Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
File:                     6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa (raw, json)
Hash identifier:          yrcTk5QHf236My/EqAMnYDul/xMe+ihWeeaqn3OIvNk=
Subject key identifier:   AD:D5:45:93:E9:1F:7C:B4:25:81:F3:2B:89:5E:B1:D3:06:37:C1:0D
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584871C06DC00BCE03BBE4720E80
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     399728
IP address blocks:        2620:98:e007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6d:c0:0b:ce:03:bb:e4:72:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=97e7c676-6592-4c15-aebb-266d2a52dcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:bf:72:eb:5f:4e:2e:ed:a7:b7:99:44:31:
                    97:c5:99:58:d5:fc:22:2a:dc:9a:79:97:5b:81:3a:
                    4c:89:ad:2c:92:b7:1c:6a:dc:34:27:63:23:17:c8:
                    07:d1:19:db:36:36:e7:54:9d:b2:16:b9:f5:bc:b1:
                    0d:2e:11:b7:51:8e:a9:f8:f1:03:4f:32:eb:9c:c3:
                    77:8e:a9:f0:42:ad:83:26:b1:07:1d:e4:85:d4:cf:
                    05:9f:c8:ac:c4:52:7d:4a:a2:dd:fe:1c:fe:3e:41:
                    d0:19:5c:98:c0:37:3a:59:20:1e:f6:c7:f0:be:9a:
                    7c:22:c7:50:40:e7:8b:66:e7:d4:9d:f5:de:e4:16:
                    cd:b9:c9:48:61:59:e2:f9:69:11:00:22:52:a6:43:
                    af:c9:e3:fe:7d:0f:bc:c7:cb:41:eb:eb:88:54:59:
                    a0:d3:1e:cf:31:3c:ed:bc:db:be:2f:73:97:b7:f5:
                    e1:7c:0d:26:fd:f0:01:8c:1a:79:b7:fd:2e:90:b4:
                    2d:e8:8f:c2:32:4f:23:1d:5d:21:46:bb:ed:c7:3a:
                    0b:1a:17:0b:d0:db:5f:25:8c:3f:bb:1b:a6:f4:05:
                    01:49:35:2c:74:1a:99:90:76:be:55:cd:3d:24:47:
                    9c:c2:31:45:c9:07:a2:25:cf:17:cb:a6:00:70:fe:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D5:45:93:E9:1F:7C:B4:25:81:F3:2B:89:5E:B1:D3:06:37:C1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b4:f5:5a:21:83:03:17:f2:89:fa:58:a4:50:4b:3c:cf:71:
         22:47:8b:f6:f0:6c:d3:91:75:27:43:e3:98:40:93:1e:80:44:
         22:6a:5f:99:43:d4:39:47:55:2e:5e:76:6d:d3:63:db:1a:2c:
         f2:cb:cb:0c:3e:25:58:83:ab:6d:5d:d0:ce:71:70:37:f4:83:
         29:28:86:86:59:11:43:1f:61:17:f4:76:fa:4b:86:f9:a8:b1:
         25:64:a6:88:cb:b8:8b:91:9c:45:5a:b0:e1:20:b7:05:ac:61:
         30:a1:91:11:f5:7f:fb:48:8f:21:90:1d:d1:80:2d:72:ee:61:
         b2:40:13:7e:f7:b5:34:b9:26:5f:34:58:2d:0d:15:63:4f:fa:
         94:86:ca:38:97:e7:31:a9:e7:1a:a2:8d:e8:16:1b:f7:fb:97:
         8f:5b:32:36:56:d7:90:c9:3e:0f:ac:61:b4:c1:b3:4d:fd:35:
         67:4f:e4:ef:76:47:d2:aa:e8:e2:1c:44:2c:cc:e6:ed:2c:72:
         2e:a8:69:b4:93:46:34:e4:32:13:90:57:a6:58:bf:68:a7:7c:
         d7:5f:bf:8e:d2:38:2e:bf:1f:ac:7a:1a:cd:c1:67:b8:a6:e4:
         d0:72:cd:9d:ac:26:14:1d:d1:81:74:73:10:ed:27:ba:94:fa:
         d3:8c:09:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:04 2025 by rpki-client