Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/c83fc820-b750-37e9-8ad2-330bf7d51168.roa
File:                     c83fc820-b750-37e9-8ad2-330bf7d51168.roa (raw, json)
Hash identifier:          AXfXaCIx0phm7j1wggIRnM3d/eG1NPAWlS7E3Wt06UE=
Subject key identifier:   40:0B:D2:D0:B0:C2:A6:09:EB:8E:81:57:C8:FC:E1:59:86:5A:74:77
Certificate issuer:       /CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
Certificate serial:       010D0C9F4328584871C06E44E42C02C947EAC600
Authority key identifier: FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/c83fc820-b750-37e9-8ad2-330bf7d51168.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:fb33::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6e:44:e4:2c:02:c9:47:ea:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=513ec75f-befe-4353-b652-f5e13608c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:35:42:9c:3c:a8:3a:74:b0:2f:9d:49:75:2d:
                    63:60:98:63:31:6f:34:01:82:a4:35:0e:ce:27:6a:
                    8a:72:b6:03:02:41:ea:10:c1:61:2a:04:99:2f:a7:
                    36:34:73:2b:37:90:e4:13:cc:f0:fb:eb:49:b0:76:
                    7c:e9:fd:ce:7e:44:75:ee:87:02:14:15:b4:2e:67:
                    f5:5c:56:69:96:f0:a7:5b:c9:bb:14:de:a3:22:a6:
                    fb:cf:1f:6c:27:03:f9:c4:a9:65:7d:38:5f:54:2a:
                    39:59:34:1f:af:7d:7d:77:c0:8a:5e:fe:a0:20:0a:
                    cd:29:af:c4:8a:c7:1c:b2:aa:c2:19:c0:b7:02:45:
                    fb:ff:e3:f4:a5:10:e2:15:21:37:f5:9e:fe:92:f7:
                    29:0e:74:12:93:3c:b5:62:45:72:76:b8:89:df:aa:
                    36:64:70:17:e2:ba:62:fe:5f:22:b7:4d:df:37:9b:
                    16:b9:94:e1:84:2d:40:3c:31:1b:21:42:33:25:3f:
                    18:f8:c4:53:57:6c:b3:ca:a9:c5:5f:c4:4b:ff:5e:
                    53:80:ff:33:97:09:f8:30:79:58:61:81:c1:eb:72:
                    92:30:4c:38:c3:cb:3a:20:20:5c:3b:f8:66:f8:e5:
                    5d:bc:f2:5d:2f:a2:88:cd:7b:cc:d4:e0:69:2f:b5:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0B:D2:D0:B0:C2:A6:09:EB:8E:81:57:C8:FC:E1:59:86:5A:74:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/c83fc820-b750-37e9-8ad2-330bf7d51168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl

            X509v3 Authority Key Identifier:
                keyid:FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb33::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:96:bd:bb:be:f2:77:11:60:46:b6:be:59:08:a0:65:e3:
         73:1f:88:21:01:82:08:b2:da:28:5b:40:e0:8b:9f:d1:78:87:
         2f:be:fc:b1:8e:0b:78:8a:48:55:f7:1b:ec:7f:46:c4:71:e6:
         3a:b4:4f:62:1f:e2:b8:50:92:15:c9:29:6d:c1:05:af:ca:6f:
         36:c0:e2:d7:7a:6e:d4:d0:5e:74:da:27:08:70:f3:98:6c:34:
         4c:47:47:6c:c6:16:9e:8a:b3:44:84:2b:d5:5c:f4:14:43:f3:
         fb:b9:81:de:1c:ff:77:35:19:fa:f6:b0:f6:2f:94:9f:55:4d:
         4e:7c:cf:9f:91:64:15:ad:4d:9d:1c:98:ea:3a:ca:03:1f:15:
         bd:d2:32:92:87:9b:e1:0f:04:f1:55:33:7c:a0:51:d4:b8:e0:
         50:87:80:73:c1:67:2e:02:e4:0a:3c:07:50:c0:c9:9e:b4:96:
         fd:d6:44:f1:37:f0:cb:5a:a3:ed:38:3b:13:db:29:62:f4:0b:
         f6:f1:d5:d3:30:a5:e0:4b:f1:6a:7a:ed:6d:ac:57:a5:61:f1:
         b1:63:b6:cb:72:c0:b7:97:48:38:0a:26:f2:52:97:05:19:f5:
         f0:ad:5e:34:62:99:48:74:64:03:c6:7d:08:e7:f5:23:86:f7:
         f8:91:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:54 2025 by rpki-client