Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c23530db-2e05-343f-a458-5904a413862d.roa
File:                     c23530db-2e05-343f-a458-5904a413862d.roa (raw, json)
Hash identifier:          hgINEvpbmWA6VSg97U4RjdLfpHdIfCgaMX2+ZszhtDg=
Subject key identifier:   C0:CA:67:57:6C:32:0E:A2:22:E7:61:50:7D:C0:5D:14:10:05:B7:F3
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584869606BFC59DDF9A68DF5E300
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c23530db-2e05-343f-a458-5904a413862d.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     64286
IP address blocks:        2606:f180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6b:fc:59:dd:f9:a6:8d:f5:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=e6581a31-2c65-4d02-9b28-d178bd0a7c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:54:40:b6:a6:cf:20:68:ef:e4:f3:52:64:
                    46:fc:6e:ff:93:19:83:35:7a:c4:4f:be:7c:14:9f:
                    25:7e:ae:ea:28:ad:1e:53:e5:72:29:6e:2a:da:6d:
                    ff:26:7b:03:cd:31:f5:7f:a3:f6:b9:ae:54:46:39:
                    6d:09:72:d0:41:48:1d:a8:64:b7:4f:e5:8d:b2:93:
                    be:f4:d1:59:03:c1:4e:78:28:71:57:8b:d8:2d:41:
                    f2:b6:ae:1f:ba:63:ac:e3:da:df:60:eb:ac:10:ba:
                    2f:ca:87:96:11:93:cc:7c:8c:f0:b1:36:84:df:8b:
                    42:1e:3e:a2:27:97:7b:b9:f6:a9:a7:a4:a2:a7:35:
                    9b:fc:81:f2:97:fa:c4:cd:c5:9d:55:c8:b9:06:46:
                    f7:81:b5:18:84:a9:bd:1a:59:ee:e1:6e:8c:29:8e:
                    ce:7d:b3:77:1d:f6:f0:37:3a:18:c8:98:cf:f3:ff:
                    49:33:b9:83:51:f0:1f:3d:4d:dd:af:8b:27:d9:6e:
                    02:48:1e:ac:d4:9f:5d:fd:49:67:8f:53:8e:c5:b6:
                    d2:c9:a8:de:a0:8b:76:2c:4f:8e:99:af:de:32:fc:
                    6b:f2:a7:a3:38:df:74:c6:df:33:cf:76:1e:f2:e1:
                    2a:da:1e:cf:99:32:86:ca:0c:1e:18:64:54:a7:77:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CA:67:57:6C:32:0E:A2:22:E7:61:50:7D:C0:5D:14:10:05:B7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c23530db-2e05-343f-a458-5904a413862d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:50:88:38:e4:0c:32:8b:90:b7:3d:66:58:08:60:75:12:92:
         42:af:17:0b:4d:52:d5:21:64:0e:e2:9c:29:69:ae:a8:fc:63:
         f6:60:2c:2f:56:46:e5:3f:8d:66:ea:ce:10:d5:37:7f:67:cd:
         0a:d8:72:2c:fe:e2:81:18:9f:c8:ea:fd:ae:a5:63:4a:56:c5:
         25:e8:b2:b1:db:3b:85:e3:b9:12:76:4e:e1:e1:95:0e:85:4b:
         dd:95:35:ec:ba:4c:23:b7:e6:7f:31:66:5f:49:1a:93:3d:5d:
         9c:93:c5:1d:53:b6:eb:79:9f:05:5a:4d:d6:40:d7:56:41:cb:
         7b:e6:c2:1b:a5:39:25:d6:2a:7d:39:02:65:58:c6:52:55:b0:
         cd:d0:f1:fc:7e:2d:f4:b1:6d:33:e3:55:7f:7f:fa:fd:29:17:
         a3:59:b8:e4:51:86:5c:42:83:16:14:86:89:49:48:0f:06:31:
         c0:e1:ed:9e:1e:62:33:ad:1a:83:8f:c0:06:65:89:08:14:a0:
         12:e6:31:43:bc:21:68:1b:a7:69:b6:ba:41:b5:97:26:31:39:
         c9:73:82:2c:3b:3a:1a:95:84:3f:06:77:0a:29:3e:31:36:8d:
         5c:5a:99:b3:31:ad:df:be:6f:38:1f:3e:c4:dc:b1:96:32:49:
         79:73:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:02 2025 by rpki-client