Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b88bf4f-b0e6-3bf4-a47c-f88c51f15c09.roa
File:                     2b88bf4f-b0e6-3bf4-a47c-f88c51f15c09.roa (raw, json)
Hash identifier:          GKJZHXRaDNtPifRQpK/Ae81HBpx+DoQZ2C5PuMV2yHg=
Subject key identifier:   B6:FE:B9:99:E3:9C:13:2F:EA:E1:01:71:38:E6:A7:4D:3E:02:11:CC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A42E355EE9B3082D87AB8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b88bf4f-b0e6-3bf4-a47c-f88c51f15c09.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        2600:6000:feb3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:42:e3:55:ee:9b:30:82:d8:7a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=eb1b107d-0050-478e-b0a2-95e2333708f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:6d:45:78:54:38:7e:a6:9b:4a:9a:46:35:
                    fc:f8:a2:48:2c:34:4d:73:d5:c5:f5:29:05:db:8a:
                    46:2f:b4:76:77:b7:33:30:8c:be:63:0f:14:fb:16:
                    23:48:a8:30:da:aa:14:d8:aa:b7:eb:3b:61:d5:2b:
                    c8:fb:d5:f8:8d:73:78:fe:44:37:cc:b7:b5:25:a3:
                    fa:54:4d:5b:07:19:2e:1f:45:b8:fa:2f:39:da:e3:
                    56:97:d8:27:75:b9:8c:fc:f9:88:c3:7e:02:2a:7c:
                    b2:bf:89:c9:b7:d7:16:7c:28:d1:a5:fe:1e:f3:52:
                    6a:d8:c7:02:c9:fd:35:00:2e:da:c7:b7:d9:ab:3f:
                    0d:57:eb:75:84:e4:76:7d:46:a6:20:09:60:d2:11:
                    70:6a:ff:25:3a:49:4e:dc:eb:ed:fa:9e:f9:9a:06:
                    e3:cb:2f:2b:83:41:1a:d2:7d:bf:d2:12:11:35:b6:
                    bd:99:f6:8b:c2:71:ec:e6:de:37:7c:a9:ac:a2:a4:
                    ce:aa:2c:85:1f:56:5d:ac:9f:6c:32:8b:bc:f9:80:
                    05:ae:5a:81:52:06:bc:46:f8:4b:b7:6e:43:3f:5b:
                    ab:76:82:86:39:2c:99:72:c6:72:4a:3f:ff:85:29:
                    6b:f1:d6:d9:85:b9:a0:df:01:74:de:05:c5:6b:d0:
                    b0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:B9:99:E3:9C:13:2F:EA:E1:01:71:38:E6:A7:4D:3E:02:11:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b88bf4f-b0e6-3bf4-a47c-f88c51f15c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:feb3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:1b:d5:69:f2:bf:d0:27:7a:2f:93:7d:74:ea:c4:ce:71:
         7b:3d:82:8d:fb:e1:2e:14:7b:58:86:a8:ec:0a:dc:80:81:67:
         7f:e6:6b:50:b4:c6:7b:f8:3d:33:75:2e:b1:e7:2f:32:96:68:
         5d:90:c5:c9:34:15:55:e7:27:22:22:6f:ef:1c:61:59:0f:75:
         48:82:26:7a:ae:41:8b:5f:4a:c1:6c:dc:30:c7:23:c6:28:f4:
         ab:c5:ee:5c:0d:60:66:6b:ef:c6:2b:5c:2f:b7:78:2e:d6:45:
         c0:62:cf:ac:b4:a9:75:33:d7:e6:7f:e6:b8:0b:09:00:5c:38:
         3c:cf:c6:1d:05:7c:c9:68:4c:41:4a:f7:e2:a6:09:01:a0:39:
         4c:cf:0a:f8:1e:7b:d1:ab:91:bd:6c:fd:1d:c7:fd:19:d0:54:
         19:c3:4c:62:f2:23:ac:3e:76:97:49:0b:e9:01:6f:75:69:00:
         8c:5e:cf:3c:1e:d5:a4:df:ee:55:6a:23:59:59:69:72:2e:f5:
         75:e4:97:38:13:41:69:e4:6f:7b:c3:a5:be:b6:bf:38:5d:81:
         a3:ed:ea:9c:e8:a1:51:ea:0a:4d:d1:4f:bd:7a:4c:c7:30:08:
         39:76:9e:ac:b1:e5:f6:b6:c3:6a:af:6c:9c:6a:f3:30:3f:45:
         e1:a2:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:47:51 2025 by rpki-client