Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa
File:                     50ed8739-975a-3a90-9381-8342f4d01a7b.roa (raw, json)
Hash identifier:          TRwLt0XolL7/qr0fcdLWv2cv7IWrQOGdfAusX+/RVKM=
Subject key identifier:   50:D0:86:C5:15:84:AE:4B:8C:D1:0E:67:26:B0:69:B3:8A:3B:26:FE
Certificate issuer:       /CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
Certificate serial:       010D0C9F43285848E16BE40EF56E96116A9E3F80
Authority key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     2552
IP address blocks:        2606:fd80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e4:0e:f5:6e:96:11:6a:9e:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=93b1ec10-a569-46ff-981c-5d42f8b2efda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:c9:1a:c7:92:30:85:c4:39:9a:97:b6:a5:
                    25:75:3d:16:c6:be:6e:6c:bc:fe:d6:62:bd:3d:85:
                    0f:ae:40:c2:2a:ef:0c:d7:6b:8e:e4:ae:3e:14:e8:
                    71:5d:a7:61:b2:e2:8a:26:80:3e:3e:73:8e:88:9f:
                    1e:11:2c:9c:d3:a4:51:ce:d3:d2:33:5b:37:ab:e9:
                    39:b0:9c:f5:3c:91:50:61:87:a5:38:c5:81:e8:08:
                    57:0d:4f:8c:0b:48:26:e2:a6:07:18:d9:bf:72:7d:
                    84:fb:69:75:e6:da:bf:a0:14:89:a4:ee:49:2d:a2:
                    87:18:16:a1:c6:d2:7f:56:e4:0e:5c:aa:fe:3c:64:
                    49:04:01:24:52:17:22:80:09:ff:19:f1:19:87:94:
                    ee:ab:d6:76:c0:27:87:da:2d:4a:36:d0:6f:7b:69:
                    5f:2c:62:30:ad:cd:63:28:a7:28:fd:da:cd:dc:75:
                    e8:89:bf:8e:77:dc:68:a3:bc:d4:0b:d0:fb:40:71:
                    ef:44:a1:6e:ae:0e:8f:81:50:63:9d:b3:36:9b:a9:
                    16:c1:5e:24:f6:db:a9:54:77:b1:d1:82:37:7e:ea:
                    ec:54:c9:3b:e5:62:4a:3e:df:a5:ad:f6:67:ac:fd:
                    b5:e7:ca:c6:d2:9c:58:e3:5b:cd:61:6c:3f:4e:cb:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D0:86:C5:15:84:AE:4B:8C:D1:0E:67:26:B0:69:B3:8A:3B:26:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl

            X509v3 Authority Key Identifier:
                keyid:A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d0:93:a1:be:f4:22:1e:18:ee:0f:53:ea:d0:e5:36:59:b7:
         7a:42:94:f4:70:f6:9b:e2:ad:f4:f3:ae:4e:59:1c:8d:fd:01:
         83:97:bc:66:46:78:ca:92:05:cf:24:d7:41:1d:07:bd:68:8f:
         86:4c:b0:a0:cb:91:5b:df:87:ee:d5:c9:3f:3c:45:75:c6:44:
         a0:38:f7:63:26:09:91:31:dd:4f:67:38:83:a0:d7:c3:c0:e9:
         53:88:b9:d2:23:a9:5a:0f:f6:33:1b:bd:14:09:fb:3f:1e:14:
         97:c7:a1:39:20:48:a5:eb:7c:c5:0f:e9:5c:33:9d:0b:1e:b5:
         39:b0:d1:63:2c:f1:14:f0:80:60:63:b5:00:16:76:8c:47:c7:
         b5:09:14:92:01:1d:12:b9:0d:ed:09:39:5b:10:29:a8:f2:b8:
         26:d2:35:97:d2:b7:f8:2c:fc:40:0c:39:bd:52:7c:68:e2:2e:
         e7:71:37:4d:58:45:4a:98:6d:b7:86:13:fd:74:cd:4c:7a:44:
         5a:71:5b:a8:56:9b:d6:dd:bf:c0:f6:a3:40:16:c8:d0:92:0a:
         2d:3b:ed:ba:d4:8f:6b:32:ee:dd:12:97:6e:dc:73:2f:1d:8b:
         66:56:14:ab:a9:d6:42:55:b9:96:ae:85:d4:01:79:4d:e7:66:
         b6:b6:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:28 2025 by rpki-client