Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa
File:                     e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa (raw, json)
Hash identifier:          kamR5OWsxwgrLI4U0jn5oaYcWnKqnW94WwESCcfIB0I=
Subject key identifier:   5A:DC:BE:72:A0:67:58:5F:3C:CC:1D:06:E4:7A:A3:24:D6:09:5D:AE
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F43285849CE9A6CA885CA4C8E3AD7D2C0
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     139358
IP address blocks:        2602:f96c:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:6c:a8:85:ca:4c:8e:3a:d7:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=7be01f47-b8e2-49eb-b522-5c4b47b8c426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:48:36:06:89:2c:f9:a8:8d:23:05:c3:cb:
                    96:3f:7a:f6:e7:55:6a:71:0b:c3:93:65:fd:d6:6a:
                    09:37:1f:6b:50:b1:ab:b6:da:46:98:4a:69:f5:5c:
                    29:a6:c8:91:7c:f6:d1:87:f7:51:0a:16:b1:a3:0e:
                    bb:35:ea:48:cc:c2:5a:f4:2d:dd:1c:96:46:2b:fd:
                    ae:58:d7:4e:2e:9d:70:7f:79:69:13:30:0d:82:00:
                    6d:fd:0a:27:fa:cd:6b:a6:db:76:2f:e1:83:97:24:
                    5f:f1:8c:e4:5f:23:ea:0e:c1:e7:89:f8:cf:31:cb:
                    10:ac:d6:12:55:cf:74:b2:b3:3e:80:2a:79:a4:94:
                    41:93:95:2c:57:b6:7d:aa:05:98:2e:5b:c1:35:9f:
                    2b:c0:54:3e:4d:cc:48:b9:dd:41:41:83:f0:ac:1e:
                    72:4b:1c:5d:a1:3c:57:18:bd:64:30:ae:9b:95:45:
                    b6:af:c0:e2:11:36:96:6c:d5:46:d0:9d:03:85:cc:
                    1e:bc:ac:e0:0c:66:93:10:f8:59:af:a1:de:03:8c:
                    c9:7b:f5:b3:50:35:f4:4c:b7:1d:b5:a1:1d:c6:9e:
                    ae:20:fb:a1:fa:c8:d8:c3:5b:d2:6d:e0:ba:ee:1e:
                    1b:6e:36:e1:57:8f:52:d1:a4:71:f1:18:dc:c0:dc:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DC:BE:72:A0:67:58:5F:3C:CC:1D:06:E4:7A:A3:24:D6:09:5D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/e9e2cb5b-f93c-3dcd-9755-c45922a62532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:48:28:04:b9:11:89:dc:ad:7e:4a:aa:51:6b:cb:f3:62:
         06:b2:94:0f:03:bd:9c:4f:ae:c3:33:b4:20:b9:ed:1a:d7:13:
         90:d0:c4:45:9b:d1:4a:37:b9:48:ac:0c:ff:e9:3d:91:7b:78:
         c2:ae:15:33:a4:10:55:e6:98:e5:62:75:ae:a5:10:2a:d5:5e:
         08:4c:ae:09:10:20:1f:7c:4d:46:57:3c:76:fc:4e:01:ab:0e:
         64:4e:17:32:a4:5e:0e:22:75:e2:80:41:03:d7:9f:ac:6d:3e:
         e2:d8:fa:7c:2f:d4:df:64:40:83:86:0f:4e:1c:1d:22:70:2b:
         f0:83:09:80:3b:ba:be:fe:e6:11:e7:60:8c:80:4d:6c:25:4d:
         5f:03:61:da:06:fb:66:63:d9:53:eb:7c:81:e5:c9:4c:0d:52:
         0e:83:58:1f:bf:4a:df:3c:96:ca:ba:b7:21:b1:2a:d5:98:03:
         8c:55:92:a6:f1:7a:d3:26:65:2e:19:cf:0c:9d:76:30:f8:d6:
         e1:33:7d:d9:c5:ba:35:0a:e7:29:a3:ea:7b:fa:ac:4e:ca:fc:
         5d:58:57:09:52:1e:91:f5:ce:e9:7a:27:13:c7:d0:07:7c:0c:
         a3:8a:62:8e:e2:f9:2b:12:8a:65:a9:60:56:69:04:63:b4:a8:
         d2:7b:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:30:59 2025 by rpki-client