Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa
File:                     e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa (raw, json)
Hash identifier:          KveaHQjc9VYcabXqtdX9CcLOY2ONgeaHmM0QDWG5quw=
Subject key identifier:   F3:B1:98:EA:29:EF:B7:D6:D4:F7:3E:5F:71:5E:0B:72:88:3A:B9:57
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F43285849A1EF7495FE680B67B5B61180
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     399728
IP address blocks:        2620:98:e00a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:74:95:fe:68:0b:67:b5:b6:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=c5e8ac24-c191-459a-88fa-264818f18c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:35:bc:82:f6:e4:20:4a:37:7c:f0:60:17:
                    56:c6:2a:29:45:f1:21:84:47:98:a4:48:f7:99:39:
                    81:42:5d:55:d0:6e:76:7e:84:68:23:53:f4:d2:d3:
                    3f:10:8c:e2:77:b0:2b:54:0d:c4:cb:06:fc:86:f7:
                    63:87:c5:c4:4b:3e:d5:94:03:3b:bc:00:77:88:8f:
                    e2:e9:db:b7:b0:2f:f8:81:21:22:d2:40:50:2c:eb:
                    44:2d:a1:bc:dd:2e:6b:78:17:f7:5e:d0:83:ed:eb:
                    3a:ba:da:22:00:47:15:3b:11:34:4a:93:52:66:72:
                    6e:87:65:41:40:87:b4:24:db:81:14:27:5c:4b:11:
                    ef:e5:b9:e5:a1:25:30:69:21:4f:3b:c3:29:65:20:
                    1c:cb:ac:fd:10:d1:1a:f4:66:3e:ba:45:00:34:a8:
                    1f:49:80:2f:31:cd:a2:54:0b:98:65:0a:7b:fa:9b:
                    39:7b:7c:ef:a7:10:09:03:d5:c7:bb:ef:6d:e7:15:
                    6f:c8:8d:9f:9d:7a:ac:34:b9:94:30:28:89:e3:57:
                    44:87:93:df:f8:10:fb:1b:66:9c:a4:33:7a:2a:4d:
                    80:8a:b2:cc:e2:e1:5f:05:d1:85:77:0c:5e:6b:ff:
                    78:70:8b:59:ef:75:29:7f:82:e7:47:c8:5e:4a:46:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B1:98:EA:29:EF:B7:D6:D4:F7:3E:5F:71:5E:0B:72:88:3A:B9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:bd:a9:93:15:20:b2:24:f2:71:a2:dd:f0:f9:ee:88:07:
         1d:93:dc:b0:7e:7c:f4:f3:59:91:05:a8:6a:ce:9e:2c:26:9f:
         0a:e0:0a:06:d1:4d:36:e7:a9:61:30:5b:e9:a1:67:06:f4:b4:
         44:c1:4b:b8:5a:4f:b5:04:f5:b8:ca:fe:17:cc:2f:8f:44:a5:
         68:e8:ab:6b:b0:45:75:3b:ee:41:bb:15:22:26:80:14:e8:cf:
         5d:25:63:af:f5:81:4e:ad:56:bc:77:2f:35:82:97:e5:45:62:
         9b:bf:f7:2e:19:d7:42:3c:09:6c:08:75:d4:91:9e:91:b4:30:
         87:83:ca:ac:fb:d5:6b:f0:48:87:6e:45:75:af:f4:24:1d:44:
         4d:3a:5c:85:0a:ea:5e:fb:19:f2:b3:9d:57:66:a8:4c:65:66:
         a7:6f:0a:86:82:e7:b5:56:e6:e9:0d:41:c3:31:ea:b8:ab:1b:
         35:71:64:6d:db:1d:36:ee:48:a3:59:56:95:21:f1:df:be:d7:
         bf:fe:e4:3d:e5:6f:5b:9c:83:31:bf:e6:0c:33:65:75:52:eb:
         c6:d8:ad:d9:43:5e:77:5d:7a:b2:19:8b:eb:32:57:24:5c:f3:
         59:29:8d:d3:5e:9b:a6:20:52:29:6c:50:ac:36:d7:82:b8:9c:
         60:d1:4d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:15:39 2025 by rpki-client