Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/77600822-6b99-380a-a6b7-ad3994895d74.roa
File:                     77600822-6b99-380a-a6b7-ad3994895d74.roa (raw, json)
Hash identifier:          f9HfgESnS6tPyUw5Pq8nYQUcn0bS2r1oovAbUopgkWo=
Subject key identifier:   18:2A:31:AA:E3:DF:89:98:37:F5:A1:3D:1C:FE:E2:40:15:D4:78:74
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F432858490CB16B26A699DD847F995A00
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/77600822-6b99-380a-a6b7-ad3994895d74.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     1239
IP address blocks:        2600:2:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6b:26:a6:99:dd:84:7f:99:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=23b89af6-4c29-43fa-bd2f-38fa6c756013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:70:1e:60:30:c4:04:d9:26:1f:eb:fc:2b:
                    b4:f6:21:17:bb:e9:47:37:ee:32:82:1b:25:1c:0a:
                    c9:a5:4b:5c:a1:4a:21:33:99:92:56:c1:ca:e5:80:
                    80:2f:f4:5e:12:76:5d:47:17:6c:83:87:84:ef:cf:
                    74:db:c7:bd:1f:14:13:f4:cd:76:ce:ea:4c:09:bf:
                    e7:ee:26:ad:3c:48:26:c0:2f:af:18:e1:1e:e6:dc:
                    07:29:8e:7c:40:98:49:ac:ee:4a:10:21:61:8a:10:
                    16:cd:c2:ad:2f:b9:16:4e:b3:c5:5b:ed:eb:3b:3f:
                    cc:20:fb:df:6a:9a:54:c5:39:6b:28:32:2b:da:55:
                    03:22:2d:b3:3f:7c:29:3c:27:c4:b8:56:46:c1:d7:
                    01:40:6f:1a:6f:75:38:8d:d9:c1:7a:95:3a:36:ce:
                    75:a5:21:b5:07:1f:71:66:15:82:c1:ac:11:5f:5d:
                    d6:d5:d7:ef:41:70:6b:09:d1:44:c1:ab:7d:39:7e:
                    c6:b3:24:a1:59:f3:35:2c:3f:83:93:57:a8:bc:72:
                    ea:41:57:d4:f0:54:54:8a:1c:91:84:b9:51:65:70:
                    e2:ce:16:f4:ab:91:21:58:68:88:f1:55:08:7d:9b:
                    b5:99:23:77:b3:5a:40:58:c6:49:4d:52:e0:f7:03:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2A:31:AA:E3:DF:89:98:37:F5:A1:3D:1C:FE:E2:40:15:D4:78:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/77600822-6b99-380a-a6b7-ad3994895d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:17:68:0b:15:98:cb:1c:d4:b0:e9:87:39:8f:2d:ad:29:
         6f:f0:bd:e0:e6:6c:2f:43:8d:7a:be:8e:53:67:16:68:6d:5f:
         2e:09:76:fc:c3:72:ff:ba:fe:ed:ef:50:36:88:50:78:6d:d3:
         a0:d1:6c:9b:fb:46:42:6f:73:5a:1c:65:b1:28:e9:5c:40:f7:
         ee:f9:dc:0e:82:e4:9d:c4:87:83:14:b2:4b:51:b6:6c:9c:72:
         03:80:34:3f:50:5a:92:31:e1:fc:8d:61:5b:25:e1:c6:1c:a2:
         8a:04:49:6f:b6:e9:f9:d8:07:d0:64:b5:58:cd:be:da:09:26:
         84:e1:eb:ed:52:4f:b3:e4:a0:a6:16:cc:be:47:a3:6f:5c:1a:
         76:68:6f:61:07:a2:e5:5e:22:dd:d5:0c:01:5c:4c:10:65:42:
         8f:8d:3d:ac:f7:18:be:10:85:0f:c1:0d:14:24:70:3a:cf:f6:
         32:9c:78:bc:19:75:5a:d1:71:88:7b:01:d4:50:da:31:2b:24:
         d8:b2:f8:d6:ab:d3:8b:d2:f9:29:06:fd:7f:8f:50:84:30:36:
         72:8a:5d:77:db:b0:98:cf:d7:bc:36:23:c6:79:e6:5f:69:bd:
         7f:ac:57:8a:61:12:eb:77:e0:cb:5d:12:fd:7f:a6:27:25:a8:
         2e:18:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:08:44 2025 by rpki-client