Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29da78c4-5fb2-3207-9694-5e48a6246daf.roa
File:                     29da78c4-5fb2-3207-9694-5e48a6246daf.roa (raw, json)
Hash identifier:          NW8/5/HrOETSb0UuxHzlUp9cAyPQtEAKSA61IGUyt2M=
Subject key identifier:   8E:5A:0F:17:22:87:50:58:F7:6A:51:8B:C2:3E:A6:FC:39:0A:35:ED
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A416F819ED649DD130B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29da78c4-5fb2-3207-9694-5e48a6246daf.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        2605:ed00:4c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:41:6f:81:9e:d6:49:dd:13:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9e96b6e8-a7db-48ad-90bc-49a3b7b64768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:2f:7a:56:e1:f9:f9:7b:48:9b:37:c1:fe:
                    0c:fb:05:16:03:19:9f:97:32:c7:39:2e:24:0a:a8:
                    f2:3e:62:d1:46:e0:09:d1:3c:d3:53:a3:2f:07:73:
                    be:5e:f8:b4:ff:0d:f2:19:c1:0d:5d:f3:c4:8d:5b:
                    4a:da:8d:23:f4:30:fb:c8:34:e7:aa:7d:50:08:f6:
                    dc:89:67:d7:3e:7f:b2:e3:af:d1:8b:a4:ba:84:ff:
                    31:1b:64:f8:fe:16:2d:22:e9:98:93:35:0c:87:eb:
                    74:3b:dc:49:60:f7:20:71:bd:29:e1:32:64:a9:c1:
                    34:65:01:83:31:ab:24:85:c4:c6:ba:4a:71:0e:9c:
                    b0:2d:94:ff:1e:6a:f0:1d:58:a3:bb:76:ec:ca:b6:
                    6e:09:00:76:a4:ff:98:a5:73:0a:b1:de:a9:1a:4e:
                    e3:ca:03:68:65:95:dc:ed:85:88:f2:ce:39:27:29:
                    17:a3:65:7c:36:8f:28:2c:dc:5f:d5:6f:c9:66:58:
                    fd:8b:54:39:a5:ae:cf:5f:e9:26:aa:85:58:1c:17:
                    df:e8:ac:d7:40:d6:e6:b9:46:9f:5b:4f:f0:62:cb:
                    80:c9:52:d4:a9:30:bf:ca:46:15:bf:c6:f3:26:be:
                    08:e4:df:f8:2f:72:8b:00:1e:0f:2a:f5:b5:67:70:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5A:0F:17:22:87:50:58:F7:6A:51:8B:C2:3E:A6:FC:39:0A:35:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29da78c4-5fb2-3207-9694-5e48a6246daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed00:4c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:45:12:8a:6b:71:2c:15:88:71:72:96:8b:a5:85:b5:9c:42:
         ad:27:b2:b6:0f:a2:07:aa:e5:64:45:fa:2b:e4:f3:78:31:25:
         38:3f:d0:5e:da:1e:73:95:26:1e:55:dc:83:44:07:75:1a:9e:
         d4:63:62:61:a1:68:d7:91:c5:48:07:97:dd:0a:a9:7e:5a:65:
         fb:bd:63:89:00:3e:f6:d6:eb:ed:9c:68:27:db:b7:52:31:22:
         fa:bc:0c:56:de:c2:ac:1e:94:20:05:7f:db:55:3e:ee:7a:0b:
         fe:be:db:84:90:71:ee:af:cb:e4:f8:cd:d5:e7:46:05:7d:06:
         83:f2:45:40:72:37:23:b6:78:24:a1:3c:01:7f:97:b8:d6:e1:
         83:d6:4d:53:45:3a:9f:fb:20:96:f7:67:99:bf:0a:17:de:87:
         34:00:df:fc:e4:36:d5:50:61:74:c0:b6:a8:3f:c7:fd:1f:63:
         a9:2a:1d:4c:5f:ad:31:3a:22:f3:ad:40:10:b2:17:50:61:02:
         81:1a:7c:d9:7b:a2:2f:ce:31:af:0a:a2:26:1b:d5:36:f3:11:
         b2:4a:5e:6d:a6:5e:5c:9a:e9:cc:75:44:51:39:a4:ec:64:05:
         36:fb:ea:9a:30:82:a5:40:f7:d4:47:50:c1:51:b0:a6:14:7d:
         b0:e9:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:38:44 2025 by rpki-client