Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/9af7b462-a651-3003-90ee-96602b4f694b.roa
File:                     9af7b462-a651-3003-90ee-96602b4f694b.roa (raw, json)
Hash identifier:          wTYf3kNwCtEyix3qdrX1R7D1gpHuykzNDVEUx2BaA0Y=
Subject key identifier:   D4:E2:4E:DD:50:6F:C2:8B:95:A6:31:25:8A:72:4D:50:7C:BD:27:91
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285848547029D43271C4184FC8C980
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/9af7b462-a651-3003-90ee-96602b4f694b.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:2030::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:29:d4:32:71:c4:18:4f:c8:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=b8134ee8-d10d-4329-abfc-63fa0affa9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:02:ba:bd:fd:2f:38:5f:fb:4d:8d:71:ec:ad:
                    44:cd:4e:f3:fb:ef:eb:4b:09:5d:b7:72:a2:0c:bc:
                    aa:f0:c3:5a:78:b7:14:4c:82:37:cd:77:40:cc:e6:
                    bc:ba:35:21:91:7a:2e:b3:15:70:5e:29:37:43:d8:
                    45:48:f7:f3:fd:0c:94:72:fc:cb:33:24:47:e5:ad:
                    2d:f3:f0:77:9f:cb:d5:8d:65:c8:72:72:b9:c0:1a:
                    50:8e:68:5d:f7:70:26:09:42:40:01:2c:41:dc:db:
                    9a:da:f9:6c:a2:95:02:8d:ef:29:5c:93:1c:dc:ae:
                    e5:66:d6:db:a1:58:cd:10:27:69:48:b7:63:0f:9d:
                    16:76:1f:76:f6:1b:70:39:8e:3a:ab:ff:fe:00:bc:
                    9c:f8:c6:85:05:df:61:85:78:8e:9b:b8:30:b6:58:
                    98:f0:2b:e7:d7:c8:d2:f7:1a:40:82:76:a7:88:64:
                    e6:4e:5f:07:5f:04:92:0e:c7:c1:60:75:66:db:86:
                    0b:af:df:58:d6:93:74:a7:26:97:0e:13:96:c1:f4:
                    64:bf:20:0e:c8:f7:85:24:6c:ba:19:04:9c:d8:83:
                    e9:bf:ad:4c:af:e9:f8:94:db:ae:5a:1d:ca:cc:d2:
                    3b:1f:c7:c5:e9:03:45:37:e1:61:1f:56:18:64:8c:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E2:4E:DD:50:6F:C2:8B:95:A6:31:25:8A:72:4D:50:7C:BD:27:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/9af7b462-a651-3003-90ee-96602b4f694b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:f4:d9:6f:be:24:ed:5f:f4:fc:28:91:e5:da:7f:e8:55:
         97:06:2a:01:df:ed:b7:39:5d:2b:45:0e:7f:90:e3:fe:52:77:
         52:2e:13:30:c7:90:7b:f9:33:92:23:b8:0f:42:ee:c8:10:9a:
         b5:94:21:e4:75:1d:d4:5a:48:7a:f6:ec:ae:5b:04:f3:b6:b4:
         87:ff:e5:38:de:93:44:74:db:70:18:02:13:10:ef:70:71:0f:
         fb:96:13:e5:3d:42:a7:d0:85:4d:f5:31:74:2f:8c:15:74:a3:
         07:fa:4c:8a:f8:49:bf:58:49:90:c5:8a:22:92:76:f7:d4:48:
         aa:5f:e9:e8:d3:dc:69:d2:80:f5:8a:3e:1b:3f:6a:4c:71:53:
         65:c4:8e:75:1d:83:3b:41:7e:0b:a8:db:78:1a:4c:25:b1:28:
         39:37:cb:0b:d9:cc:58:1c:bc:18:85:23:1a:ec:84:be:20:48:
         8b:07:58:bd:8e:db:86:5c:d7:d3:b1:c4:33:00:5b:96:55:3b:
         9f:31:92:88:58:36:5d:f6:62:4f:e6:32:2b:c3:59:6b:cf:23:
         b9:19:62:34:91:f9:a6:77:7d:bf:b7:71:a8:04:a2:70:be:9f:
         94:23:99:a6:a6:a5:10:1d:75:94:4a:ed:36:41:3d:63:67:36:
         d1:34:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:26 2025 by rpki-client