Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
File:                     1b63046d-f519-3f13-a304-7091d7eabb92.roa (raw, json)
Hash identifier:          o8Pm21gQnTxohaxtkuMeAiEqHiG4djmXADPNKsw01Hs=
Subject key identifier:   78:E1:E5:E0:C5:A8:03:66:E5:F7:28:D2:B3:DF:5C:40:C9:20:2E:A6
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F43285848960B5CFD5417D77186725240
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     53727
IP address blocks:        2602:f982:200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:5c:fd:54:17:d7:71:86:72:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=a7bdce70-1e2f-4c8d-8f90-649bca1e2a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:ec:40:41:20:32:3e:52:30:94:1e:38:b0:
                    39:f6:9d:2e:38:b9:2e:bf:4b:00:5f:70:48:b8:a0:
                    58:f7:31:2b:c6:32:2c:85:64:1d:c0:f0:d6:e1:cf:
                    f5:92:a3:f4:04:df:0e:5e:a8:e8:d9:21:44:b1:75:
                    ef:cd:2c:64:4d:09:cb:a8:58:11:48:9b:9e:4a:61:
                    7f:6c:98:fa:be:92:3c:e2:9a:6d:c7:00:65:cb:58:
                    6d:76:d1:dc:29:c9:70:54:0d:74:be:d8:a3:49:64:
                    4a:6d:61:70:1e:5c:3b:d9:1f:71:65:e3:d4:0e:8e:
                    2e:8e:cf:58:0a:53:a6:3a:46:dc:af:cc:ab:37:ed:
                    91:0d:7a:67:3a:51:d9:b0:bf:5d:4d:01:b8:bf:a6:
                    a7:61:3b:8c:12:8d:3d:01:78:d4:2d:ae:fa:07:15:
                    c0:71:40:d6:69:99:05:1c:0c:e3:2c:31:1a:37:27:
                    c3:71:1f:28:05:0e:a6:28:31:94:e2:6c:80:ea:7a:
                    72:21:99:35:d2:05:6c:97:50:8f:f9:f6:37:9a:af:
                    91:92:9d:67:81:bf:22:cc:e4:1f:8d:f3:c0:d2:4e:
                    61:1b:8b:e5:be:e8:c6:de:84:ae:99:28:9f:54:35:
                    22:8d:87:01:b8:19:bb:40:8f:3f:b9:39:b4:5b:0c:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:E5:E0:C5:A8:03:66:E5:F7:28:D2:B3:DF:5C:40:C9:20:2E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1b63046d-f519-3f13-a304-7091d7eabb92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:af:a7:02:17:d3:51:5f:3e:3f:3a:0b:9d:4c:6e:aa:ee:
         a6:80:47:5e:0a:15:2d:fd:d7:5e:f7:dd:68:be:34:70:4e:47:
         32:24:90:7f:84:8b:85:c2:9c:86:0c:46:cb:e1:4c:02:6f:47:
         43:e3:3c:f8:06:d1:13:16:e6:fd:ad:dc:37:63:5e:27:6d:01:
         95:5e:ce:32:a0:79:e6:b6:e6:51:ac:b1:58:f4:51:20:9b:04:
         89:1d:9c:4a:27:61:7d:b9:8a:ca:24:5c:c2:f1:ef:05:67:b8:
         b6:d9:6b:de:10:f3:ab:f5:ae:f6:d7:93:31:1b:54:55:92:1b:
         98:67:bf:e6:2e:c2:46:3a:65:e2:54:d2:8b:38:6e:07:47:fc:
         31:eb:37:76:cf:ae:f2:84:ed:a8:3c:1e:42:3e:92:ad:6d:95:
         a8:f0:b2:fa:db:ee:2d:36:44:52:88:d5:18:16:0e:19:81:5f:
         9d:23:e9:b8:0c:8e:64:d0:f9:cb:2e:f8:1b:48:d4:0c:c5:17:
         85:59:b8:a7:bd:d6:9f:d5:e9:36:83:a3:98:0e:79:e4:3c:7b:
         26:70:3f:27:7d:69:79:37:42:c5:86:e2:42:26:f0:85:82:51:
         61:fa:8b:44:30:9b:fa:3d:12:83:f6:e8:0c:9d:0b:b0:fe:6b:
         5d:dd:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:54 2025 by rpki-client