Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810534a2-2a37-3ffb-b636-ad1277971942.roa
File:                     810534a2-2a37-3ffb-b636-ad1277971942.roa (raw, json)
Hash identifier:          c71AKit1houBMUWQ4xKUpFs+RzdF4y6Kplc8WtH0CBA=
Subject key identifier:   12:5C:0E:AD:85:3D:6A:1D:D9:C8:41:4E:32:8D:27:A9:6B:CD:04:DD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5CB7C8CF5CA9DC9BDCB140
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810534a2-2a37-3ffb-b636-ad1277971942.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:304f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:5c:b7:c8:cf:5c:a9:dc:9b:dc:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=fbd3036d-491c-4bf0-a7f1-8dde153221cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:b7:13:0a:8f:c0:84:56:90:87:b6:b2:d5:
                    e1:ad:63:ef:86:a1:ad:8e:12:c5:ab:38:7b:0e:38:
                    74:dc:77:d6:6e:d4:85:31:fb:13:ef:22:9e:bc:4c:
                    97:9a:8f:14:e6:88:d7:2a:50:fb:85:b6:b9:60:fb:
                    19:db:90:c4:51:68:bb:aa:ee:37:2c:94:6f:a7:5f:
                    a8:d5:3d:f1:6c:0f:22:2f:89:f8:df:cd:1b:09:68:
                    fa:90:da:dd:14:f7:f4:64:00:08:34:d8:54:90:87:
                    9f:e4:a9:48:e5:32:e7:5c:e0:30:14:8d:65:ab:d8:
                    37:31:c3:16:78:c4:86:c7:bf:e6:f5:3d:61:d1:63:
                    c6:f8:cd:71:16:0c:1b:a9:c8:0a:95:b8:e3:4a:91:
                    b4:f3:7b:4d:1b:cb:80:2a:ee:07:8a:35:68:cc:e7:
                    41:8c:88:f9:e3:df:dc:50:9b:14:d2:28:b2:c2:4b:
                    97:a8:e6:3b:f1:8f:fe:96:0d:6d:42:ec:93:38:39:
                    51:ea:3b:dc:50:61:89:dc:de:4e:7f:d7:35:35:78:
                    3f:37:bd:65:da:11:10:25:c2:d3:62:89:b6:b5:a4:
                    2c:00:eb:bc:77:ad:bc:79:ec:23:f6:8d:51:46:7b:
                    87:88:c3:90:ec:43:a1:f6:36:ba:4d:a0:b2:7c:b4:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:0E:AD:85:3D:6A:1D:D9:C8:41:4E:32:8D:27:A9:6B:CD:04:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810534a2-2a37-3ffb-b636-ad1277971942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:304f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:d6:8f:d9:9b:7f:04:ae:2d:5e:c2:a3:4c:11:0d:5e:ce:
         f8:29:7e:53:6d:12:fc:57:9d:23:fc:31:d6:75:fb:4e:26:56:
         68:fb:22:d3:9b:a0:b7:e9:49:96:03:d3:75:c9:99:63:a8:de:
         d4:51:1d:b5:e8:b6:23:31:9b:3d:2f:35:26:b4:4c:37:56:1a:
         ba:ef:d1:9b:c7:f7:b3:b6:99:f1:8e:0a:c7:12:86:4d:3d:f3:
         8a:0e:d3:26:ee:56:60:28:91:c5:ef:4a:f9:91:c7:62:7c:e2:
         09:8d:3b:45:60:82:c7:82:87:f9:49:d1:33:d9:62:76:05:b6:
         d9:a9:6e:ce:b4:05:06:1a:a5:07:e3:5c:d5:e3:af:0b:f3:ab:
         49:cc:89:7b:8b:8e:45:07:28:51:30:55:55:9d:13:23:54:e6:
         9c:9c:67:37:9d:48:75:69:45:6a:d8:4c:3c:82:3a:17:59:70:
         4e:58:4a:96:f8:28:0c:e2:ea:be:e7:be:53:c9:18:6e:af:11:
         b9:92:25:50:f8:1d:9c:ef:18:d6:69:ef:f6:10:a6:45:cf:2a:
         2b:70:66:ac:70:d6:2e:1b:5e:e8:9b:11:a4:41:bb:d2:ba:49:
         da:d8:93:a4:99:6b:e2:8f:2d:bb:ab:cd:c7:2c:9c:81:08:58:
         d7:21:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:20 2025 by rpki-client