Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f40e3596-d67f-3bc1-a419-913cc206a9db.roa
File:                     f40e3596-d67f-3bc1-a419-913cc206a9db.roa (raw, json)
Hash identifier:          t7Rb+dGDvwmnASx+g9RjiBNKVihIbgDom834ASANGIQ=
Subject key identifier:   B3:8B:F5:7A:15:D1:81:82:D8:1D:82:81:2F:ED:3F:20:82:74:9B:5A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584824FA80534B691B140FEB04C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f40e3596-d67f-3bc1-a419-913cc206a9db.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     395747
IP address blocks:        2606:54c2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:80:53:4b:69:1b:14:0f:eb:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=0d5e5e16-5b62-4081-9f86-f99630b08563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:af:0c:2a:32:fe:96:96:e2:8a:ef:ac:d7:
                    83:10:3e:01:4a:21:fb:b3:98:6e:b2:40:ef:4e:93:
                    54:ba:de:c1:86:32:3e:5b:72:d4:15:0a:55:0a:b8:
                    68:da:73:ec:e8:71:2c:52:ed:93:35:4c:16:65:ba:
                    7f:c0:2e:a6:ec:2a:3f:50:31:42:80:79:b9:91:18:
                    94:af:4d:80:62:55:5a:32:ca:89:df:cf:67:33:1d:
                    a9:e1:d9:a8:9c:d5:4f:6c:28:1f:ba:91:e1:a1:94:
                    a0:4f:77:e4:af:c2:9a:14:98:42:eb:dd:f6:34:38:
                    b2:7d:fa:77:3e:dc:d2:c1:94:b0:69:59:6e:c8:e5:
                    1b:91:ab:d5:a6:75:0f:5c:2c:44:6d:2a:62:6f:0c:
                    a7:47:c3:a3:5f:6f:39:3a:81:6a:ae:25:64:e0:f4:
                    f4:37:65:c2:c6:13:84:8a:82:55:a7:97:4d:f5:73:
                    bb:e9:c5:c2:ce:82:69:5d:f5:9f:1a:24:a2:5c:7d:
                    97:50:64:1f:47:22:b3:f9:f8:d5:67:4c:7b:4b:08:
                    b8:aa:a4:2c:19:71:19:d9:14:fe:3e:07:02:d6:5d:
                    96:7b:7d:6a:db:b8:2b:7b:35:dc:54:2e:96:85:e3:
                    4c:b9:a4:ce:f6:29:59:50:64:e5:03:d0:d1:6c:15:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8B:F5:7A:15:D1:81:82:D8:1D:82:81:2F:ED:3F:20:82:74:9B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f40e3596-d67f-3bc1-a419-913cc206a9db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6d:22:40:ec:24:cc:61:3c:0c:a0:23:64:40:62:48:cf:fb:
         fe:4b:16:25:72:da:71:93:1c:a0:0c:44:5e:c2:33:f4:c8:0c:
         b2:8f:39:68:29:6f:a7:76:62:6b:72:37:78:4d:77:b8:7b:ab:
         e7:6b:92:3d:0d:f3:3e:11:46:64:7a:2b:43:63:b6:ee:fe:90:
         af:55:eb:76:54:aa:2d:05:ce:d5:fb:69:69:bc:c1:1d:d6:7e:
         31:dc:01:8c:5a:82:a7:0c:af:b4:11:0c:a3:ea:ba:12:40:0d:
         a5:c5:f7:98:52:82:46:c6:54:dd:c2:e1:c1:c9:c6:3f:c7:2d:
         86:6c:09:54:7e:bb:dc:a5:9c:31:f6:2c:19:5b:5c:d7:6d:99:
         4e:75:bf:0e:b4:fb:1b:cc:cb:3b:4e:78:63:c4:c8:aa:69:41:
         ef:f8:1d:fc:5f:f7:3e:fe:0f:b7:38:8e:e2:18:6e:9a:11:f7:
         d0:74:f0:ab:7a:fd:83:7c:61:b9:0f:f5:a6:6d:16:8e:ce:89:
         01:e0:86:9b:a0:85:c0:56:d9:80:28:06:28:38:e2:bf:f2:d2:
         35:20:81:0b:f4:a2:a6:8a:49:5d:a0:39:09:fd:72:d8:97:12:
         c7:fd:8e:53:dd:57:4e:57:7d:60:a9:67:6b:87:7d:e0:39:c1:
         17:bd:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:30 2025 by rpki-client