Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/4d332b9e-e281-3913-8d85-fc3d027b57ce.roa
File:                     4d332b9e-e281-3913-8d85-fc3d027b57ce.roa (raw, json)
Hash identifier:          fp2DLYG6DVL31EQ7DgTWkdti47AM/eJWJzmXoZ++uVE=
Subject key identifier:   84:9D:30:B2:78:B8:46:02:7C:02:56:F8:BF:CD:37:06:6C:EA:29:C7
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285849ED4FCC4E3DE420C9B8CEDFC0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/4d332b9e-e281-3913-8d85-fc3d027b57ce.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     12189
IP address blocks:        2607:6000:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cc:4e:3d:e4:20:c9:b8:ce:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=68d271aa-b073-4795-a56f-9133d45804f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:d0:0c:9e:02:22:cf:57:4f:82:fe:53:cd:
                    d5:0b:91:91:9c:a1:3c:1c:27:8d:a7:00:ba:07:9c:
                    34:b7:39:e6:72:8c:02:25:db:d8:0b:e4:3a:65:80:
                    1d:82:1d:f6:31:22:b1:6a:c6:2d:4f:e7:1d:31:d8:
                    09:8b:3e:f6:8b:60:d7:a4:48:0d:7c:40:05:90:b1:
                    92:5e:17:f6:e1:00:b1:6a:60:0d:cd:b9:7f:ac:f0:
                    17:11:44:0e:90:a2:f3:4c:bb:55:ca:a3:b6:d6:28:
                    6b:54:39:52:3b:0a:bc:79:f9:b8:0b:8c:b9:17:f5:
                    06:87:75:f7:99:7c:f5:40:e9:bf:de:6c:b7:71:61:
                    20:4d:61:ad:46:6f:45:4d:20:b8:d1:c4:bb:30:c0:
                    10:83:50:f3:4d:fa:b0:31:95:b5:2d:4c:06:66:d3:
                    92:2f:f1:1d:c3:67:ef:eb:d0:91:7a:fa:29:ed:4a:
                    50:c9:39:41:81:6e:ce:cd:e4:77:de:b2:ff:8c:7a:
                    67:a8:ce:af:33:44:1c:8d:39:cb:a3:0b:bd:1a:ba:
                    29:64:9d:78:2c:0c:cc:5f:fa:57:60:8c:d9:82:2d:
                    f3:51:0e:e9:74:d1:97:e0:9f:53:d7:9b:10:33:54:
                    61:16:fa:0e:9e:00:66:fa:6a:92:9c:1e:a3:44:c9:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9D:30:B2:78:B8:46:02:7C:02:56:F8:BF:CD:37:06:6C:EA:29:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/4d332b9e-e281-3913-8d85-fc3d027b57ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ed:95:18:44:10:ef:b3:c4:bc:b3:1c:ef:c6:b3:71:52:71:
         39:5d:ec:19:c4:f9:b9:90:46:a6:1e:9e:d5:d1:0f:93:f5:f7:
         f8:5f:53:8f:96:c9:b1:fc:3b:80:4b:02:9b:48:3b:78:61:25:
         96:96:e9:02:7d:d6:fc:66:a8:cd:8b:5d:56:4b:5d:23:2f:60:
         6a:2b:90:46:d1:c2:71:73:86:f2:50:58:6c:ba:fe:42:8a:9c:
         3c:bf:02:8e:59:99:1b:50:aa:45:d9:69:08:32:3a:28:ce:c5:
         4d:0d:f6:47:72:14:f1:79:e3:91:55:d4:9e:03:99:45:e4:26:
         64:c3:56:2e:db:54:f0:23:12:2a:96:7d:8f:58:2d:f7:49:50:
         41:09:91:eb:2a:53:4d:c5:bf:20:dd:49:61:b2:44:76:b1:2e:
         96:d2:ce:3e:3e:2a:59:79:a3:33:42:5a:cf:bd:c3:1d:61:02:
         7b:bb:22:fd:08:32:60:41:00:f0:c4:bb:22:a8:84:4d:c4:51:
         c7:41:77:b1:24:cb:a8:cb:1a:73:e0:e3:f5:c4:b1:91:3a:3c:
         df:7e:ba:15:11:76:b2:d2:ff:6e:2c:3a:ed:24:f6:e7:66:e4:
         4b:88:b6:53:25:85:4f:00:b9:40:83:37:3e:2a:d4:b5:ab:43:
         a4:23:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:56 2025 by rpki-client