Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa
File:                     866cb69c-61bb-348f-b43f-d2139e02ac3e.roa (raw, json)
Hash identifier:          B+CenbDM5+cFokkdWKj8g3tNjycYn7gFN600fMgyfts=
Subject key identifier:   B5:F7:88:F3:7A:42:0A:26:96:0F:3C:5F:6F:65:D5:CD:95:4C:0D:FA
Certificate issuer:       /CN=17ca7b45-83e1-4a1c-8713-317adea0e270
Certificate serial:       010D0C9F4328584894A5E48DC3EDA16EE626A400
Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        2607:b40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e4:8d:c3:ed:a1:6e:e6:26:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=9b989d0b-4e9b-4d66-b128-c25a7586432e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1b:d7:54:9f:b1:e3:4e:92:1d:cf:05:3f:aa:
                    15:4d:fe:4e:e8:c6:98:f8:81:6c:32:0e:24:69:48:
                    b5:2f:d0:64:b6:38:02:20:7d:d3:77:95:8a:a2:25:
                    16:66:da:87:ab:b2:e3:b6:bc:90:bd:8b:bd:fe:16:
                    49:52:8d:8f:72:1f:a6:1f:0e:d9:ab:92:7b:eb:d6:
                    0a:23:d4:f6:8a:83:d1:4a:04:48:df:4b:fc:75:23:
                    1a:d7:b7:64:66:01:08:86:66:4d:e7:6f:1c:e0:24:
                    67:49:39:fb:1a:03:e8:0c:64:5b:64:c2:2e:ac:b8:
                    a0:31:0e:7c:f4:97:69:54:d0:38:47:3a:54:06:d8:
                    77:52:7e:e4:40:67:24:e3:eb:da:00:4b:c4:77:ea:
                    30:ae:e4:d3:10:9b:f6:fc:68:d4:e7:21:fb:1e:df:
                    68:7e:11:2a:8c:be:fa:11:8f:71:4f:85:fc:6b:08:
                    04:1b:56:bb:93:08:81:5b:c4:a6:9e:a4:36:7f:61:
                    f6:bf:d0:c9:03:67:4c:7d:73:ca:fd:fb:0e:5c:ea:
                    39:24:48:cb:51:cb:eb:a1:47:4c:cf:ff:3e:e8:ab:
                    00:9d:ec:04:02:aa:7c:4c:05:70:52:c9:c4:cf:38:
                    2e:7f:5a:82:83:a5:a0:a0:56:ad:b6:9a:8d:ef:88:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:88:F3:7A:42:0A:26:96:0F:3C:5F:6F:65:D5:CD:95:4C:0D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:df:ba:ad:c3:00:69:37:e9:dc:df:02:22:c9:5a:bc:6a:16:
         6f:42:d1:80:5d:57:29:84:c3:d6:0a:15:9c:bc:03:95:92:3e:
         b2:bf:0a:bc:13:29:6a:dc:5f:f6:98:91:6b:b7:0f:84:94:ca:
         cb:ac:db:e1:b1:76:57:1d:64:5d:e5:03:e2:4e:ca:08:35:d8:
         67:9e:6d:2b:c0:4b:ba:f8:7b:a5:f5:79:c4:49:64:0e:03:d3:
         f1:fa:1e:af:77:92:03:db:3c:7a:a4:0d:1a:e9:5f:cb:db:99:
         a5:a7:09:b6:75:33:43:8f:2c:ed:5b:98:d2:af:fe:04:95:9e:
         5d:cf:d1:18:96:e3:5c:32:ff:ff:ae:38:29:55:a6:d9:25:65:
         e8:1f:4a:c1:21:a9:81:87:a0:46:95:dd:76:8a:a1:13:31:97:
         68:30:12:20:cf:51:18:e0:05:d4:92:9a:6f:bc:82:dc:11:a4:
         69:ce:fa:89:4e:10:d6:e4:43:e1:70:1f:48:4b:fd:3e:bc:f7:
         ca:1a:6f:ff:54:da:a9:4e:6c:de:db:8e:73:d3:8a:eb:79:ad:
         b3:d2:2d:30:17:23:45:1b:d4:61:98:5b:ed:38:d5:68:ee:13:
         2c:85:42:25:66:98:4c:8d:78:61:31:ec:83:48:76:19:02:ba:
         88:27:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:01 2025 by rpki-client