Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa
File:                     84eba332-7cf8-3813-9951-e44ab46403d4.roa (raw, json)
Hash identifier:          7MO9pdjdDMZh4R+sPLtvyekSQHwtnoMJP+c996jYHdg=
Subject key identifier:   24:1C:DD:26:05:F0:42:E2:3B:BF:B1:40:03:30:DF:25:3E:26:74:44
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285849E2252FC90023A45DD20BCE80
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2607:f368:804::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2f:c9:00:23:a4:5d:d2:0b:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=328c3b41-3ae4-4f46-9423-a746fde71787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:d0:29:2f:a0:2c:ab:ec:e2:9b:1c:81:4c:
                    ba:94:4e:36:8c:36:1a:be:af:c8:ba:a0:5a:f5:84:
                    8b:17:65:34:fa:89:2b:23:da:52:b4:10:c1:c3:2c:
                    8c:8c:4a:4f:5b:dc:39:ff:4c:d5:30:c1:68:68:55:
                    4d:b9:90:ef:07:fc:22:5b:3c:a5:05:17:08:2f:a2:
                    ea:12:1a:1c:e1:7f:04:9d:3c:1f:ec:50:20:79:d5:
                    8e:4a:e7:d5:af:2b:27:d4:74:db:b6:e5:46:e2:82:
                    e0:6b:a1:24:61:a4:11:ac:1f:da:5a:e8:45:98:1e:
                    5b:6a:dc:cb:bb:3c:4a:f8:36:17:e6:ba:97:e4:78:
                    a1:c7:ab:b3:26:77:06:a0:eb:fe:16:b8:a2:01:59:
                    f2:d2:31:af:76:62:9a:84:67:ae:fe:d2:63:23:88:
                    82:2b:f2:22:06:0b:d1:75:62:a1:26:b0:81:b9:84:
                    67:50:7b:1a:44:b0:79:e5:20:52:29:54:bc:0a:c6:
                    90:cb:22:80:ac:c9:9b:02:4e:ec:76:df:eb:c2:28:
                    34:44:35:0a:fa:7e:68:fd:05:9d:31:85:18:ca:88:
                    2b:f9:3d:be:09:a1:0b:5f:7e:ce:36:8d:00:7a:83:
                    59:04:64:cc:79:10:72:fb:ba:7f:35:04:6d:2c:72:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1C:DD:26:05:F0:42:E2:3B:BF:B1:40:03:30:DF:25:3E:26:74:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:f1:c4:13:df:90:78:06:fb:b5:df:34:5c:09:cc:f9:11:
         ce:78:e6:08:c6:5d:06:d2:c2:ff:d9:c1:af:22:6f:d2:48:16:
         ed:04:b4:51:2e:71:9d:85:df:31:da:87:0a:81:dc:fb:7a:12:
         30:b6:cd:89:84:c3:1c:07:dc:f9:f4:a4:0d:f1:35:62:1f:48:
         2c:96:33:5f:0c:94:ab:f6:cd:1f:b9:4f:b2:44:6b:ad:95:b3:
         c4:4c:de:5d:81:0f:ec:a5:a0:9a:46:40:06:a2:bd:28:28:41:
         fa:61:d8:44:32:58:5c:78:74:6c:d7:11:01:55:45:ad:1b:08:
         78:7c:d7:02:16:a8:3f:d8:bb:7a:6e:ad:96:49:f8:7d:28:a1:
         88:51:32:e4:9f:1c:fc:7d:6d:cb:cf:6f:1e:21:8c:16:57:bf:
         96:84:62:64:a9:2c:2f:64:b9:a8:46:07:7f:40:e1:18:be:a3:
         74:8b:67:54:5a:5f:cc:ac:d2:29:e4:de:68:d8:96:82:ee:d6:
         43:ea:93:c3:38:b3:cd:a1:38:f4:63:62:a7:76:97:de:f7:e7:
         04:55:9f:b5:10:9d:1c:d4:94:e9:81:10:8c:7c:72:ca:e7:4a:
         53:7b:06:4c:2f:ba:eb:4d:26:28:ea:a4:e9:26:27:d7:88:1a:
         57:57:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:45:44 2025 by rpki-client