Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/194297f6-4281-3a31-b235-7f333868865b.roa
File:                     194297f6-4281-3a31-b235-7f333868865b.roa (raw, json)
Hash identifier:          BzHBYzrpWbEWSiyW14WsF2ckuRRQchMhK2ECCHuJlqo=
Subject key identifier:   4C:4B:9D:55:5F:96:82:32:39:B6:75:AF:72:18:9A:EA:80:7B:03:2D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584854702A1B31D6C4E6CA7D1C20
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/194297f6-4281-3a31-b235-7f333868865b.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:2033::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:2a:1b:31:d6:c4:e6:ca:7d:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=e2d86e27-8aee-44b4-99ce-c126ef38f2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:a5:65:5d:82:c1:67:f6:ff:4e:c9:52:23:
                    39:29:66:90:58:58:2d:33:8f:c1:dd:0b:a2:3e:77:
                    a3:3f:c2:8e:bb:cd:1f:1e:55:8f:46:90:69:20:e4:
                    c4:f3:2f:b9:65:de:89:e2:f0:a9:8b:56:2d:5e:0f:
                    bd:3d:09:7c:7f:77:68:f0:40:c3:91:94:ad:ca:c6:
                    70:87:8a:76:da:9c:4c:14:19:e2:31:49:2d:cb:22:
                    ab:ab:2d:92:05:b9:f1:73:26:34:3a:98:a7:12:21:
                    e2:fd:20:d8:88:69:d0:92:0a:ef:01:c3:8f:67:b1:
                    eb:8f:12:ed:7a:4e:1c:21:15:6a:4f:77:06:e4:52:
                    66:26:37:a3:97:0c:d6:c0:19:ad:6c:2b:95:32:24:
                    d4:0b:64:ba:7b:96:8e:14:f3:f8:8b:97:a1:e4:9a:
                    7f:7d:15:3c:de:69:f2:43:b4:14:38:77:e9:d7:12:
                    38:63:96:91:c7:31:83:98:a4:ea:b8:78:f8:0f:4f:
                    b1:6e:70:46:48:45:08:d8:0e:71:7d:a4:57:a2:4f:
                    58:80:1e:3c:ff:76:87:53:4d:c2:99:5a:61:4c:4f:
                    9e:06:c4:0b:af:73:54:f3:18:ed:8b:1c:6d:7c:68:
                    78:07:30:6a:03:48:5c:c5:36:e8:e9:54:15:be:ee:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:9D:55:5F:96:82:32:39:B6:75:AF:72:18:9A:EA:80:7B:03:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/194297f6-4281-3a31-b235-7f333868865b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2033::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:8e:12:67:9a:48:7b:17:2c:24:1f:d1:31:24:08:69:1a:
         49:6e:93:07:5c:64:3b:92:4f:56:fb:2c:d3:7a:ad:58:ee:67:
         fb:62:6c:0e:81:ac:dd:93:d9:75:2a:e1:4b:a2:67:67:39:04:
         6e:61:98:31:e9:fb:fa:98:57:77:13:ca:0c:b5:97:5e:da:d0:
         c1:0e:46:06:dc:29:11:24:eb:19:60:b2:1c:2e:9f:06:d2:bb:
         76:3a:23:5e:a0:7f:b8:88:f0:76:60:0c:c4:be:da:42:fa:e7:
         ff:e8:87:ed:1c:8b:bf:ea:5e:d6:62:e0:63:d1:d4:e8:3e:57:
         66:f7:43:34:93:70:ef:27:75:e7:34:ba:f0:b7:43:be:49:41:
         12:7b:d2:b1:7b:89:e0:6a:32:5a:48:33:24:3f:dd:b7:6b:da:
         e3:03:ea:3a:30:cd:35:29:ce:1f:4a:ab:c2:6e:2f:ae:ba:fc:
         17:93:de:71:84:89:3e:21:0b:70:b8:b4:fa:f1:72:d4:d9:4e:
         73:57:99:4c:03:05:f6:c0:27:83:58:db:42:60:84:ed:f7:70:
         6d:4a:d2:69:45:28:da:1f:2e:78:a9:b8:18:e3:ae:bd:14:fc:
         a0:72:e2:27:78:11:c7:e2:11:09:7e:47:26:ba:6e:f7:45:f1:
         cb:c8:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:35 2025 by rpki-client