Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa
File:                     7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa (raw, json)
Hash identifier:          xj+8GiWpG2U5rSA15P3kEToLsxpPiV6+75ppb1CHhcU=
Subject key identifier:   4F:E4:0C:0A:44:F8:0E:92:5E:BF:C1:6B:0D:19:77:DC:CF:55:DF:EC
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584854702B4C6D8C70AC9AC4F480
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:20a2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:2b:4c:6d:8c:70:ac:9a:c4:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=435881fc-0821-495b-94c2-07b77b7912ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:54:c8:f3:8a:2a:0b:b9:b8:cd:a8:11:66:
                    73:ac:b0:47:fe:61:88:00:71:9b:9a:ab:78:9c:5e:
                    20:d1:56:02:e5:fd:a7:5e:b0:9f:89:9b:12:3f:91:
                    b5:e4:e2:ae:4b:0d:6c:63:04:3c:29:2c:dc:7c:f2:
                    f9:1a:10:1d:bf:2a:20:66:b8:52:8e:f7:e1:15:9e:
                    50:a6:2b:b5:8d:fa:eb:b1:73:27:fe:68:7d:98:76:
                    52:2a:4c:76:71:a5:f1:26:bc:e3:23:48:b2:c1:6a:
                    a8:e5:11:9b:f6:ca:a8:75:44:37:13:b4:93:8b:bb:
                    e0:51:91:68:62:af:d3:4a:21:ae:ce:99:f2:15:0e:
                    b5:e8:dc:b1:ba:4f:43:63:3c:33:65:e6:43:92:48:
                    aa:03:51:f4:17:6b:ef:d2:6b:69:c7:42:b0:f7:aa:
                    23:d1:77:45:d3:06:11:71:a5:dc:21:d7:73:43:99:
                    00:b3:c2:22:d4:42:c8:bc:df:36:ae:df:20:a0:9c:
                    e1:45:1f:50:8c:cc:00:84:aa:c8:01:ca:36:41:78:
                    c1:18:0e:3a:12:95:28:ae:d1:d7:f2:da:62:54:9e:
                    73:da:60:1d:03:a0:c7:55:91:f7:78:37:f2:95:4c:
                    80:d5:45:90:45:20:f6:a3:00:f0:d5:a7:69:24:fd:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:0C:0A:44:F8:0E:92:5E:BF:C1:6B:0D:19:77:DC:CF:55:DF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:88:6f:16:05:75:04:05:93:a6:be:9c:79:77:12:23:12:32:
         4f:73:d2:b2:6e:fe:2c:86:08:bf:86:99:6e:88:a8:2c:0a:9c:
         1e:fb:85:46:87:c0:37:67:64:0b:83:a3:f1:71:61:c3:cd:eb:
         15:01:80:24:d3:79:4f:0f:52:1a:47:c4:0d:55:61:96:ff:e8:
         a9:16:af:67:d7:cb:33:49:a0:10:98:f5:a3:ff:22:fd:a0:41:
         8d:79:43:d0:c0:91:04:52:13:c5:58:8a:61:63:45:62:7f:62:
         ea:db:03:3a:ea:7a:48:c8:b4:c7:0f:ca:2b:4b:f5:da:dc:82:
         99:4e:14:d8:df:3c:ac:37:db:e6:09:57:ae:ba:a7:75:9c:2a:
         c8:2a:1c:60:6f:c0:76:c3:72:24:13:a5:9a:10:c2:2e:49:85:
         59:29:80:e7:c8:51:4c:5e:e8:91:70:d9:43:7e:e6:5b:1c:89:
         8e:6d:ca:99:92:3c:d5:3b:99:08:87:2f:bf:28:ab:9c:c7:82:
         ab:cc:94:b1:44:c2:d9:3e:4c:e9:d0:b2:a4:13:a1:3f:c9:d3:
         24:f8:4c:8c:b5:c4:02:1b:2e:a5:93:8c:13:60:ff:39:0d:4f:
         72:c5:f0:28:bc:50:35:79:80:07:9e:f7:43:6d:8d:c3:4f:ee:
         2e:ea:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:49 2025 by rpki-client