Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa
File:                     8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa (raw, json)
Hash identifier:          fvRvsk2QJeOLRMtozYdBsJwsKUqdYlLmunAwZw6L/Kk=
Subject key identifier:   79:74:AF:3E:2A:FB:FA:5B:1C:B4:99:BF:11:F7:10:FC:83:06:34:D6
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584832F02C8DD16880D6BFD185C0
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     399728
IP address blocks:        2620:98:e000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:2c:8d:d1:68:80:d6:bf:d1:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=70fb2da7-5fcc-44d2-80e7-3aa074b291b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1d:e5:42:96:27:62:52:b4:55:38:de:0a:b4:
                    0f:35:51:fa:61:92:5d:19:eb:25:dd:84:6b:b1:3e:
                    2f:b9:3c:15:0b:14:07:e0:81:63:f8:9f:93:85:3b:
                    79:08:cc:be:81:5f:57:3a:61:d7:0d:e3:ba:29:0f:
                    99:38:4c:10:9c:59:89:22:49:53:60:d6:01:9b:5c:
                    25:3b:36:da:35:1e:33:b3:5e:a8:29:7f:ae:2e:d9:
                    8c:b5:5c:ac:50:48:e1:a7:c6:17:65:aa:68:91:27:
                    36:58:fd:8d:fd:6b:57:ed:e5:a9:64:34:b8:e1:39:
                    b3:70:83:09:a5:7d:6d:0e:a3:81:51:74:3c:11:cb:
                    13:59:99:68:bb:a2:97:46:47:52:ac:37:80:cb:f3:
                    1a:54:7d:d1:f2:7b:70:5b:86:55:3d:a0:25:ac:01:
                    cc:dc:20:f3:de:14:44:91:78:e5:06:e2:e3:7a:4a:
                    62:c2:fe:06:da:10:72:93:d8:3b:df:e2:c1:b0:57:
                    ed:5c:cb:44:5e:e8:ac:72:20:70:92:da:3d:90:85:
                    60:90:8b:e6:bf:7b:9d:c4:c4:b6:99:40:35:4d:4b:
                    a8:1a:df:20:6b:5b:02:fb:d5:1d:a2:96:bb:b3:6a:
                    75:2c:9e:1d:56:02:52:ef:9a:07:6c:1e:57:16:3a:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:74:AF:3E:2A:FB:FA:5B:1C:B4:99:BF:11:F7:10:FC:83:06:34:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:d6:81:7a:2a:39:65:0a:87:8e:06:35:24:ba:e8:29:88:
         b5:85:04:13:0e:de:5b:ed:ac:46:c7:aa:e0:d3:f0:cc:99:35:
         e1:3d:e0:7c:0e:db:7f:89:56:f8:ef:d5:65:51:b5:c9:d2:87:
         04:81:83:43:37:2e:70:56:44:e3:4a:c0:02:c6:b5:3d:32:10:
         a2:4f:b7:23:02:5f:fb:24:0e:d5:4e:e9:41:77:d8:00:c9:dd:
         2a:e9:4d:a4:40:a5:11:cc:25:da:92:40:fe:39:70:ec:19:93:
         be:2c:f1:6a:bd:18:d1:50:43:33:7f:50:7c:78:a4:4b:5c:8b:
         d6:55:45:cf:ad:d5:0f:33:8c:57:32:19:c9:f4:d2:1b:0a:ae:
         fd:9b:6d:e4:09:05:ed:d2:d7:5c:55:86:23:dc:6e:2e:f3:8b:
         9a:bf:41:d3:99:b6:4f:b7:b7:44:c4:74:ae:2c:b6:d2:e6:17:
         0c:70:bc:0a:84:89:9f:8c:09:de:fd:0e:58:05:b5:68:8a:9f:
         0f:39:3c:db:68:1f:b3:05:60:87:5b:62:58:64:3f:87:19:63:
         1c:18:89:d7:ba:18:11:b6:bb:60:00:72:1e:97:11:e8:e5:30:
         83:a9:56:68:2c:33:3d:59:25:54:20:c6:4e:6e:a5:19:48:4c:
         ac:e5:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:48 2025 by rpki-client