Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
File:                     04623bed-8a51-304e-9d94-54b88dab4623.roa (raw, json)
Hash identifier:          82+6XTFuHyqTvCjFmU+ZsOm7T0qALDnj0+EBO+BInqM=
Subject key identifier:   AB:2E:B4:84:F2:A6:C6:16:D0:17:89:79:07:22:77:3E:88:89:5C:1A
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F4328584988CF28F015FDDF42BAACDF40
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        2602:fcee:ff8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:28:f0:15:fd:df:42:ba:ac:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=2db756bf-a199-4aed-8e7b-f520c7025b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:fd:f1:96:f2:20:c3:38:a3:07:67:f7:9f:
                    60:85:bb:5e:5a:a3:83:03:c2:b4:5b:3a:a8:d7:c6:
                    b1:92:6d:4c:56:89:4f:6d:5d:e1:b5:96:85:e1:72:
                    fa:65:a4:d0:d1:09:a6:32:52:6b:5c:77:ef:07:04:
                    48:8c:00:f1:17:35:3c:a5:c5:81:78:8a:43:6d:b8:
                    fc:df:31:c5:99:82:89:d7:dd:08:8e:33:9c:e6:20:
                    cd:a4:54:c6:b1:77:a8:93:74:a5:05:de:b0:31:4b:
                    42:07:a9:57:85:76:02:52:5e:72:b1:37:8b:a9:3b:
                    d7:2d:60:95:6c:45:9d:02:94:a6:c4:83:ad:bd:f9:
                    ee:9f:4b:9a:f9:39:de:36:61:0b:44:e2:88:37:7f:
                    58:d3:a7:c2:ce:67:39:23:2e:65:78:00:1d:2c:f1:
                    ee:5c:f7:0e:98:2d:05:b7:51:32:cc:8f:88:fb:18:
                    d0:37:14:99:4f:14:86:84:f1:69:3c:6d:25:7d:96:
                    2a:fb:48:63:51:9e:c3:cb:e5:1b:91:32:51:3b:84:
                    f8:4b:17:6e:a0:89:28:f1:18:a4:a7:39:45:ce:e5:
                    bd:50:18:6a:a8:be:78:da:ea:90:13:28:ba:bc:35:
                    01:5b:92:ea:d2:3c:b2:f7:de:5c:4b:0b:82:ae:54:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:B4:84:F2:A6:C6:16:D0:17:89:79:07:22:77:3E:88:89:5C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:ff8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:48:1e:bf:ba:40:e4:d6:49:44:2a:23:b7:bc:95:fb:ed:9e:
         e9:6c:80:4a:3c:75:14:63:64:27:8c:5c:11:78:96:2f:13:76:
         e8:f6:8c:b4:d0:3e:a9:fc:2b:86:c0:73:5e:81:1c:e9:14:55:
         17:b0:97:3b:ca:d2:52:2a:9e:9e:ee:57:dc:0f:0d:e4:33:51:
         53:0d:27:56:dc:95:b0:e0:3c:a5:5c:93:e5:0b:d1:1f:32:e0:
         16:63:b9:83:a7:ca:3d:e0:a5:e0:ce:3c:ba:fb:14:2d:fe:7c:
         2a:0c:7f:96:19:35:5d:79:cb:d4:d7:58:97:30:09:96:d0:26:
         03:25:f0:cf:1b:77:3b:62:b3:41:32:a9:0d:e0:ed:a5:ca:3e:
         3f:dd:4d:c8:5e:f2:f7:3a:73:5b:90:fa:19:65:43:ab:a2:a0:
         34:f9:cd:9b:06:9d:8c:c4:9e:03:a3:c9:f2:e4:74:07:7a:db:
         14:24:ff:ae:5a:ff:de:3e:f4:27:81:27:12:b0:bd:4f:eb:d2:
         4e:6d:29:5e:bc:e8:57:a4:86:e5:2d:b8:fe:8b:09:b2:6d:e6:
         65:b3:3e:a3:d3:bd:ca:ca:05:c5:5a:04:27:d6:9b:db:49:3c:
         fc:f1:81:f3:14:02:73:f0:47:17:90:e9:0b:a1:08:86:0d:18:
         e4:69:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:35 2025 by rpki-client