Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/4f557bf4-a202-3b14-bef1-7595ebc92550.roa
File:                     4f557bf4-a202-3b14-bef1-7595ebc92550.roa (raw, json)
Hash identifier:          nVLWW0RszdkvAdTXQZ0vHVwe7bYC+NestV9paFXN0Gs=
Subject key identifier:   FC:5A:A4:01:0B:53:7A:4F:44:37:D7:AA:EF:B9:12:45:D5:74:78:D2
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F43285848DEA1338CEEDBDFF0EB3391C0
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/4f557bf4-a202-3b14-bef1-7595ebc92550.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     32590
IP address blocks:        2620:f9::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:33:8c:ee:db:df:f0:eb:33:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=10573570-2384-421a-b193-6f5226a810f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:b6:d8:f8:f0:0f:8a:e3:ce:ba:aa:d8:e6:
                    7c:53:6f:72:da:99:76:b9:1a:9b:f4:60:30:bf:7d:
                    0b:cf:fb:9c:ea:70:45:de:66:8f:48:d3:0b:84:40:
                    82:94:95:ad:e5:97:8a:87:b4:42:83:05:2f:14:bb:
                    5b:8a:de:48:38:e3:5f:90:48:20:07:57:3e:c9:4b:
                    d7:aa:99:f7:34:ed:ab:78:75:98:81:16:b1:9f:27:
                    38:b2:3e:55:a7:be:d9:b1:26:8f:cb:03:d7:91:a9:
                    86:98:f6:91:8e:19:e3:b2:73:b5:d6:5c:3f:2f:db:
                    19:7d:48:ce:ad:58:aa:6e:18:ff:4e:b3:24:6a:bb:
                    c5:13:54:fb:11:c2:2e:25:6c:3e:98:d2:e2:8c:37:
                    6d:89:32:13:5a:c4:3c:70:37:bf:93:ef:92:d0:4b:
                    cc:c0:85:50:8b:37:e2:ef:e8:ab:e0:6f:73:ac:2e:
                    10:5b:4f:50:bb:dc:30:4d:ca:33:1b:61:7f:34:96:
                    fb:d3:96:a2:75:9e:6a:d0:93:7e:89:d2:bc:6c:26:
                    e7:1a:71:19:40:92:cb:76:dd:b9:19:b6:92:56:b3:
                    af:23:15:21:00:4b:6c:3f:5b:96:78:3a:19:30:23:
                    86:90:43:90:be:08:63:29:b3:47:8c:8c:62:1f:18:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5A:A4:01:0B:53:7A:4F:44:37:D7:AA:EF:B9:12:45:D5:74:78:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/4f557bf4-a202-3b14-bef1-7595ebc92550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f9::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:af:c0:55:0a:95:fc:32:d3:a0:b6:81:96:f7:84:98:fb:73:
         29:f7:cb:dc:58:4d:90:2e:72:e6:81:44:6e:0d:b1:7d:10:54:
         52:70:66:9f:26:c8:9f:73:ed:c9:f7:18:7d:ab:0a:1c:d5:5f:
         fb:bd:63:c1:8d:a1:44:bd:aa:30:30:c0:4e:d7:a6:46:b9:f8:
         9e:fb:3a:3a:0c:16:ab:f8:59:bb:1c:87:66:a8:36:e1:81:ae:
         96:c8:32:da:bc:9a:f1:ca:65:2e:af:35:42:13:87:8d:1c:25:
         bc:48:d7:ca:03:a9:5f:03:e5:e0:d9:07:35:65:33:64:bd:44:
         3f:23:91:be:cc:f1:c0:e1:d7:3f:0a:25:2e:d4:26:8f:08:8f:
         7d:03:18:e4:96:bb:d3:7d:22:0b:0e:31:34:48:bc:52:40:d0:
         32:b1:92:90:8b:dd:21:65:50:55:af:c0:3d:e9:fd:3d:78:db:
         8c:9f:ac:fb:b8:5c:a1:bd:03:4f:25:ed:f1:0f:b3:96:58:c1:
         d5:9f:14:0a:7e:58:2b:5d:46:f3:34:f8:3a:d5:88:ff:88:d2:
         40:9f:a3:64:ae:87:9a:99:e3:ac:50:12:e5:9d:cd:a2:81:66:
         ff:d4:6e:b8:42:9a:a7:45:de:ef:22:06:44:11:6e:a6:2e:e0:
         9a:e2:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:56 2025 by rpki-client