Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa
File:                     263e656e-d169-3c6a-81fb-9368ebd2555e.roa (raw, json)
Hash identifier:          ZA2iC/mhf0suHaHJw25XFwd/8eDc2tzYdWW074UvU88=
Subject key identifier:   10:C0:69:72:DB:57:A9:B4:47:D5:E6:23:B0:5A:42:6F:5E:2E:6B:72
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858486695C1DC3F5051729333C980
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     64286
IP address blocks:        2606:f180::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c1:dc:3f:50:51:72:93:33:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=c4a6bac7-169d-47d0-9396-50ad19c86668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:88:1b:bc:b9:2f:36:11:93:16:19:b2:0b:
                    8b:61:51:33:b9:ba:ed:ed:e2:e8:c7:b7:76:8a:f5:
                    ab:72:0d:81:d0:c2:39:48:76:22:81:5a:88:be:b2:
                    f3:0d:2e:20:27:0d:b5:4e:a8:35:94:f0:85:8f:72:
                    d3:d7:9b:57:b9:57:81:94:5c:3e:39:79:48:96:35:
                    3f:18:a1:6b:6f:6a:ac:9a:bd:92:3c:90:62:a6:ad:
                    c9:f6:13:26:f7:d1:81:70:e9:bc:46:6b:5e:78:83:
                    24:a7:af:b2:78:dc:14:9e:c9:af:43:0a:ec:91:d0:
                    f6:3c:2d:ae:bd:59:a0:d4:65:08:31:6f:3c:36:4e:
                    63:d2:16:0d:f9:ad:5a:b2:18:71:89:49:83:74:f4:
                    ca:06:82:72:e7:60:24:63:86:c2:ec:2c:22:60:60:
                    7c:76:3c:3c:97:c1:d9:8b:c4:08:d7:f0:8c:ec:bb:
                    cc:20:99:b8:55:03:1a:d4:d8:9d:ff:3d:81:87:bd:
                    46:d5:ac:b1:db:37:06:36:1e:ad:50:1a:04:a4:b9:
                    98:09:33:0d:11:2f:6c:55:ca:2e:80:a6:35:e5:c2:
                    c0:b8:37:12:09:6c:8c:95:6a:a6:f0:47:88:b5:52:
                    06:12:33:e0:80:50:cb:c9:20:44:69:1c:96:a4:a4:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:69:72:DB:57:A9:B4:47:D5:E6:23:B0:5A:42:6F:5E:2E:6B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/263e656e-d169-3c6a-81fb-9368ebd2555e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:b8:e7:e5:16:53:e2:2f:af:ae:71:81:4f:f2:34:76:f3:03:
         3e:26:32:4e:37:e4:15:b5:c8:66:ae:a9:5c:22:c1:02:44:e8:
         07:65:83:38:c8:c9:0c:f3:0d:6f:3b:dc:cc:cf:67:0f:a6:95:
         35:cb:92:72:e4:76:1f:d3:fe:c3:fc:70:c8:4f:76:9a:1c:6c:
         66:57:dd:97:56:79:ce:ad:e7:ff:5d:b7:73:88:10:0a:f3:9e:
         2e:36:60:49:c4:53:be:b6:16:83:89:fb:06:1a:58:4a:b7:58:
         98:84:f3:10:a7:97:06:53:3f:b8:24:ef:a5:fa:ea:3b:af:10:
         99:e3:d3:c7:d5:b6:28:66:27:b2:2c:09:f0:69:a0:e8:a3:ba:
         c5:c7:06:68:49:90:66:db:c5:bb:e2:5b:48:f6:9e:b2:fa:91:
         39:cc:b9:84:72:17:a3:b9:9d:a0:c6:c2:b2:41:88:d7:47:c8:
         9a:2b:9d:d1:dd:42:70:44:3b:5a:44:c1:72:f1:16:aa:d1:bf:
         e2:b2:67:e5:db:26:0a:8c:aa:d7:f6:00:77:51:97:8d:ce:19:
         8a:ef:c4:b1:b8:40:12:04:96:98:11:72:31:b9:52:d5:7c:b0:
         a4:1e:8d:9e:34:97:fd:ad:5d:41:65:20:3c:63:47:d3:48:93:
         a5:0b:66:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:10 2025 by rpki-client