Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d197037e-e6e5-386e-b24f-099a3a5cd215.roa
File:                     d197037e-e6e5-386e-b24f-099a3a5cd215.roa (raw, json)
Hash identifier:          TOIKIzhyee/Rf1P+/QtbCq0t8AAAZwNuNDy/dypDYrI=
Subject key identifier:   B5:08:C1:06:03:70:BF:E0:20:E0:51:07:02:12:B5:D9:F2:19:8D:34
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584871C06F125C37E84A5D9F2B00
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d197037e-e6e5-386e-b24f-099a3a5cd215.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2602:fdeb:15::/48 maxlen: 48
                          2602:fdeb:16::/48 maxlen: 48
                          2602:fdeb:17::/48 maxlen: 48
                          2602:fdeb:18::/48 maxlen: 48
                          2602:fdeb:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6f:12:5c:37:e8:4a:5d:9f:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=1890c51b-84f3-481c-822e-248281d6cecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:31:d7:62:79:75:e4:a4:5c:37:18:bf:c4:
                    c7:2a:6a:9b:0f:74:69:84:5b:50:f9:2b:7a:9f:6e:
                    31:57:8d:25:7c:90:a3:1a:88:13:71:51:63:09:f6:
                    3e:19:f8:83:c6:2e:98:8e:cb:22:c2:3e:9a:f8:8f:
                    df:1b:2c:e1:59:82:fe:b0:ea:aa:13:01:c5:42:5b:
                    58:a8:bd:c1:f2:96:58:80:38:d0:a6:86:1d:f4:cf:
                    09:5f:b1:32:83:b6:29:3f:e8:c4:6f:4d:b5:c5:60:
                    62:5d:e9:95:ff:ab:01:e1:95:81:6b:d6:f7:17:50:
                    47:b1:db:99:b8:38:db:43:40:82:81:ec:56:c9:1e:
                    05:d5:80:35:05:a7:7b:17:38:53:6f:40:07:40:a5:
                    4b:7b:c7:02:00:9e:54:0f:17:84:31:2d:da:e6:59:
                    41:dc:f0:73:d6:d1:65:f2:4a:96:7a:d2:82:3d:0c:
                    36:16:f1:66:d8:e4:bb:f8:9a:a4:6a:31:f5:09:04:
                    3e:7f:fb:b0:d7:73:ff:c7:cb:9b:e0:e0:20:37:4f:
                    3b:5d:d3:83:41:6e:d8:a3:ba:56:81:41:d4:94:a8:
                    8b:20:88:89:ba:13:bf:82:18:8f:87:6e:b3:32:32:
                    ef:da:a2:c0:c8:83:66:3f:3d:87:ac:38:aa:b3:4b:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:08:C1:06:03:70:BF:E0:20:E0:51:07:02:12:B5:D9:F2:19:8D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/d197037e-e6e5-386e-b24f-099a3a5cd215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:15::-2602:fdeb:19:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:eb:5b:1f:26:e1:1f:ef:b8:9e:f7:32:35:d1:29:6b:86:
         2f:ba:be:68:65:36:d4:fb:ef:7d:37:04:f3:30:69:f0:37:54:
         3a:9f:5c:e0:b4:3e:c7:35:f4:f0:40:0d:64:b8:21:2c:e4:ef:
         c6:30:e3:3e:55:44:18:2c:03:91:a4:86:9a:cd:79:23:15:2e:
         46:ad:f9:fb:e0:c6:68:b5:20:16:cf:ee:37:7e:ba:7e:61:8a:
         92:4a:1f:30:2d:01:5c:4c:39:42:93:8f:74:54:fc:20:ec:4d:
         2e:43:0f:e7:4e:91:80:1a:f1:6d:ec:d7:2e:1b:db:3c:f3:94:
         b2:51:7f:d9:13:56:a8:26:6f:df:ff:f8:09:5f:6f:26:f6:04:
         69:27:75:53:46:3f:19:23:78:ae:40:e2:8e:59:4a:42:97:1d:
         d8:9f:78:d1:bb:2a:bb:ea:d4:e3:57:ee:75:f4:d9:ad:f5:86:
         85:03:16:14:bf:b4:4e:72:0d:31:b6:d9:49:3a:d7:29:de:67:
         04:78:8f:6c:44:b2:d3:ef:c6:7c:09:af:d2:ac:89:50:ca:6b:
         70:3e:ac:30:97:f7:19:5e:3d:62:5a:79:a5:3f:b1:4b:54:6c:
         7a:54:1e:e9:4b:6a:c4:65:0d:66:b2:bf:dd:35:ea:00:e0:02:
         82:c9:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:35 2025 by rpki-client