Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ebb6e88d-12a3-3e18-8788-838361c8b82c.roa
File:                     ebb6e88d-12a3-3e18-8788-838361c8b82c.roa (raw, json)
Hash identifier:          mgUb0z/yvvkC6O41hu5u8owft5JzMawZZY7gt2Cf3xg=
Subject key identifier:   60:11:61:EA:E4:A5:23:69:7C:A3:E4:7A:06:24:71:E7:05:E6:3C:FE
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849B149EDF02541F74A432C2880
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ebb6e88d-12a3-3e18-8788-838361c8b82c.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     8987
IP address blocks:        2620:123:20f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ed:f0:25:41:f7:4a:43:2c:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=7c1940af-4c07-45b9-8828-a6488ff9da19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:ca:54:6f:4d:a3:eb:c3:19:09:cc:bf:5d:
                    ff:0b:03:b8:e1:6e:8d:ea:17:96:ec:d0:0b:ec:c1:
                    64:c7:6f:c1:f2:de:2b:9c:52:f9:66:61:a8:69:ff:
                    1d:97:52:9d:1f:2b:69:15:7e:8e:41:db:26:e2:c0:
                    6c:dc:44:a6:f5:ab:63:13:48:8b:ad:b7:81:d2:ff:
                    b4:73:e8:e2:62:df:d6:59:e8:b5:59:e0:4e:80:c5:
                    70:b1:2d:23:85:e9:f3:65:fb:42:64:6b:32:1f:34:
                    bc:1c:2b:cf:d7:9b:89:06:e9:e7:4e:80:cb:96:f9:
                    14:6a:4e:86:ec:da:38:26:e0:18:4c:0c:33:c2:be:
                    b3:56:01:d4:80:72:11:4e:95:a8:87:40:74:85:58:
                    94:27:b9:83:81:6d:f1:6d:c5:e7:28:65:cb:df:2e:
                    d7:c1:ce:15:5b:11:46:bf:73:7c:69:32:72:ac:75:
                    e3:be:95:b7:aa:83:07:8b:4b:5a:2a:ed:fa:86:3b:
                    39:b3:7b:8c:70:4d:f5:1c:f2:e2:8c:df:62:de:a0:
                    97:1a:6d:68:a4:61:4e:1d:35:b5:08:94:cc:1c:14:
                    2c:ff:ad:a2:36:46:3d:fc:18:d3:38:ba:9e:54:f5:
                    19:66:3f:d2:20:fb:2f:26:a1:82:b1:4c:42:de:44:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:11:61:EA:E4:A5:23:69:7C:A3:E4:7A:06:24:71:E7:05:E6:3C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ebb6e88d-12a3-3e18-8788-838361c8b82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:ed:91:89:e6:6f:6a:bf:b4:bf:6b:f0:4d:6a:c3:5d:c6:
         e8:f0:97:eb:93:7a:c1:d9:3e:c5:df:f7:53:15:23:e7:ce:68:
         84:05:a8:3b:98:1f:1a:a0:e0:a8:a7:60:98:2d:5c:e4:1e:1d:
         79:03:21:ee:da:54:62:ac:4d:bd:f1:2d:46:5b:5f:de:c4:e5:
         53:35:b7:c8:a5:da:be:a7:a9:49:45:a2:d0:7a:86:d6:83:1a:
         29:f6:5c:78:fd:d0:54:b7:23:d2:b5:f1:08:31:de:49:3c:ff:
         36:f9:0f:09:56:ce:ba:8d:2d:9f:0e:69:b8:e7:7c:0b:3d:84:
         17:ee:ec:94:1b:e2:0a:52:4a:4c:49:60:f0:cd:6c:9a:92:77:
         5a:df:02:26:2e:25:af:80:6e:5a:02:8b:6f:7e:9b:c8:b3:e2:
         87:2a:ef:4d:9a:0c:11:7b:0e:1c:98:07:60:83:ed:68:6d:16:
         84:8f:1c:8b:b5:26:b7:98:98:1e:f6:59:e4:a2:8d:37:d6:95:
         0d:9c:47:3b:17:75:7b:5d:59:8b:2a:f4:b6:b8:2b:2a:41:f9:
         b7:da:26:a2:42:3f:f8:60:89:c6:bd:dd:cf:af:44:40:9a:e7:
         77:7c:f0:16:82:c9:57:ee:47:ac:70:0b:a0:7b:fb:94:73:d1:
         3b:26:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:39:16 2025 by rpki-client