Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa
File:                     31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa (raw, json)
Hash identifier:          1EtO1I/3I+C0kWy2D1F2fpuQczYUANtyYQthUul2w7g=
Subject key identifier:   12:17:DE:FF:8D:76:DA:9B:3F:E4:E0:19:02:40:F4:63:F4:29:80:DB
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858489340A63260C1C70967097A80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     5769
IP address blocks:        2607:fa4b::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a6:32:60:c1:c7:09:67:09:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=e2437089-916f-4588-b459-caa49584b742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:2f:b3:b6:8e:e2:35:b6:0d:14:e4:08:1c:
                    1c:db:b3:01:15:39:9d:a7:e6:f8:71:e3:4d:cb:c6:
                    d2:92:2e:c4:5e:b7:6e:16:2e:48:4b:b2:61:90:3f:
                    8d:39:39:3f:a7:7e:6b:fd:63:42:95:49:16:fe:ac:
                    19:f2:52:fc:ea:58:c8:f4:87:43:f5:bf:85:2c:85:
                    af:b5:56:c6:e7:81:47:5e:4a:8d:63:43:ea:ff:e3:
                    b4:71:08:58:e2:8e:c9:3c:78:5e:98:64:40:9d:7d:
                    63:4a:c4:05:36:a8:6e:b3:29:bd:f5:35:3b:d6:ec:
                    b5:be:b7:1e:4b:6a:70:2c:e3:b8:5b:0c:d6:4d:10:
                    b6:1e:7b:be:a3:c3:3e:58:42:42:96:2e:51:b0:5e:
                    5a:ee:31:8c:d1:94:9a:b6:18:cc:60:bd:d9:5d:ca:
                    4a:7f:9e:f6:96:bb:7f:49:f7:69:66:b3:34:7b:5c:
                    2f:55:c7:cd:37:cc:57:cd:ea:6b:f6:a1:17:ce:7d:
                    91:9e:9d:b0:e7:f8:ca:57:86:fe:8a:1c:52:d7:92:
                    a4:9c:75:bb:75:cb:b4:73:2f:60:0f:a7:44:78:1f:
                    58:cc:c3:e4:8b:fa:29:91:8c:a9:9e:d6:9b:8c:8c:
                    50:ee:cf:7a:68:ef:8f:e9:39:39:f3:f0:c1:ca:d0:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:17:DE:FF:8D:76:DA:9B:3F:E4:E0:19:02:40:F4:63:F4:29:80:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fe:29:1a:8e:89:b7:45:3c:d8:50:d4:ff:47:ea:e6:f2:52:
         f6:fd:12:6e:09:85:ef:12:73:93:49:24:59:39:4f:39:7a:ab:
         ea:67:7a:f6:2b:a2:c2:c6:60:b2:e9:aa:60:89:96:92:df:b9:
         fd:a8:e0:1e:53:0a:c6:fc:71:6d:07:2c:86:b8:18:f2:d8:55:
         e7:7e:89:8b:1d:05:53:f8:db:45:25:e8:66:02:07:e5:05:1e:
         40:37:3f:3e:95:e5:54:05:b0:02:97:d5:90:b9:e0:64:05:58:
         69:44:cb:b8:0f:22:13:58:16:fb:01:b9:43:81:26:00:b4:bf:
         88:72:f5:bc:1d:c1:be:53:02:e4:66:a4:b7:86:9a:76:20:cf:
         e4:79:7d:fc:96:0c:b9:98:77:0c:46:ab:1c:94:4f:41:12:33:
         88:c9:45:bc:bf:d7:ad:e3:87:9f:e9:9b:60:6c:b6:db:97:e3:
         29:69:11:d8:2a:28:af:7e:b9:09:c6:65:2e:67:d2:d1:5e:ee:
         12:0c:67:c3:9a:d0:e9:b0:08:55:be:e6:2e:c5:91:59:98:9b:
         1f:f5:0c:2f:a1:3d:19:a7:34:27:da:b3:62:34:a1:fa:88:cd:
         41:da:73:f9:ce:2f:1f:b5:9e:26:e4:89:59:d2:8c:47:7f:72:
         fc:35:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:18 2025 by rpki-client