Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/4f094344-4f15-30f3-9ae0-25e977e65807.roa
File:                     4f094344-4f15-30f3-9ae0-25e977e65807.roa (raw, json)
Hash identifier:          zSy4NNuUSrlI/tpU1aWLl1gTHrjB1Q3IMSWTIrSszvU=
Subject key identifier:   E1:E7:DB:DB:B8:7E:FF:9C:A7:47:A1:F3:D8:38:1D:FB:4B:39:B3:97
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F432858488815E57FD400A10BBD28A360
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/4f094344-4f15-30f3-9ae0-25e977e65807.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     59598
IP address blocks:        2602:2a4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:e5:7f:d4:00:a1:0b:bd:28:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=d2b6ebfe-36af-4cd6-a898-5c323712e637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:91:e5:04:b4:7c:3b:c9:ec:c5:c8:c7:84:
                    12:34:28:0a:ee:21:97:48:ea:cb:06:6e:93:ff:f8:
                    29:ac:fd:22:23:b9:1b:db:3f:b2:f1:8c:51:1b:d6:
                    7e:96:22:b7:dc:56:d0:90:d7:95:66:1d:06:7b:6a:
                    02:c6:59:41:c1:ae:26:f6:1e:db:02:a0:27:4d:61:
                    f7:4e:c8:ca:81:37:a8:8c:2a:75:fc:00:b7:37:e0:
                    a7:83:0e:be:02:a1:46:23:ce:b3:c7:93:71:73:69:
                    c8:1f:b9:1b:51:b1:52:b5:09:24:05:c4:80:8c:82:
                    50:15:52:52:6f:f2:14:1d:85:fe:ae:19:ea:bc:63:
                    99:bf:aa:75:70:21:ff:4f:c4:1a:b3:b8:cc:06:8d:
                    f5:2c:b8:26:b7:2e:e4:ea:90:26:19:d2:df:7b:41:
                    24:18:b4:bd:0e:9d:ad:c1:27:d9:80:6c:38:ed:6f:
                    aa:fc:b3:ab:1b:04:e4:17:b6:e0:2c:6a:00:25:e8:
                    04:a9:42:77:78:94:e6:cf:21:29:f9:b0:b4:ea:2e:
                    c8:59:65:06:28:30:b6:95:fc:93:e8:7d:06:bf:de:
                    39:d5:69:d8:38:c0:44:db:71:7a:91:19:83:2c:c8:
                    10:ee:3e:f0:52:d7:74:a1:f5:a8:db:d3:a3:52:d7:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E7:DB:DB:B8:7E:FF:9C:A7:47:A1:F3:D8:38:1D:FB:4B:39:B3:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/4f094344-4f15-30f3-9ae0-25e977e65807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:0f:55:ee:5b:f3:e7:e5:3a:ca:8c:87:21:76:d9:c6:10:
         c4:bc:e9:68:f3:f1:aa:e5:65:89:75:ba:80:b0:33:b0:18:22:
         fa:4f:f6:80:3a:99:6e:c0:20:c6:8c:0d:15:f6:07:00:6a:85:
         ed:a4:1a:ac:96:7d:b0:36:00:26:65:ee:1a:af:44:f6:e6:17:
         cd:1e:ca:6a:ee:1e:b3:35:22:54:1b:0c:ad:98:63:f2:25:bf:
         31:cd:6e:50:47:2f:69:46:f2:d7:9d:77:09:fd:48:f0:f6:d8:
         35:8d:41:44:a9:28:88:d4:ff:ca:ab:2d:02:8b:53:aa:37:cb:
         c1:52:6f:57:5e:f2:c0:c6:fc:61:15:45:a6:d1:70:33:e3:2f:
         d0:04:12:22:e0:42:8c:b9:96:ce:dc:20:8d:4d:53:3d:7d:cd:
         54:b4:32:8b:dc:07:3a:44:38:d1:db:5d:45:ce:26:b3:ec:67:
         58:f6:b4:3d:31:cf:9e:46:15:cf:fc:26:b0:0c:b0:2a:87:01:
         b2:40:eb:ac:f7:5d:c9:63:77:85:44:23:67:29:a9:5c:b2:a9:
         45:38:37:d3:d2:99:4a:3a:2a:ec:5d:77:ac:df:d6:8f:a6:9b:
         84:6b:2b:d9:c8:89:ca:f7:de:51:51:70:e4:6d:ea:94:a9:e0:
         86:46:4a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:58 2025 by rpki-client