Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/87b78558-0556-34cc-935b-d45d2aba325e.roa
File:                     87b78558-0556-34cc-935b-d45d2aba325e.roa (raw, json)
Hash identifier:          eQ2+b41zXKOTbhN0D9ZmjSXxH7PIbA9ByrbRxF7UJCs=
Subject key identifier:   46:A5:39:B0:B5:B0:04:B7:2C:F3:24:48:68:31:7F:B4:4F:B9:51:FA
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F43285849BC74AFDC032E757496E0EF00
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/87b78558-0556-34cc-935b-d45d2aba325e.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     393457
IP address blocks:        2605:8780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:af:dc:03:2e:75:74:96:e0:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=edff7baf-ee9d-49c0-8f13-0bec06e7b871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:67:1b:0b:4e:a6:4d:24:d6:20:53:91:bf:
                    e5:bf:70:12:fb:ba:15:01:27:02:9b:05:e5:90:e2:
                    dd:36:fa:6a:ab:aa:b7:d8:96:dd:3f:32:b8:43:33:
                    e1:d6:5c:90:32:90:98:00:47:50:56:5a:f8:82:37:
                    f8:98:1e:66:69:70:00:a9:03:40:1f:29:c4:7c:62:
                    43:31:46:e8:3f:f1:26:34:39:6b:45:35:cd:b3:8f:
                    ab:c9:55:44:67:6c:c3:cd:3e:67:c0:6a:e2:3a:74:
                    6a:b7:ed:28:57:5c:91:69:78:f3:e1:2e:b7:fe:b7:
                    ca:c1:d6:8c:46:5a:0a:8f:13:bd:cc:1d:1a:0a:47:
                    e2:80:1d:04:1e:96:cc:f0:c6:d2:ad:81:c7:73:1c:
                    73:80:85:0f:5e:49:ce:25:a0:36:92:e1:02:7a:5d:
                    94:63:04:cd:f4:4b:7e:dd:57:e4:1b:61:68:ef:90:
                    3b:89:48:26:ef:e4:d7:03:70:91:ab:b5:0e:3b:50:
                    92:ef:e1:39:73:96:8f:63:3a:60:0b:b9:b9:08:1c:
                    9b:5e:ea:34:b6:37:6a:22:bd:8d:df:0a:e6:ee:fa:
                    5c:56:90:da:ec:72:e3:69:36:52:bf:35:15:79:6e:
                    73:4e:ce:e4:9b:ef:d2:6d:b3:36:ed:9b:8c:7b:a4:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:39:B0:B5:B0:04:B7:2C:F3:24:48:68:31:7F:B4:4F:B9:51:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/87b78558-0556-34cc-935b-d45d2aba325e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ac:49:a6:4f:4b:69:d3:ce:74:f1:8f:fb:b6:e4:e3:bc:e8:
         22:fa:7c:3f:fb:39:92:3d:8a:0e:5e:72:9a:82:68:06:6e:fb:
         ec:6e:c1:46:79:3b:97:7c:36:43:5e:79:b2:27:2a:a5:2f:27:
         f9:e7:01:c2:90:7f:12:45:b3:28:5b:59:d7:f6:16:f9:34:b6:
         b5:e9:12:76:d8:34:18:60:c0:00:74:a3:c7:d8:db:23:30:48:
         fd:d4:91:13:af:be:b8:d9:79:c8:d1:5e:96:4e:48:87:35:3c:
         89:2e:a4:f0:1b:e4:5e:13:53:d7:48:d5:b5:2d:00:39:99:c8:
         15:4b:27:95:8e:5c:31:52:04:61:70:6a:a3:50:67:57:d0:42:
         1d:f4:8d:a7:d5:72:c6:b7:ac:31:3d:b2:c0:10:a4:5c:c1:7c:
         32:be:53:c4:01:69:7a:d4:61:04:cc:23:d7:b1:24:63:d3:18:
         ba:14:ef:d2:ef:c6:cd:9f:e2:4d:60:c7:d9:d8:49:01:a1:8b:
         24:5f:b4:df:8b:47:30:17:70:e8:3d:9f:09:77:fc:f6:7d:39:
         dd:3d:b0:07:cd:49:3f:f3:ac:ef:bb:06:03:0a:b6:0d:e3:1d:
         80:f7:9a:0e:87:f1:00:4b:f6:24:82:6a:9c:79:e2:28:88:cc:
         4b:b7:fa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:55:21 2025 by rpki-client