Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/192d0649-0a5f-3385-a4b3-331c4279e3ba.roa
File:                     192d0649-0a5f-3385-a4b3-331c4279e3ba.roa (raw, json)
Hash identifier:          cvtjaFg4xUA33Vy126XeqN+H54jB4wYxCvL+b8XTAA0=
Subject key identifier:   17:75:1E:A5:14:4F:56:36:F5:E0:59:65:4E:3E:F3:40:CD:46:FC:79
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584832F020BDFE21DDE564C92400
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/192d0649-0a5f-3385-a4b3-331c4279e3ba.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     8987
IP address blocks:        2606:f4c0:8800::/38 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:20:bd:fe:21:dd:e5:64:c9:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=b1737717-c10c-41e2-afab-ba53cbb3f412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:38:8c:37:73:36:a5:7f:b5:e5:06:86:04:
                    87:76:49:cc:94:fb:66:83:c1:a8:d6:29:55:38:11:
                    98:99:76:48:19:ca:94:1a:e0:f6:b1:77:fb:cc:da:
                    74:0f:6e:fd:7a:f7:ef:7f:35:53:74:24:fb:dc:36:
                    d0:e3:cf:59:59:95:e2:33:78:e7:8c:bf:65:5e:78:
                    88:3f:61:92:c6:84:c6:44:fc:5e:77:90:c0:1f:7d:
                    30:6e:f6:08:b0:44:04:12:f5:7c:a7:ac:7a:f2:14:
                    5c:0a:6a:4c:78:31:95:ad:90:df:9d:ab:01:42:7a:
                    1a:5f:85:ea:26:17:55:c1:fd:86:3f:0f:03:d9:7d:
                    7e:c9:e0:f1:0a:44:58:0d:51:da:9c:5a:a6:c4:a1:
                    c1:8d:34:80:16:ee:84:33:1c:57:a1:66:9f:3c:3d:
                    29:0e:fb:8f:6e:7c:30:9f:b3:29:1a:da:96:75:c4:
                    6f:11:71:2c:5a:cb:c8:5e:7e:6d:63:39:a4:c0:cb:
                    1c:ff:0e:29:d8:16:d6:25:1b:ca:b9:70:b0:d0:e3:
                    68:3d:5a:da:cc:70:d5:e1:de:47:a0:c2:eb:8a:18:
                    ed:de:16:f5:69:4c:86:37:ce:73:ed:66:06:ec:26:
                    33:69:08:24:3c:a6:54:49:14:61:e5:ea:f4:8f:96:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:75:1E:A5:14:4F:56:36:F5:E0:59:65:4E:3E:F3:40:CD:46:FC:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/192d0649-0a5f-3385-a4b3-331c4279e3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:9e:59:92:d1:9d:cd:9c:e3:8a:f7:e0:61:87:12:7c:02:
         90:d4:fe:85:3a:12:7d:91:6b:17:8f:ea:30:9a:27:a5:f5:89:
         85:36:7a:e5:16:8c:bc:e0:53:9e:f0:c7:0b:70:04:50:cc:34:
         e9:b9:4f:74:d9:08:81:e1:0c:82:be:37:b4:0b:92:a5:76:43:
         cb:16:95:e3:81:84:9d:46:c0:a0:9b:64:18:03:ae:02:ea:7a:
         e2:f2:b1:76:16:5a:ce:8a:e7:75:65:10:d5:2a:34:f6:9c:19:
         ba:b8:5e:1f:ff:d5:7a:29:72:b9:69:8f:f3:83:be:13:04:d9:
         ac:21:35:1b:e0:72:7f:8a:a3:f2:64:67:d3:b7:96:60:cd:7c:
         9f:11:49:b6:71:36:20:45:63:b7:9c:9b:68:29:b8:21:97:96:
         57:13:7c:96:0e:fe:d6:8a:a9:29:5e:2f:2d:09:e4:af:a8:e8:
         53:76:be:a8:df:31:ef:a8:77:cd:f5:85:30:1c:c0:b9:00:a0:
         c6:e5:2c:26:11:6f:ce:b3:49:76:2d:0e:17:31:86:57:d8:80:
         9a:0b:a8:82:32:fa:c5:06:66:73:b5:da:4c:56:10:77:74:c5:
         e0:ce:04:f2:c2:f5:17:57:df:db:7a:02:22:6f:fc:d6:2f:c6:
         bd:51:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 15:50:44 2025 by rpki-client