Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/1d3a5574-9954-3f8c-bc39-53698c31c9b1.roa
File:                     1d3a5574-9954-3f8c-bc39-53698c31c9b1.roa (raw, json)
Hash identifier:          4VHkxHlrsiOh2lr8fYHNPAcUJ6qp4j2t/D5WRO5a6II=
Subject key identifier:   58:55:61:32:99:DB:C5:44:F9:E1:CE:66:DB:D2:01:73:B2:8A:47:95
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F432858485470369F0D569F2364AA6F00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/1d3a5574-9954-3f8c-bc39-53698c31c9b1.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:2048::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:36:9f:0d:56:9f:23:64:aa:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=423078b1-b58e-4eab-884f-844bf5466467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:e0:ca:aa:a8:2d:a5:d5:92:c6:8a:14:2a:
                    a6:1f:46:42:1e:fb:b5:2e:ac:8d:fc:67:d4:e7:72:
                    45:0b:aa:15:30:6d:04:5a:86:c3:9b:94:f5:32:91:
                    3b:77:1c:1b:77:8a:ed:d7:29:1c:ab:86:1d:ee:87:
                    b3:db:7f:dd:72:3d:fb:3c:1e:bb:df:25:5a:6d:b2:
                    6a:b8:71:3c:d3:48:6e:82:08:ea:68:a6:b2:9a:2f:
                    19:c0:1a:ca:71:9b:c5:d4:ac:fd:38:58:b6:34:4a:
                    eb:71:50:3c:70:b0:2f:40:7d:3a:50:c8:ad:18:20:
                    1e:c7:56:87:52:88:c5:e8:17:48:86:0e:61:c3:3d:
                    89:c2:1c:d3:25:4b:d7:8a:c3:c7:35:fc:36:98:32:
                    85:39:c9:37:cf:61:42:9f:43:c2:9c:6b:67:73:20:
                    8c:b5:82:b4:2f:19:63:04:a4:c3:dc:ba:9e:8a:4f:
                    ca:33:c6:ea:0b:8e:35:0b:b3:f0:74:c8:d3:5d:55:
                    50:68:2e:a5:d2:99:ef:df:51:f1:21:15:24:13:eb:
                    5d:e2:31:b2:91:4e:e9:9f:64:68:6d:59:b6:9e:5d:
                    f9:b0:83:dd:1c:e7:91:05:97:8a:ef:77:7a:72:51:
                    5c:41:13:a2:d4:19:a6:13:af:65:92:d8:3c:e2:33:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:61:32:99:DB:C5:44:F9:E1:CE:66:DB:D2:01:73:B2:8A:47:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/1d3a5574-9954-3f8c-bc39-53698c31c9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2048::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:52:6a:57:b1:c9:ec:5f:c4:4d:73:20:31:16:33:8f:d9:c6:
         84:7a:51:f6:d7:68:0b:01:1b:d2:8d:2d:0e:7e:d1:64:8c:11:
         d7:4f:3a:c2:ab:d0:16:05:f5:88:35:57:a1:5f:99:a1:6d:f3:
         2c:c7:40:6a:e9:4e:fd:fd:9e:fe:75:3e:10:c3:3f:4d:5b:5f:
         40:c0:1d:b5:d7:f2:32:ec:08:e5:12:84:dd:55:94:65:e2:e9:
         ea:47:ff:db:21:de:43:bc:96:63:9c:17:98:2a:71:84:f5:e1:
         32:40:0e:0a:6c:bd:df:09:0a:3b:72:d2:55:b7:48:3f:b9:19:
         08:cd:2e:e8:9f:6c:94:a7:8a:f9:e9:02:82:40:04:27:e2:c0:
         0d:49:8b:f6:ef:36:ce:ca:9c:66:68:26:99:47:18:a7:6d:f8:
         f4:15:25:de:9f:45:f6:fd:53:47:1b:c9:3f:ac:34:f8:6b:2c:
         76:86:bc:2b:2a:95:69:32:8c:cc:11:22:67:5a:ad:07:30:b1:
         f9:fc:8d:39:20:74:11:5d:53:5d:22:99:00:a0:7a:65:7f:7c:
         86:e3:e0:76:37:7e:9d:6c:5e:c7:d3:d6:20:0e:fa:19:e8:9e:
         60:f0:7f:d3:fd:4f:7d:eb:4e:f3:ad:97:b7:df:62:ee:7d:11:
         dd:4d:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:11:04 2025 by rpki-client