Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/e4cfd315-897a-3c21-b8e0-b8f8041829a7.roa
File:                     e4cfd315-897a-3c21-b8e0-b8f8041829a7.roa (raw, json)
Hash identifier:          UMb0u3M+1M8cGuKN97Q2/Ut7SZhcvLTgFoRHg1m7+Mo=
Subject key identifier:   92:3E:82:24:01:F5:4B:EB:65:42:BC:C0:86:E1:93:2F:DE:4A:60:36
Certificate issuer:       /CN=eecc445c-064d-41ee-91f1-3ef708241983
Certificate serial:       010D0C9F43285849ED4FBEA524DF4B61649389C0
Authority key identifier: CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/e4cfd315-897a-3c21-b8e0-b8f8041829a7.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     32524
IP address blocks:        2620:13b:5000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:be:a5:24:df:4b:61:64:93:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc445c-064d-41ee-91f1-3ef708241983
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=cc2c3517-be15-4560-83f2-e57fca6c585a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:f0:6b:21:ad:4f:f0:e3:6e:2d:f6:33:b4:
                    d5:c1:2a:7b:c3:c6:19:89:54:75:0d:9e:62:0c:78:
                    f4:3e:3f:99:27:a4:14:89:c6:fe:ca:9e:68:52:93:
                    8d:af:6d:02:ff:00:08:ea:a3:11:9c:2b:2b:bf:4a:
                    55:f9:85:9c:8a:0f:2b:13:91:a1:f9:21:ad:4d:74:
                    fb:47:4e:cf:c9:e5:de:e3:a4:8e:58:3c:89:ca:94:
                    11:e8:1f:d5:53:1c:65:8f:f6:e6:d8:11:04:38:e1:
                    ab:74:2e:ae:92:a3:0b:40:20:a2:98:f6:24:24:6c:
                    51:a7:a5:e8:36:6a:34:53:43:6f:41:cc:aa:2a:16:
                    c3:c2:41:ea:a7:4a:9e:fe:06:68:6a:f5:5d:f6:d8:
                    fc:16:58:06:71:c4:9d:0d:33:22:8b:b6:40:ce:db:
                    b7:af:ad:b0:54:cf:58:74:62:01:2a:6b:49:a1:3a:
                    93:75:86:30:1c:ba:d3:e9:f4:7f:20:6e:48:f5:f4:
                    d0:04:60:c1:00:74:86:38:ca:7c:d8:d4:c2:79:4e:
                    06:96:9f:59:e5:a5:6a:e1:30:03:d2:89:58:ca:11:
                    6e:cd:51:00:59:38:28:83:13:3c:35:29:f0:16:4c:
                    15:42:49:24:77:48:c2:fc:19:10:9c:b7:53:d6:74:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:82:24:01:F5:4B:EB:65:42:BC:C0:86:E1:93:2F:DE:4A:60:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/e4cfd315-897a-3c21-b8e0-b8f8041829a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl

            X509v3 Authority Key Identifier:
                keyid:CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:dd:d5:94:c0:02:e9:79:8d:63:b7:f0:4c:c5:31:17:33:
         5d:3e:d0:2d:3d:09:50:02:ec:83:5b:49:1b:fe:25:3b:c9:19:
         e8:d9:4d:fa:cb:ca:13:0c:5b:00:db:5a:12:63:d4:80:34:e0:
         1e:a4:7b:22:40:e4:1c:ed:0c:3c:25:de:1a:86:c0:67:af:60:
         cb:e2:73:a1:b3:5a:27:e9:2b:94:4e:76:b9:ef:33:b9:a6:0b:
         55:4f:86:be:31:e9:bd:13:12:59:d6:fb:2f:84:88:89:c1:7d:
         6b:26:0f:e9:dc:5e:a4:51:30:43:7a:d1:c6:30:f5:89:b8:d7:
         a0:9a:c7:d4:cd:3c:f9:89:db:58:af:cc:eb:65:cb:b7:2b:2f:
         2d:df:56:ae:73:ea:ac:1c:9e:de:e7:73:90:7d:97:e6:39:dd:
         9c:23:36:c7:8d:49:27:b2:6e:28:48:6d:14:9e:f6:27:f3:7f:
         b7:7d:3a:bb:60:1c:50:b1:d9:a2:a0:7e:7f:03:44:54:51:29:
         69:a6:b8:8e:94:d3:cf:1e:69:2b:76:b9:75:8a:bd:13:8b:44:
         82:44:18:f6:61:40:31:8c:cd:fc:1d:96:bf:88:2d:01:21:85:
         21:56:cc:68:d1:27:ce:81:a4:6a:c7:35:d6:96:88:50:e6:6f:
         4b:f4:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:03 2025 by rpki-client