwliTkKeyfBoV69sc4Gwp3KWZWyuEY=
Subject key identifier:   18:44:E3:16:1D:4C:85:C0:FE:47:8E:80:20:B3:84:50:5D:B9:2A:62
Certificate issuer:       /CN=b1ee2515-763a-406a-bc31-a3b9c15f3650
Certificate serial:       010D0C9F43285849998F3C19D934CF6ECEDC1FC0
Authority key identifier: A4:90:54:5E:A9:A0:0F:EA:DC:CA:F7:66:E4:B7:1F:17:80:1D:E1:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/e85ccb3d-55a0-36b1-b7e2-18cfa74ef7bd.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     23367
IP address blocks:        2605:1080::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/b1ee2515-763a-406a-bc31-a3b9c15f3650.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/b1ee2515-763a-406a-bc31-a3b9c15f3650.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:3c:19:d9:34:cf:6e:ce:dc:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee2515-763a-406a-bc31-a3b9c15f3650
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=d9343580-5a40-44db-a9da-02ad1a89e04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:eb:5b:9a:c9:6d:17:11:93:ce:70:a6:6b:
                    b7:10:2d:41:94:30:c2:36:d1:b8:0e:a7:2e:1b:91:
                    0b:e5:fb:81:5b:1a:36:13:f3:7d:c2:6a:00:63:2d:
                    97:af:58:71:7d:85:06:71:b3:9d:3c:a2:fe:d8:27:
                    bb:15:cb:c4:a8:c7:e6:9c:3f:c6:f9:1c:6d:f7:33:
                    22:25:a6:3d:5e:3a:5b:d8:75:8d:41:54:5d:5e:17:
                    5c:1c:92:e8:f7:73:fe:8c:09:16:83:62:36:7d:e7:
                    e9:cf:55:7a:d0:cc:39:d8:a8:ee:3d:54:d4:d4:2d:
                    a3:6e:c0:11:d5:fa:1a:3a:f8:0d:cc:a4:62:19:bb:
                    6e:82:8d:49:5c:e1:aa:89:3d:02:95:37:a5:ca:70:
                    68:a5:49:26:e4:12:09:7a:be:66:80:41:07:a7:4f:
                    ec:54:28:3c:f3:b2:a4:eb:84:d8:6c:3c:a3:af:7a:
                    f7:c3:e0:6e:d8:0c:5d:e8:bc:eb:62:fb:a8:65:ed:
                    53:b8:bd:f0:f6:cf:eb:4a:bc:21:98:7a:70:08:f3:
                    16:9a:f7:9b:a6:d3:ed:90:98:a8:44:5b:dc:99:0c:
                    17:e3:a4:c9:62:6f:01:8c:65:06:58:90:5b:17:c6:
                    c9:40:99:7a:28:f4:c3:99:7c:a5:ce:4c:20:d8:f2:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:44:E3:16:1D:4C:85:C0:FE:47:8E:80:20:B3:84:50:5D:B9:2A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/e85ccb3d-55a0-36b1-b7e2-18cfa74ef7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/b1ee2515-763a-406a-bc31-a3b9c15f3650.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:54:5E:A9:A0:0F:EA:DC:CA:F7:66:E4:B7:1F:17:80:1D:E1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:cb:ba:a2:03:d2:66:50:8e:9f:50:a1:cf:e3:c9:69:14:
         8d:2e:c2:76:42:86:47:0b:0b:a8:f8:87:51:88:e0:65:17:8a:
         d1:27:06:a9:60:a0:78:55:e7:a6:4c:49:db:2d:d4:25:1b:38:
         d9:54:81:ee:63:cd:45:c7:18:8a:f6:b8:39:e6:b8:78:25:c6:
         65:f8:c9:9f:e5:40:b2:29:ac:f6:9a:dc:a1:ad:89:89:a4:2e:
         2a:b0:f0:62:7f:49:e7:3f:cc:87:e5:6e:88:86:e6:0f:33:e3:
         29:43:77:33:a3:e5:d2:31:26:9f:df:bd:57:18:10:a1:79:02:
         a8:c8:ec:e4:2d:d8:e8:99:92:f7:b0:8e:51:a8:c0:33:33:f6:
         49:ae:4c:74:e6:1e:d5:0f:cb:49:ee:71:66:59:ac:48:c3:2b:
         26:02:d4:a8:08:8a:b6:b3:1e:7b:35:ce:ba:c6:7e:bd:76:a0:
         21:fe:07:98:c4:22:c7:6e:8f:31:e3:d0:ac:1a:bc:ea:b1:19:
         61:f9:b7:f2:bd:a9:68:df:06:1c:46:50:9d:8e:27:ec:04:d0:
         f6:52:51:b5:03:95:7d:36:58:80:db:a3:f7:80:5f:00:df:1d:
         39:b6:2c:41:fa:30:ad:a0:9e:1a:eb:0e:12:14:82:f8:01:8e:
         c8:6c:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:58:54 2025 by rpki-client