Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/fa4eaa0d-1685-3bf9-b6a3-e8f3a2cf0f2a.roa
File:                     fa4eaa0d-1685-3bf9-b6a3-e8f3a2cf0f2a.roa (raw, json)
Hash identifier:          KQVGaaDG8PSVDVUiY7ERyzfYMaExg2NisIXczfaPu5c=
Subject key identifier:   78:C2:11:7A:C5:4D:F9:AC:5D:8A:5A:41:1E:B5:07:3F:12:6D:7C:73
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F432858485470363F9F9A3A6448A91500
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/fa4eaa0d-1685-3bf9-b6a3-e8f3a2cf0f2a.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:2042::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:36:3f:9f:9a:3a:64:48:a9:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=8174d608-837e-4c9b-9448-ad3f945efda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:52:8f:67:ca:4c:ea:02:05:ad:17:09:09:
                    f9:7e:5c:18:e0:78:87:6c:63:d8:09:b7:25:c8:98:
                    c8:e4:49:af:13:34:81:17:0b:64:30:b1:3d:28:e9:
                    1c:fc:9d:26:ff:6a:92:89:08:a9:f3:22:cd:52:6e:
                    32:1b:f3:01:9e:b5:3c:36:ea:38:66:4e:d7:6e:c6:
                    56:2e:3f:c6:b5:00:d7:7a:4b:72:ff:75:d3:f4:b1:
                    6b:38:65:29:4f:63:a3:11:fc:cb:42:49:3e:1f:5d:
                    38:d8:a3:45:6c:09:a5:b2:cf:d0:74:c3:d4:d4:90:
                    0a:81:b4:e9:09:86:f7:3d:8b:d2:b8:36:2b:bc:a5:
                    32:21:7b:b6:43:75:b6:9a:f3:1d:b7:97:51:5e:80:
                    be:9e:da:16:bc:ba:f4:61:83:b4:ab:14:79:bc:f6:
                    f7:a2:9a:37:80:1f:57:77:bd:af:dd:f3:8b:95:73:
                    b8:c6:36:fd:a2:fb:94:04:32:e5:67:bb:2a:17:43:
                    09:c4:b0:41:5f:26:44:bc:83:d0:66:37:65:7d:ea:
                    71:8a:36:2f:70:fd:1d:85:1f:c6:f9:1f:5e:21:d6:
                    bb:cb:c6:95:58:11:4f:f2:6f:37:76:e5:8e:04:93:
                    a1:54:9a:13:82:3f:8f:db:cd:e9:59:8e:93:e1:93:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:11:7A:C5:4D:F9:AC:5D:8A:5A:41:1E:B5:07:3F:12:6D:7C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/fa4eaa0d-1685-3bf9-b6a3-e8f3a2cf0f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2042::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:1a:8f:e2:65:b1:dd:ae:82:4c:d4:b7:68:1b:cb:42:70:
         00:94:df:59:bd:b8:ba:85:ab:d5:74:8b:64:e7:e1:c7:20:4d:
         c3:6c:42:14:77:4c:05:ad:c4:de:57:4a:d6:2a:d5:55:71:27:
         59:7a:93:65:b9:a4:da:48:74:78:33:1c:6e:22:7e:ef:08:0a:
         ec:36:fa:93:1a:87:da:39:30:ce:d1:3d:a9:f8:21:02:44:82:
         56:ba:31:26:60:fe:b6:4d:80:70:ed:3d:07:bf:86:0d:b0:29:
         11:97:a2:3a:af:9a:20:24:e4:f8:a4:3a:da:6e:7c:71:7c:d5:
         58:6f:84:b6:67:04:cd:0b:75:9c:8f:e4:89:ef:e8:a7:e5:b5:
         8d:d4:6f:ac:e2:6e:3f:0f:94:0e:55:e0:b0:8f:07:88:45:37:
         54:a7:37:0a:61:f9:38:9e:71:f2:dd:a8:f3:d7:dc:50:61:0c:
         e5:60:38:c1:85:cd:0c:a4:21:76:f3:30:4a:e0:ab:ad:6d:bb:
         61:1d:d8:67:36:e6:3e:68:d9:d8:7b:33:da:fb:50:b8:e2:4c:
         5f:cd:b0:e0:20:5a:df:a7:12:63:3a:6a:89:24:ad:06:4a:26:
         12:4c:54:25:a4:ef:83:7f:42:61:b5:28:40:59:7e:be:ce:36:
         1e:9e:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:24 2025 by rpki-client