Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc2c365d-ffb6-3190-9e86-cc6ce9e977e6.roa
File:                     fc2c365d-ffb6-3190-9e86-cc6ce9e977e6.roa (raw, json)
Hash identifier:          Ga/4T3Jtfnza5vG2oX3sKJcOEp2S2vSUHgiRrXp+CRQ=
Subject key identifier:   F7:37:26:CB:F5:70:ED:07:A5:E3:03:A6:BF:66:11:2F:FD:DE:54:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BFBA7791A2F5D9B372100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc2c365d-ffb6-3190-9e86-cc6ce9e977e6.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33651
IP address blocks:        2001:559:345::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:fb:a7:79:1a:2f:5d:9b:37:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=76965104-5c94-4806-a3b1-53284dc2351d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:8b:e7:49:8d:28:c4:16:b4:43:f6:77:71:
                    ef:36:d6:d9:d6:7f:be:67:a0:6f:f3:4f:26:50:d8:
                    f0:2e:14:14:d2:38:06:43:96:e0:31:03:fc:aa:cc:
                    21:cd:42:0a:be:1e:61:22:23:d1:89:b1:72:6c:3c:
                    42:d7:45:06:5d:7f:28:b6:81:af:00:97:5c:35:cc:
                    8b:7f:32:be:a8:ef:16:9e:be:09:5e:90:60:72:76:
                    da:1c:23:b6:09:49:ce:ec:92:ce:de:92:8b:8c:c6:
                    c1:97:6c:51:4e:21:a1:89:13:0c:7e:fd:94:4f:9b:
                    21:f7:48:fc:35:31:ff:6c:a1:af:49:20:36:08:ed:
                    d4:a5:06:f5:45:66:4d:7d:ba:96:9e:69:a9:1d:8b:
                    7f:2e:fb:ca:96:af:87:16:82:88:24:60:b2:7a:5f:
                    cb:26:1d:a3:b1:78:46:83:3e:f7:88:4a:4d:e8:89:
                    d8:c7:06:42:ed:a9:cf:d0:86:21:ea:a4:9c:0a:95:
                    38:7c:55:bb:a1:9c:ee:12:fc:aa:fc:68:c8:87:67:
                    79:14:ba:13:9e:b4:e7:28:7e:be:aa:0d:34:3e:e3:
                    1b:68:c6:9d:dd:c1:51:8b:91:54:2a:bc:00:27:36:
                    dc:c3:cb:68:9a:ac:ed:bb:04:8a:ff:35:0d:9f:bc:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:37:26:CB:F5:70:ED:07:A5:E3:03:A6:BF:66:11:2F:FD:DE:54:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc2c365d-ffb6-3190-9e86-cc6ce9e977e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:345::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8c:cc:9a:8e:be:b7:4b:12:b0:6f:df:13:e0:ee:f4:81:47:
         17:fc:59:9b:ee:51:60:67:01:5d:fe:c9:44:bd:ee:97:06:2e:
         95:6b:91:2a:b6:d4:0e:b6:08:22:96:8e:37:75:4e:ff:85:d1:
         f8:ca:35:3b:7a:e3:03:6b:97:04:6d:67:73:29:9a:af:e8:92:
         2c:36:9a:a1:26:32:84:2f:03:6a:cc:62:78:0b:41:06:85:71:
         b7:53:6e:f2:a4:0e:67:53:04:db:33:f9:cc:ca:57:08:d2:df:
         4b:50:f6:0d:90:6a:38:5a:40:d1:96:19:20:f0:14:f7:52:69:
         58:92:39:07:19:54:1f:7d:22:7f:dd:2a:3b:c8:99:cf:b1:3b:
         99:e7:ba:9c:b0:82:cc:5d:b5:c5:10:ab:c4:b0:f6:6a:df:7d:
         e9:2d:a3:7d:20:66:77:49:e0:29:84:f2:07:53:84:68:47:79:
         c4:27:43:f5:b6:99:bc:9f:23:47:29:3b:aa:b6:f8:c9:0f:6d:
         fa:b2:de:ce:aa:92:90:f4:b8:71:3e:91:19:fd:43:df:d5:70:
         9a:14:4b:ff:8d:fb:28:ee:7e:5f:cd:11:68:19:2e:da:8c:85:
         5f:ac:9c:0c:4b:ed:4c:f6:d5:b5:ca:8c:f7:4f:cf:eb:7f:02:
         36:6d:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:54 2025 by rpki-client