Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
File:                     fa0b4834-eb01-397d-b065-c91c0aff8fba.roa (raw, json)
Hash identifier:          np8IKqdsIH4jR3abn2yS9Fe9r6wftscR28GASg4frDs=
Subject key identifier:   76:58:EA:19:48:F2:8E:21:1F:15:7D:B3:87:D6:8B:1D:71:EF:D7:F2
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F43285848100A84A67054570F8FED0440
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     32590
IP address blocks:        2602:801:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:84:a6:70:54:57:0f:8f:ed:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=23d983a9-a449-4719-a00d-4eebe81144ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:37:a4:11:b6:5e:5f:89:64:da:aa:1d:43:
                    0a:14:c6:40:c4:34:ac:09:32:b2:e9:a2:b4:f0:98:
                    a6:6b:6a:a6:6b:e4:74:5a:ab:1f:dc:ef:56:14:48:
                    fd:79:4c:c5:67:be:01:0b:a1:ff:17:c3:41:92:50:
                    92:25:67:7d:41:62:e7:6d:6a:45:d4:9a:de:b5:55:
                    9c:70:f8:31:be:00:50:73:d3:3d:b3:f0:8a:1f:7d:
                    d8:b8:47:2c:16:4c:8e:23:fd:9f:22:dc:82:32:c1:
                    6f:36:d5:40:f7:57:b5:30:c9:b0:02:d8:76:6f:d2:
                    88:50:9c:e2:c5:60:67:15:1a:b5:19:fe:49:7d:dd:
                    18:aa:fe:54:71:88:52:6f:4d:fe:b3:0a:da:c5:a1:
                    77:71:9f:ff:5b:7b:f5:a8:4b:11:04:bc:35:ad:68:
                    61:5a:67:5b:9b:38:cc:29:57:45:29:01:6b:ba:d9:
                    ea:2c:53:c5:60:fa:b6:7d:ea:43:81:16:64:e1:94:
                    4e:c4:44:ae:97:d5:7d:99:9f:72:6c:e7:c9:49:75:
                    b1:2f:48:e0:99:6c:76:1f:dc:cd:f7:c5:6e:90:3d:
                    71:ee:ac:3f:9d:c9:64:cc:08:81:9d:c4:c6:37:f9:
                    58:03:ec:c7:13:fa:6f:1a:20:36:d8:fe:0a:17:b4:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:EA:19:48:F2:8E:21:1F:15:7D:B3:87:D6:8B:1D:71:EF:D7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2c:09:55:75:b7:9d:ee:b8:0e:69:31:34:6d:47:06:50:db:
         cb:f8:10:a9:74:de:d5:a3:4d:e0:94:3c:fd:39:fd:c8:08:c0:
         2f:b2:81:60:68:8a:df:f5:02:33:61:91:c7:bc:85:f4:d6:ae:
         6e:04:f1:4e:7c:05:ba:d8:9c:4e:ee:a1:cf:7e:1d:16:0b:8a:
         71:2b:d4:2f:08:bf:c5:a3:ef:39:d4:6c:ce:55:3c:93:42:0d:
         f7:22:67:51:0a:4e:db:56:79:3f:15:c9:f3:ff:26:3d:71:54:
         46:3d:58:ec:c2:a9:7f:54:1f:ec:42:ed:28:f7:ab:46:5f:d5:
         db:e2:37:3a:c3:09:4d:e1:c7:30:d4:a9:df:13:38:ef:9c:ed:
         f9:95:a9:3d:6f:4d:3c:19:6a:62:bc:52:53:c9:b5:cd:fa:50:
         36:a2:51:46:04:48:d0:2a:ec:f4:22:20:ec:c3:0c:fe:be:3c:
         ac:d5:be:db:22:27:d6:04:20:df:33:1e:cc:9c:3d:33:b0:c4:
         2e:24:82:10:8c:27:fe:a6:51:07:ee:d3:59:79:60:5c:de:a7:
         13:be:cb:5b:f2:04:26:de:a1:39:84:49:d2:d5:0e:d4:51:7c:
         db:0a:e0:91:ea:c6:dc:40:9d:0b:c7:a4:3b:64:de:57:a2:f1:
         f6:81:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:47 2025 by rpki-client