Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/211aac00-3bd6-3945-8742-da1b83483cb1.roa
File:                     211aac00-3bd6-3945-8742-da1b83483cb1.roa (raw, json)
Hash identifier:          vZ/ju3ujxZO7JYjVOmiXwwvJ98JbFDveKZ42eGELnL0=
Subject key identifier:   0A:C3:41:B5:AB:78:55:6A:6F:42:63:6B:45:B8:E3:E6:0D:C9:C2:3C
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F43285847FFC952318785788A13FF4068
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/211aac00-3bd6-3945-8742-da1b83483cb1.roa
Signing time:             Mon 25 Nov 2024 18:16:43 +0000
ROA not before:           Mon 25 Nov 2024 18:16:43 +0000
ROA not after:            Sun 23 Feb 2025 18:16:43 +0000
asID:                     8987
IP address blocks:        2601:9200:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:c9:52:31:87:85:78:8a:13:ff:40:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Nov 25 18:16:43 2024 GMT
            Not After : Feb 23 18:16:43 2025 GMT
        Subject: CN=f1933860-6310-4bad-829a-479ed43e7158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:16:6f:6a:0e:6e:8a:8a:aa:3a:12:7d:4f:
                    89:0d:02:60:eb:67:bd:07:4d:2f:27:6c:6a:95:cc:
                    7e:b1:14:bf:8f:e0:5c:4e:15:33:c5:97:4b:d8:eb:
                    e3:13:e0:24:f7:65:15:c2:53:f7:c1:0e:61:e6:71:
                    fe:52:2e:b1:f5:26:31:e6:ec:52:7b:d5:61:fa:85:
                    6a:83:9d:61:71:1b:6e:10:25:b9:c4:ef:c2:40:5a:
                    13:0b:28:58:7f:42:9d:eb:c0:e2:ef:67:d5:6a:86:
                    8f:80:7a:b8:d0:66:da:91:d6:41:85:07:d0:61:c2:
                    a3:c3:e0:26:2a:33:b2:d9:53:44:9e:a8:94:fc:8f:
                    bb:38:ff:37:ac:40:5b:4b:83:37:9a:e5:c7:d2:de:
                    da:e8:a6:9f:1c:e7:75:be:78:9b:f8:77:6a:04:33:
                    a6:29:9d:68:ce:02:a7:c4:f2:df:e6:ae:2c:13:e2:
                    16:55:0e:06:b3:f5:8c:20:69:1e:f3:0a:1e:54:ab:
                    76:ed:38:43:03:ec:77:e9:2a:18:2f:ec:ab:c2:28:
                    06:6d:4c:63:59:50:48:17:8a:d1:1c:3b:d7:b0:33:
                    2c:bb:6d:7f:e5:98:16:60:f4:d1:c1:4d:d0:e9:85:
                    35:18:cb:3f:e1:c7:7d:a9:3a:ca:5b:6c:18:a2:90:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C3:41:B5:AB:78:55:6A:6F:42:63:6B:45:B8:E3:E6:0D:C9:C2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/211aac00-3bd6-3945-8742-da1b83483cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:c9:50:38:8b:96:fd:e1:e5:b6:cc:bc:44:11:4a:20:67:
         bf:00:6a:b8:cb:e3:b0:c1:c6:d0:87:8c:ce:f4:a8:fa:a0:44:
         b0:c4:93:9f:2d:95:8b:33:3d:47:6e:69:14:38:82:f8:b4:1f:
         a0:52:5c:d7:d9:05:26:f1:f8:3c:7a:11:c0:e8:bc:1e:ca:f8:
         80:8f:25:7f:30:d4:25:c5:31:e4:aa:ae:18:39:c1:47:ac:42:
         12:b0:43:63:00:0a:85:95:21:6e:2e:62:0b:d7:10:b4:71:97:
         9a:c3:2c:e9:d2:1d:dd:e3:a3:ae:66:ba:79:d3:eb:e4:26:55:
         1a:ff:1e:2e:f5:58:cf:39:25:1b:4a:2c:4b:0b:b2:40:e2:ed:
         99:92:42:ce:85:cc:a8:69:9f:5c:9c:a5:c7:4b:2d:eb:0f:cc:
         e0:d8:91:05:15:12:22:49:24:a9:cd:78:93:72:fa:cd:c6:20:
         f2:a9:8d:e5:26:9d:42:3a:de:7f:87:e7:46:0f:4b:b7:7d:de:
         f0:87:a8:61:8e:25:fd:e7:76:41:e8:f2:0e:af:85:d7:be:b5:
         a8:db:e6:da:e3:74:62:31:ae:cb:14:df:65:6a:e7:7f:cb:b0:
         7b:47:38:3d:d1:bf:a3:7c:b1:0e:d6:31:8b:1b:d7:55:53:3c:
         32:e4:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:56:59 2025 by rpki-client