Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/6287725d-70ea-33ca-9beb-ccbf0e213993.roa
File:                     6287725d-70ea-33ca-9beb-ccbf0e213993.roa (raw, json)
Hash identifier:          WBVl2w54f5d9PG/fgczpUrdOhEDFwbOBJJtzWXDzpnY=
Subject key identifier:   47:49:8C:96:5D:29:A2:32:D3:D8:EA:9A:F8:67:E7:BB:8B:56:7A:C4
Certificate issuer:       /CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
Certificate serial:       010D0C9F4328584871C072B5AFB799B793578880
Authority key identifier: FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/6287725d-70ea-33ca-9beb-ccbf0e213993.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2602:fb33::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:72:b5:af:b7:99:b7:93:57:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=0d0f267e-564f-47ff-9189-4944531a29f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:93:f7:3d:2d:9f:c5:85:de:1c:ba:4e:c7:
                    16:c4:4a:96:b3:c4:a2:3f:b1:41:c6:52:b9:3f:ae:
                    55:cb:5e:1b:15:ce:77:0d:0c:0e:c0:29:f2:02:5a:
                    27:c4:f0:93:0b:32:9a:84:05:e9:59:c3:07:c7:2d:
                    d1:f2:9d:b5:3e:b7:7f:57:1d:12:2a:e6:ff:ae:05:
                    83:c2:4e:b9:3a:90:b9:04:2b:d1:1f:1c:8d:3d:ce:
                    7c:96:5d:10:ee:f8:39:6b:2f:c4:57:11:60:42:88:
                    0f:e1:a9:23:48:b4:24:e9:6f:b6:1c:d9:bd:d0:1e:
                    88:4e:fc:26:e7:28:21:9d:9c:d6:79:da:63:8f:33:
                    bd:fb:27:57:a2:0f:66:14:5b:0b:9b:17:76:cb:eb:
                    ff:ca:72:3c:04:35:a8:10:d6:dd:4f:06:ea:a4:61:
                    dc:66:0e:9d:75:3d:28:ae:07:70:48:ac:8a:f4:b2:
                    9d:56:aa:2b:91:30:02:cb:0e:66:be:8b:b1:01:db:
                    36:c6:01:54:bd:e7:7b:ae:37:79:25:d0:9c:5f:68:
                    d0:75:73:63:e9:19:a2:bd:8f:5a:5f:bd:4d:dd:57:
                    55:89:95:aa:52:3f:04:02:f4:95:36:bf:3f:65:3b:
                    97:c5:d9:9d:b0:67:6e:9b:3b:06:5f:b0:3a:1b:58:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:49:8C:96:5D:29:A2:32:D3:D8:EA:9A:F8:67:E7:BB:8B:56:7A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/6287725d-70ea-33ca-9beb-ccbf0e213993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl

            X509v3 Authority Key Identifier:
                keyid:FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb33::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:55:3a:be:f6:f2:50:85:8c:9a:22:a6:4f:55:97:27:04:
         05:f7:1a:87:a0:9e:ec:d9:2c:30:65:9d:5a:ee:48:e3:c7:4d:
         ad:e7:ef:25:ca:ff:5c:1d:23:2d:01:a2:d8:bd:70:89:c5:73:
         bc:b7:54:1b:11:bf:82:a4:a3:f2:38:6e:2c:31:18:1d:96:e8:
         ff:4e:e2:a6:f3:bc:e9:81:08:5f:50:5b:1d:43:97:4e:c3:b8:
         cf:4f:39:85:f3:ae:ea:53:df:d0:f9:21:e2:af:5a:11:78:65:
         f4:b4:ba:52:53:05:38:93:d0:19:da:c2:8a:91:cc:ae:ef:5a:
         30:71:a3:a3:51:88:e5:2d:f8:6b:ed:74:d3:1e:d0:ee:f3:81:
         51:94:bc:53:b2:50:44:39:cf:ae:8f:64:95:67:b9:dc:5e:6b:
         62:0d:15:8d:bf:5d:ac:56:bd:06:c2:e6:c6:2f:3f:26:f4:34:
         38:9d:67:69:9e:5d:43:c5:9b:de:71:ea:78:ac:5a:27:e2:52:
         b4:1b:d7:e2:77:cd:40:7c:b9:ae:f7:a1:f6:ab:a2:a9:35:a6:
         ff:47:98:d4:1d:42:93:90:01:2f:52:99:c1:1b:6b:3e:ca:95:
         d0:c9:45:44:d2:55:e9:27:b4:e8:50:ef:91:da:bd:03:7c:85:
         7e:c8:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:18 2025 by rpki-client