Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d14446fc-6b53-39a9-b4f1-935b4f7038af.roa
File:                     d14446fc-6b53-39a9-b4f1-935b4f7038af.roa (raw, json)
Hash identifier:          Kxrmwqli+zD98tW/UWcJc4/2TOZHqIoqgbL1jZ3IDoM=
Subject key identifier:   01:18:76:3A:92:EC:96:1C:9E:31:C4:4D:3A:C7:0B:47:C1:5A:2C:9A
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584871C0695F865175891CCFAAC0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d14446fc-6b53-39a9-b4f1-935b4f7038af.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:fdeb:20::/48 maxlen: 48
                          2602:fdeb:21::/48 maxlen: 48
                          2602:fdeb:22::/48 maxlen: 48
                          2602:fdeb:23::/48 maxlen: 48
                          2602:fdeb:24::/48 maxlen: 48
                          2602:fdeb:25::/48 maxlen: 48
                          2602:fdeb:26::/48 maxlen: 48
                          2602:fdeb:27::/48 maxlen: 48
                          2602:fdeb:28::/48 maxlen: 48
                          2602:fdeb:29::/48 maxlen: 48
                          2602:fdeb:30::/48 maxlen: 48
                          2602:fdeb:31::/48 maxlen: 48
                          2602:fdeb:32::/48 maxlen: 48
                          2602:fdeb:33::/48 maxlen: 48
                          2602:fdeb:34::/48 maxlen: 48
                          2602:fdeb:35::/48 maxlen: 48
                          2602:fdeb:36::/48 maxlen: 48
                          2602:fdeb:37::/48 maxlen: 48
                          2602:fdeb:38::/48 maxlen: 48
                          2602:fdeb:39::/48 maxlen: 48
                          2602:fdeb:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:69:5f:86:51:75:89:1c:cf:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=cc85178b-ea64-458e-bff4-4a0fcd74363b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:26:ec:4e:07:47:c3:f5:ab:64:fa:51:e0:
                    73:c1:f4:4d:9d:6b:a8:d0:73:ef:7c:35:99:cd:dd:
                    29:d2:46:dd:0c:98:0f:e5:73:7e:9d:a7:b4:8c:92:
                    b0:15:1d:6b:d8:d4:6a:2e:89:b0:80:b4:b9:b0:8b:
                    08:35:2b:a8:26:01:d7:4a:a3:f3:6f:29:c6:17:21:
                    62:1d:ca:d8:91:c2:16:f8:25:3d:b5:7d:28:4d:4f:
                    58:4d:aa:55:17:3c:8d:31:52:65:e2:54:45:cf:5b:
                    8a:d6:d4:20:a1:46:a5:b6:0e:78:b9:5f:bb:52:16:
                    48:94:2f:a1:e1:3d:2f:79:9e:12:5d:09:7e:c8:d1:
                    ea:47:3e:95:a8:98:9d:39:f3:76:7a:89:df:36:b4:
                    62:a8:a3:ae:cc:4a:b7:a6:c0:64:e2:16:88:75:32:
                    b0:d1:8a:4e:dc:02:ab:db:4e:e3:50:14:07:7c:a0:
                    75:fb:37:10:6c:97:79:3a:c6:bb:d0:74:b8:e6:ed:
                    c5:15:13:af:05:a4:40:54:61:dd:f6:2a:ec:14:66:
                    c0:95:61:ec:70:d5:72:d8:08:4d:98:3b:8d:47:d0:
                    5b:0c:4d:7d:74:e7:1f:a6:33:77:94:04:68:8a:67:
                    59:eb:f8:37:8c:12:08:af:40:da:b4:46:c7:3e:06:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:18:76:3A:92:EC:96:1C:9E:31:C4:4D:3A:C7:0B:47:C1:5A:2C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d14446fc-6b53-39a9-b4f1-935b4f7038af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:20::-2602:fdeb:29:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:30::-2602:fdeb:39:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:a6:e7:60:18:49:24:3f:d4:41:4d:96:09:ea:e4:8a:83:
         a2:8d:1c:52:f7:06:ea:07:32:0d:53:95:3d:f6:9e:86:9f:46:
         f1:cf:77:3d:36:10:0d:4a:0d:c4:22:a6:05:15:99:dd:95:f2:
         a8:c8:bb:a5:49:af:f5:dc:2b:c2:76:ea:27:80:41:02:27:a9:
         34:69:09:2b:74:4e:5e:09:67:85:fa:2a:66:25:31:f5:64:81:
         64:ba:4f:19:fd:74:8c:49:a6:7a:6b:dc:c0:7c:2b:4f:1e:1b:
         0d:75:e9:40:e3:27:f1:e5:ee:95:d1:6b:30:29:29:95:c7:e3:
         13:4b:9d:e8:de:e9:f4:20:dd:f4:2b:ac:50:20:64:1b:7c:14:
         ba:c5:f8:69:a5:f0:ec:df:d1:4c:ed:b2:d6:e1:83:b6:ca:27:
         2a:91:18:16:2b:42:c9:87:22:69:2c:18:15:cb:80:d7:a4:b2:
         a5:53:aa:e3:30:85:91:8c:36:1c:1e:4f:04:d2:18:ce:9b:6f:
         b6:87:ca:5e:5f:44:ef:6b:fb:e6:37:26:9e:ce:46:6b:3a:ba:
         2e:04:35:63:84:ba:18:3b:b9:29:5b:d4:49:6e:4a:f6:a0:e1:
         ef:2e:75:11:2e:6c:a7:95:de:e3:dd:ea:b8:00:95:2a:0f:5d:
         80:08:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:20 2025 by rpki-client