Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56c45cc-195d-33f9-ba7a-1144acfa645a.roa
File:                     b56c45cc-195d-33f9-ba7a-1144acfa645a.roa (raw, json)
Hash identifier:          nj86SWcwWBe3ASm26emyI2+OFIW7l87GE3L7y8DUI+M=
Subject key identifier:   51:CA:AB:D9:07:43:AC:4F:77:92:0F:BC:59:77:A9:62:E6:C8:44:69
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584819CFD80C4C8A4B5C52244C80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56c45cc-195d-33f9-ba7a-1144acfa645a.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     394089
IP address blocks:        2606:f4c0:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d8:0c:4c:8a:4b:5c:52:24:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=89618671-ec3e-46f8-9974-0595c484a4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:29:b1:1d:e7:fc:2f:89:de:c1:1a:a0:6f:
                    34:9b:18:02:e3:b4:00:54:ff:57:69:70:9a:49:a0:
                    38:c0:98:34:8e:c7:03:9a:be:de:cc:46:28:5a:f6:
                    ea:be:3f:d8:4a:ef:e6:99:76:50:9a:08:84:31:1c:
                    e2:7b:84:f5:a5:2e:e3:6b:6b:c9:90:fa:f2:9b:e8:
                    58:de:75:12:55:d3:2b:da:7e:6f:33:85:3c:8a:17:
                    94:da:78:ab:d1:02:75:bc:25:e3:b1:12:36:2a:28:
                    8a:bd:af:7d:a4:7f:54:c8:34:97:ba:4f:a2:14:29:
                    4b:15:ff:d6:1f:3d:45:47:3f:8b:b2:fb:38:e1:b8:
                    64:14:a1:9a:72:48:09:b6:4f:79:14:50:ca:ba:8d:
                    ce:4d:68:23:e4:a8:d3:79:c7:41:a0:85:d4:f4:10:
                    7d:41:21:82:d5:69:78:2b:77:fb:bd:ba:a4:26:ad:
                    a7:ea:76:f6:09:4f:4f:2f:11:ad:f9:8b:f4:50:d0:
                    7f:cc:ef:07:c4:48:42:a6:e7:7d:e0:dc:ba:ff:5f:
                    2d:2f:bb:b5:a8:32:a5:0e:66:8f:bd:d6:6d:3b:cd:
                    22:de:fb:36:1c:6d:3d:8c:79:b5:08:e6:1a:30:ce:
                    1d:be:e4:a9:a7:85:83:05:35:1c:8a:6d:85:91:a0:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CA:AB:D9:07:43:AC:4F:77:92:0F:BC:59:77:A9:62:E6:C8:44:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56c45cc-195d-33f9-ba7a-1144acfa645a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:84:92:d9:ac:f9:40:3b:f6:73:65:89:5b:64:0b:14:2a:0c:
         37:5a:9a:24:3a:48:1b:7f:20:ec:dc:dc:4f:7d:93:21:99:17:
         b4:41:8c:3e:73:86:69:8d:31:d7:40:23:d7:65:4c:62:2d:ac:
         b9:a3:60:5c:bb:c2:75:f3:87:8c:f2:fe:24:8b:52:99:ab:50:
         c3:c1:cb:4f:3a:0b:d4:ed:22:6a:2b:eb:87:82:89:ee:f4:45:
         c9:a6:ce:94:32:45:39:ce:a2:25:95:c6:c6:0a:35:7d:69:87:
         f0:21:d9:e6:cd:f6:d1:80:dc:4a:73:1a:0b:89:76:68:46:5c:
         9a:55:2a:0d:e9:70:22:99:83:3b:99:61:59:19:47:e6:74:d4:
         7e:5c:7b:48:f5:5f:19:17:84:47:db:90:c3:10:64:c3:d9:68:
         f5:33:68:cc:1e:2f:1b:76:c0:ba:1e:75:6a:a9:9c:1b:f6:35:
         1a:17:39:59:ce:85:ec:f8:22:09:77:f1:21:53:bd:91:6c:32:
         54:cb:ce:27:16:31:f7:38:75:27:a8:c0:bb:88:a6:bc:6e:0d:
         7c:30:85:76:43:ed:8c:17:4a:17:9b:bf:ad:6f:ae:ff:f7:37:
         ae:b7:04:9d:42:80:cf:45:73:ba:01:e0:ed:54:3b:6c:ab:ea:
         bb:de:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:46 2025 by rpki-client