Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa
File:                     5237a8f7-1744-3119-91ea-26b40463c896.roa (raw, json)
Hash identifier:          ci27RyE2Qi/6iGk0CWLypreKhkknl6ZyfDX0CEWxhi8=
Subject key identifier:   15:C2:D2:E5:C3:15:93:B2:05:C6:E0:63:AA:00:CB:80:28:7B:A9:DC
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F4328584819CFC14FBD9F5F1BA8AB03C0
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     397677
IP address blocks:        2602:800:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c1:4f:bd:9f:5f:1b:a8:ab:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=a47f8b9f-d5b9-408e-89ff-20af9022de17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:5a:b9:c4:a2:48:e2:e0:37:24:a0:51:23:
                    49:dc:f4:c5:26:af:f1:8a:a6:84:51:2b:1b:6b:d6:
                    c4:98:15:a2:52:2d:48:89:a8:0c:2c:ec:80:4b:42:
                    3e:c2:70:66:3d:a3:14:99:f8:43:9d:d5:01:a3:73:
                    f5:14:b8:59:ae:52:a0:68:2e:f4:ee:af:4b:64:45:
                    d4:7f:00:d5:86:e6:e8:bc:0c:9f:0c:49:6a:f0:01:
                    6f:7f:a6:4f:34:e4:7c:2b:c0:d0:75:6f:33:d7:e5:
                    ae:a8:b7:5f:75:27:9c:b3:90:6a:50:02:28:d6:aa:
                    69:14:35:d6:3b:25:83:64:15:90:8a:81:70:18:ea:
                    f6:dd:7e:14:fc:7e:9f:99:02:42:35:32:e1:2d:8e:
                    c7:59:cb:63:4f:47:50:10:7d:26:19:72:a4:7b:5c:
                    ef:1c:61:a1:6f:2f:91:2a:6e:0a:d4:0c:6a:17:b1:
                    88:7c:4c:c7:63:79:51:9a:b3:ec:ea:77:47:88:8a:
                    51:f8:28:65:a5:d2:23:bf:54:15:cb:1e:84:e3:73:
                    b6:d2:61:43:2e:b3:2b:b7:ab:4b:e6:48:da:0e:9c:
                    ea:10:99:24:7b:da:81:eb:ef:f5:71:14:57:c5:3f:
                    7d:95:1e:06:3f:1d:d6:3d:c0:40:82:19:37:7c:3a:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C2:D2:E5:C3:15:93:B2:05:C6:E0:63:AA:00:CB:80:28:7B:A9:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/5237a8f7-1744-3119-91ea-26b40463c896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:800:1005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:d1:4b:b1:75:d5:27:f9:a7:a6:09:fb:1a:77:23:8b:9b:
         da:28:1f:64:9d:cd:f2:e9:b0:04:9f:2c:cd:94:84:55:1c:53:
         ab:a7:0d:d3:d5:b8:8e:0e:eb:8a:e5:b6:0a:f4:ac:cc:bc:98:
         6b:9e:9d:49:13:19:ca:1a:71:6e:a3:1f:21:fe:8d:ed:a0:2a:
         20:20:bd:b3:26:4b:1d:3e:f3:1b:f8:fd:f1:6b:25:a1:66:3b:
         b5:71:e9:79:f7:43:fe:11:54:36:9e:18:a9:cd:ac:15:6d:61:
         b5:a8:ef:83:58:14:4b:a2:9a:54:96:88:b4:15:51:bf:1e:dc:
         3b:c6:b6:fb:a8:6b:cd:ed:aa:94:99:af:46:88:ea:19:86:1d:
         2b:45:56:1d:9a:cc:4f:a5:df:11:a2:90:49:1f:36:40:38:f9:
         0f:3e:1e:c4:32:19:97:7a:60:8e:9a:8e:b7:cd:3a:78:93:61:
         e5:8d:99:60:1b:62:c6:0c:42:a4:01:58:d8:48:05:1f:1d:f7:
         e7:37:54:77:5b:0e:53:eb:0b:99:19:af:e1:34:b4:d7:63:c4:
         5d:dd:15:31:21:3b:32:72:8a:cc:2f:38:c9:15:f6:2c:e5:36:
         51:41:07:a2:49:27:03:23:b3:28:f3:24:cd:07:70:24:ef:28:
         29:e0:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:36 2025 by rpki-client