Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa
File:                     86d93acc-2536-31bf-8950-1dfaa1b48d16.roa (raw, json)
Hash identifier:          bdlMK0mbjDqb/NgqDWj+CCFiEdEiRssD4atCJ8FTqaw=
Subject key identifier:   82:D5:DD:32:FA:79:33:9C:A1:21:83:4F:F6:3E:6F:2D:1B:3D:06:BA
Certificate issuer:       /CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
Certificate serial:       010D0C9F43285848E2D10A9DAC236F1B77582580
Authority key identifier: 59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     19694
IP address blocks:        2620:136:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0a:9d:ac:23:6f:1b:77:58:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=aa15b4fc-9f21-468b-b340-b4398c30a9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:ce:c5:e3:ba:48:3c:9a:ec:b8:b4:c6:55:
                    25:45:01:66:f9:6f:dd:5b:f6:58:82:15:33:fc:db:
                    6c:3a:af:b8:1b:03:d0:95:ba:02:9f:7f:ef:b3:60:
                    24:6a:a9:77:77:62:c9:bd:81:fa:4f:4e:3d:77:97:
                    06:b2:d4:9e:77:cf:b5:56:9d:bc:ef:51:a2:85:02:
                    fd:71:90:8b:a0:80:08:66:b2:31:33:f5:51:3c:05:
                    03:fd:7a:f3:60:9e:33:26:18:5c:08:e5:1e:c2:34:
                    7b:00:c4:a0:c4:29:35:65:16:71:f4:3a:2d:88:63:
                    4c:8a:02:52:eb:f6:db:27:de:db:37:c6:ff:ab:34:
                    77:45:af:75:3c:6d:6a:87:55:de:f0:74:01:8e:04:
                    96:c3:02:fd:83:78:ac:6c:70:0f:55:77:e1:16:2e:
                    8b:d2:df:21:8d:8b:9b:7e:e2:00:54:5d:81:fc:29:
                    cf:3d:b4:84:29:ef:6d:cb:b4:5a:d9:57:9c:1b:13:
                    92:03:21:d6:bc:42:7d:6e:42:58:15:62:73:84:90:
                    81:17:04:5e:bd:b3:54:b9:98:48:18:73:f6:0d:3e:
                    d7:f0:12:3a:e6:02:76:ef:26:64:b9:c2:bf:36:69:
                    90:45:22:2a:cb:f8:2f:1f:13:bc:3c:dc:a3:15:22:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:DD:32:FA:79:33:9C:A1:21:83:4F:F6:3E:6F:2D:1B:3D:06:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl

            X509v3 Authority Key Identifier:
                keyid:59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:136:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:be:42:a5:1b:40:e9:75:bc:75:d7:5a:74:16:4a:8e:6e:
         32:93:46:86:a6:09:af:29:af:be:74:2d:94:bc:ab:95:29:41:
         32:b4:29:19:ec:b7:69:95:ad:f5:9f:7e:43:13:3b:82:b4:7c:
         0f:a9:17:02:1a:e6:13:1a:7e:ad:15:2f:2a:73:e9:97:6e:52:
         97:19:14:51:3f:ab:4c:30:54:c2:e4:57:9d:f9:c4:6a:76:e0:
         40:85:ac:aa:a6:fb:f8:c8:e4:96:1b:b0:d1:4f:e4:02:ee:2a:
         2a:55:0a:86:67:9d:ce:a0:02:36:c8:e4:78:a6:6a:21:a1:cf:
         70:f9:ba:ad:7f:e3:24:f1:9e:7a:e4:27:97:d5:cc:41:bd:22:
         3b:de:90:8f:c1:06:d4:0c:48:7a:a3:b1:76:b9:1c:f8:21:1c:
         84:18:a4:1e:27:62:2c:dc:b3:20:c0:02:39:86:f5:07:41:3a:
         8b:96:28:70:f4:de:a2:77:67:f6:83:dd:76:18:4a:63:ec:bb:
         0b:75:a2:65:ae:6a:16:3b:7e:d7:d3:f0:db:fd:ed:d2:b0:0d:
         3f:46:d0:c1:e6:7b:a8:ab:cb:92:bf:0a:59:8b:9a:5e:33:04:
         bc:7d:07:be:0c:7e:cd:07:ab:d5:67:58:c3:55:c0:5b:83:cd:
         8a:6b:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:02:11 2025 by rpki-client