Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/78327566-45d7-3069-8b5f-975dbf2319b0.roa
File:                     78327566-45d7-3069-8b5f-975dbf2319b0.roa (raw, json)
Hash identifier:          q9oh4zPdGs+tvsexh+tX4nAwZd9pQTCBXnG9RreD2VU=
Subject key identifier:   BD:FE:8E:68:CD:7C:41:11:64:57:A1:11:9F:89:0A:0C:08:1B:AF:C3
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584A07D5259E827410DD33DCDC00
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/78327566-45d7-3069-8b5f-975dbf2319b0.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     396908
IP address blocks:        2602:f956:e0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:25:9e:82:74:10:dd:33:dc:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=aa4420fb-d05c-4358-a4db-6a629b8a0657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:51:33:e9:0a:d2:c3:e0:01:91:b6:6e:01:12:
                    fa:f7:5c:cc:8a:0c:6c:2e:92:38:92:e5:f7:d4:cb:
                    8a:16:97:2d:73:2b:0f:6a:25:79:5f:d1:5b:10:c8:
                    cc:3d:ca:5f:1d:a1:c4:20:7b:2b:91:86:5d:41:1e:
                    f8:a9:ab:cc:18:ac:7f:9f:90:f1:87:c3:59:81:b1:
                    93:60:b5:a3:a7:f6:5e:9a:f4:ef:f9:85:43:87:9c:
                    1c:28:00:80:1b:2d:43:20:56:77:34:b7:c9:b3:db:
                    61:e1:ce:ac:2a:3d:26:b0:11:1d:87:5f:e5:ba:62:
                    6d:63:40:0d:16:41:b2:4e:b7:4c:42:66:b4:88:ab:
                    88:35:0b:bb:de:43:5b:6a:d3:4b:e0:d8:05:eb:cd:
                    2b:da:a7:f1:b5:20:25:df:0e:e7:22:52:6c:ca:10:
                    ee:24:8b:30:33:c3:92:90:20:b8:12:65:60:0b:1f:
                    5c:e1:f1:ff:b3:76:7a:83:e0:45:1e:e3:4d:27:44:
                    38:bf:e4:85:b1:00:1c:6e:60:d4:77:66:aa:21:19:
                    03:6c:b1:fe:a8:0f:b7:c2:c8:5d:d1:a7:8b:fe:f8:
                    2a:27:1c:13:ac:72:6d:f1:28:c6:d1:14:34:b5:51:
                    ef:c2:cc:ef:f8:2d:5e:0f:18:c3:ec:75:13:74:2b:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FE:8E:68:CD:7C:41:11:64:57:A1:11:9F:89:0A:0C:08:1B:AF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/78327566-45d7-3069-8b5f-975dbf2319b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a9:ce:05:53:b3:f8:57:a4:ea:bc:e1:89:53:d0:f6:fa:fb:
         cf:2d:aa:2d:da:31:59:1f:c6:79:68:93:c7:4d:5e:8f:a2:f7:
         be:5e:3e:34:0b:60:8b:19:66:a4:2b:fc:27:c5:c3:0e:a5:a5:
         42:d7:17:c9:4e:76:be:51:ab:19:e5:ef:87:24:be:83:5b:ec:
         0f:52:32:9e:ce:9a:44:a1:95:7a:bd:0a:42:9e:c8:a5:b5:39:
         34:1e:f1:20:72:34:58:19:cf:87:8f:aa:ba:59:25:39:db:0b:
         3b:24:5a:80:c4:e3:31:de:0e:17:74:ce:a4:52:1e:54:2b:36:
         0b:81:96:f5:c2:8e:b9:b5:0f:c9:b1:aa:52:bb:8f:56:41:34:
         f6:3d:f4:f4:7f:c5:80:d3:00:bc:12:77:3c:3d:7b:51:0b:41:
         34:c6:c4:8a:ea:c7:04:db:a9:ac:ae:3d:07:d6:f9:a3:d2:f9:
         79:9f:a7:1f:13:ed:9b:cf:e1:04:3c:39:95:81:f6:45:a7:cc:
         d9:17:9a:80:de:1c:1f:a7:b9:57:82:4f:1e:6d:96:be:7d:13:
         66:78:bd:4f:19:a4:86:16:4e:13:24:19:d2:2d:ea:35:36:2e:
         9e:ee:24:e5:7a:4c:6c:87:f5:c1:2e:5e:11:34:2f:eb:4a:e2:
         c8:08:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:29:13 2025 by rpki-client