Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/56595442-729c-37e3-9828-5c5571ca57c5.roa
File:                     56595442-729c-37e3-9828-5c5571ca57c5.roa (raw, json)
Hash identifier:          o28c7nFNkpdLHirgq6wXM8kuPU5ZYiOJ1avmXqL5eDg=
Subject key identifier:   C0:77:24:EE:5A:C7:4F:28:E6:86:3F:AC:62:32:D4:21:E7:20:7A:51
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285848547029366E64925324DE46C0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/56595442-729c-37e3-9828-5c5571ca57c5.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:2027::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:29:36:6e:64:92:53:24:de:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=2800b770-656d-4f69-b13d-22d067d7725b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:18:f4:d5:af:f7:a0:4c:e3:a9:a4:7e:7c:
                    d9:f3:e9:f0:e2:67:9c:d1:84:2d:2f:c3:7f:b8:fc:
                    5c:14:c7:47:40:c7:28:ce:ae:8e:a2:93:a5:42:ca:
                    5d:aa:7d:1c:42:cb:ae:04:83:2e:0c:95:74:e3:e0:
                    9a:5b:4a:3f:2d:c7:28:f0:fe:e9:d4:f9:06:68:df:
                    f9:15:16:0c:f0:57:10:52:fb:84:6c:63:d0:67:d9:
                    e1:0a:58:7f:73:34:f7:d4:d1:ee:2b:de:cc:3b:f7:
                    6f:8f:64:69:06:47:86:f3:ad:92:84:0d:1b:a6:aa:
                    f1:0c:0b:49:6b:0d:91:ce:9e:f8:5b:76:ff:8e:8c:
                    c7:1a:93:c6:71:b0:4c:66:9c:5a:a0:fe:cd:4d:5b:
                    7c:62:a6:f5:c7:1f:c0:88:ee:2e:45:76:b2:6e:ca:
                    8e:d7:49:66:fb:3d:2d:61:13:35:30:fd:e3:28:fa:
                    5d:bc:e7:85:50:7d:7b:5c:1d:5b:1f:65:46:f1:24:
                    c5:1f:a2:e1:40:71:37:a4:7b:2c:5b:6c:14:bf:88:
                    45:9b:39:e8:28:3e:52:3e:3b:87:25:c3:fa:fc:e2:
                    3d:48:82:67:19:15:fc:1c:a6:3c:80:9e:88:54:21:
                    55:44:ec:9c:af:36:89:73:e4:2d:4d:ce:12:88:6f:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:77:24:EE:5A:C7:4F:28:E6:86:3F:AC:62:32:D4:21:E7:20:7A:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/56595442-729c-37e3-9828-5c5571ca57c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:cb:e7:8b:1e:cf:4e:9c:b9:d0:da:0c:82:0c:79:e4:43:16:
         05:1c:18:28:07:aa:a4:07:eb:e5:50:65:01:c9:99:d5:eb:54:
         b2:d1:85:eb:c8:38:c3:d2:de:08:b7:b4:6d:e1:85:2e:99:cb:
         16:17:df:56:62:7f:bd:fb:57:c7:d9:f0:51:73:fb:08:65:0d:
         ff:0f:f2:97:3d:c2:75:1c:56:3f:d2:15:a5:58:d1:0d:eb:ec:
         2d:9f:00:d8:5d:73:64:55:0a:df:8c:02:19:56:8b:65:8f:b3:
         bc:1e:ed:ad:b5:67:d0:53:28:fa:b9:a6:5e:9b:f5:b7:ff:d5:
         90:0f:56:c5:68:1c:39:a4:b3:d8:93:d2:41:68:b0:fd:d4:1c:
         5d:52:1e:61:67:06:84:39:ae:ef:85:1c:b7:df:ec:bd:29:18:
         e5:af:c6:45:5f:5f:56:fa:bb:7a:67:cb:a9:da:ad:5d:28:85:
         fb:f5:a3:13:fa:9c:4b:94:04:0f:c0:8b:f4:3e:18:c8:b9:7c:
         d8:35:cd:d9:b6:73:b4:81:f3:f3:54:39:4d:0d:17:d0:2d:b0:
         f1:c2:c6:3d:ee:7d:2f:32:bb:d2:60:ce:33:2d:2b:ad:1e:30:
         b3:dd:94:8d:13:44:c0:bc:4b:a6:63:bf:a3:08:6c:d1:77:0a:
         c7:55:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:16 2025 by rpki-client