Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
File:                     924bc74d-b046-30c2-b4cc-123603abad90.roa (raw, json)
Hash identifier:          IgLr/r3/1dTl3CyCaYQlMeAu0M1lGkoBEhg1xd1d2y8=
Subject key identifier:   B0:85:13:48:57:6D:49:2A:03:29:EB:21:A7:04:FC:3A:BE:02:35:57
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584840E5558FF649D9E0AE37BE80
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2602:f98b:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:55:8f:f6:49:d9:e0:ae:37:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=beb46cd5-2882-4f62-a1b1-20d694afc2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:8d:d8:39:e3:6a:01:17:a6:74:f8:27:38:
                    4b:38:7f:52:2f:86:50:59:0b:fe:39:37:08:8d:ab:
                    de:89:49:73:f7:48:af:db:e5:bd:ea:67:8f:f7:59:
                    65:29:fd:fe:b5:4e:cb:fa:c7:11:f0:b0:48:11:fb:
                    de:ac:88:97:20:09:e0:82:b0:fa:d7:d8:48:22:77:
                    c9:12:f9:0f:76:84:91:c7:62:c3:db:ae:6f:6b:a9:
                    17:29:b2:bd:39:db:bc:61:54:30:04:53:85:46:c4:
                    23:7c:44:b4:6a:e1:db:f3:14:5f:8f:7c:95:8e:72:
                    a7:f8:e8:3b:ca:3f:e6:ec:1a:dc:2e:14:06:db:77:
                    84:fd:83:46:e2:fb:1b:f1:e8:55:85:29:a9:98:f1:
                    3d:88:82:d5:13:a4:a7:b6:fb:88:70:a6:3d:35:37:
                    fe:b8:21:ac:40:ef:91:00:a7:75:a1:4a:cb:87:3d:
                    27:fe:e1:6b:72:8b:48:e5:c7:1a:bd:43:f4:69:4b:
                    9d:24:f8:cd:09:9d:d6:54:84:44:e5:82:7f:62:54:
                    e5:ae:f4:42:75:c2:e2:61:62:fa:6d:17:05:03:7c:
                    45:2b:25:b2:d6:36:c9:ca:95:83:0d:2f:f3:37:b4:
                    7c:82:7f:28:8f:d4:c3:cd:1e:42:b7:b8:4a:11:62:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:85:13:48:57:6D:49:2A:03:29:EB:21:A7:04:FC:3A:BE:02:35:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:72:ef:2e:8d:58:53:f7:40:32:64:ee:af:7c:93:05:84:9c:
         11:72:81:41:f4:76:4b:19:03:e8:b6:70:a9:f3:01:4a:ef:3d:
         e0:b8:ea:a4:3c:b5:c6:36:3f:26:f5:43:45:51:2d:93:ec:11:
         63:fa:a7:10:84:70:9b:89:98:ed:d5:ee:d3:d1:04:78:8a:1f:
         70:c0:ba:a5:77:32:ca:b5:bb:fc:7a:9f:e5:e3:78:22:d4:9d:
         88:e2:35:fe:38:66:19:ee:bc:b1:2a:13:3e:85:35:37:9f:d0:
         4f:1a:5a:7a:24:5e:63:bd:76:86:ef:46:f8:5a:a3:0b:68:e5:
         2e:33:73:41:e9:1d:de:b3:7b:8f:49:95:9c:b8:61:6e:58:3b:
         ae:2d:57:03:1a:31:9a:bd:ed:41:be:79:1b:46:e1:8c:45:da:
         a5:35:ee:93:0f:36:d3:3c:17:e8:bd:2a:d2:da:1e:3e:c3:dd:
         63:81:3a:cb:bf:c5:86:b0:3c:bd:97:70:78:65:1b:5a:e8:41:
         ad:7b:d4:4c:2c:ba:4f:c2:e7:c8:f8:6b:ce:7d:9e:20:6d:50:
         b4:a5:71:ac:71:09:7f:27:0f:a6:7d:52:05:1c:e9:0e:1e:e9:
         8a:5a:f5:b4:bd:11:e8:33:27:26:ff:30:88:79:a7:a1:6a:d1:
         3d:df:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:53 2025 by rpki-client