Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02006f49-3624-35df-96b9-dce727aa1e0e.roa
File:                     02006f49-3624-35df-96b9-dce727aa1e0e.roa (raw, json)
Hash identifier:          CaA6cIJcj0b1xGupl6P9cMzhKiDcv1hfzKXV6sVy9DY=
Subject key identifier:   8F:99:8B:E4:95:13:86:21:4E:75:E8:90:5E:5A:13:B1:6B:F1:12:D8
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848100A92595002FD5FAFAF5F00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02006f49-3624-35df-96b9-dce727aa1e0e.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     28110
IP address blocks:        2606:f180:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:92:59:50:02:fd:5f:af:af:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=e1e7e2c0-5904-4a73-969d-137dc73a1143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:d0:53:8b:07:69:d1:a8:cf:21:ed:86:d5:
                    45:af:9e:44:a0:69:81:93:15:4b:23:84:66:39:27:
                    93:dd:32:c3:90:66:0a:73:2f:f0:91:6d:ff:d8:8d:
                    fe:77:b2:5c:61:24:83:67:ac:64:22:e8:b6:cd:f9:
                    af:a2:c9:34:aa:40:d9:ac:fe:f3:18:1e:bc:fa:a9:
                    4d:97:f7:c5:36:11:9f:43:fd:d0:31:5d:7d:e6:96:
                    fb:c6:d3:a8:59:7f:11:77:c9:6a:bb:ba:37:3d:8a:
                    7b:6c:bb:2f:bd:ac:8c:97:17:b8:49:64:f7:16:7f:
                    2a:bd:26:34:50:2b:e2:93:fc:7a:ac:ab:4a:fc:d3:
                    10:b6:ec:03:e3:26:cb:4a:4f:6c:7b:e1:8b:d5:b4:
                    a7:ff:44:b0:84:df:86:42:2e:6d:04:42:b1:5c:c1:
                    ed:7b:0b:cf:e3:f5:94:4f:52:8a:af:5d:83:aa:26:
                    6c:18:8b:36:db:13:09:f5:63:97:3b:0f:2a:1a:b7:
                    4a:6f:c6:b6:3c:25:db:6b:e3:a2:03:01:d3:97:36:
                    c8:5d:34:2e:7f:7b:d4:07:57:61:b6:7f:de:7d:db:
                    6c:8e:84:d6:c3:d3:25:2c:64:09:8d:96:87:00:6c:
                    2b:db:db:01:67:41:dc:c9:1e:f8:ca:4f:36:eb:29:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:8B:E4:95:13:86:21:4E:75:E8:90:5E:5A:13:B1:6B:F1:12:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/02006f49-3624-35df-96b9-dce727aa1e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:87:ea:5d:36:85:86:50:2f:af:19:f0:8e:13:f3:8c:f5:
         64:22:df:fb:77:bf:21:84:ec:c8:3e:e7:88:58:f9:b4:67:e5:
         df:f6:02:9a:92:7f:4a:65:29:3d:df:ec:4e:d9:2f:58:ec:0d:
         40:c0:e7:35:19:b8:a1:00:b7:a6:df:eb:12:85:55:90:18:bf:
         1e:34:65:d5:f8:a5:42:f0:1b:b2:61:ce:4c:c4:0d:bd:1b:3c:
         ce:cd:ea:3f:29:b5:fc:67:49:a8:22:21:e2:0e:3a:b6:c2:79:
         cc:0d:a3:7d:92:63:8e:5d:4a:e7:a3:41:b0:1c:b2:1b:cb:05:
         da:1f:43:11:07:b4:bb:67:16:3b:07:36:bc:b1:fa:28:d2:0a:
         e2:6f:cc:82:e6:e9:a0:17:92:d6:c6:41:5f:7f:30:6f:d1:18:
         0e:41:10:54:74:48:37:42:a1:38:40:48:3b:89:77:13:0f:29:
         53:7e:f8:2e:c5:02:51:04:2b:b5:f4:dc:1a:98:5c:ce:1c:52:
         99:29:cc:d5:32:3c:ca:07:13:67:65:00:a7:1c:65:02:54:88:
         00:1b:f6:32:af:0e:ed:aa:29:04:da:05:59:ac:b2:1a:92:8b:
         11:1c:a3:c0:f5:7f:ce:3a:f4:fb:6b:7f:54:59:00:1f:e0:68:
         84:41:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:09 2025 by rpki-client