Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa
File:                     ebb55e36-3ef8-33a5-829f-4de227ff2753.roa (raw, json)
Hash identifier:          aFji5zbLjvylPyomlCvK+rHPJk8hOXxOPO8apamAI2M=
Subject key identifier:   37:A3:0D:A5:ED:13:FF:23:A7:65:0E:5A:8E:AA:30:C2:CC:BB:F1:71
Certificate issuer:       /CN=d7c75743-409b-41fb-b744-8345baaf599b
Certificate serial:       010D0C9F43285848E0065DE09EB72B9174E20200
Authority key identifier: 62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     20373
IP address blocks:        2602:f939:99::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:5d:e0:9e:b7:2b:91:74:e2:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c75743-409b-41fb-b744-8345baaf599b
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=129a40b8-7a24-49a6-bdf6-ca4d3e3e3faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:03:64:55:83:3e:88:0c:9f:42:69:90:83:
                    e8:38:13:93:ba:d9:25:08:7d:e5:19:64:d0:01:a0:
                    c2:e9:26:01:0c:25:ac:b7:c2:3b:79:0f:d4:fe:da:
                    01:ee:42:68:e9:60:19:2f:77:ea:3a:63:80:df:4d:
                    b7:b9:be:40:e1:1c:56:3f:a6:48:0b:40:95:d7:c8:
                    03:98:4c:f1:ac:98:45:1f:33:a3:2d:09:3d:40:25:
                    0e:38:9a:9b:7a:e2:f6:91:6d:8d:0a:c9:31:63:30:
                    43:c1:c5:f4:4c:4a:49:df:f9:6b:2e:b1:e6:31:bb:
                    6e:ac:d3:da:f6:88:8c:51:54:e8:0d:29:70:93:8f:
                    03:3b:cb:16:ae:f3:f9:31:10:2e:77:3a:d7:10:39:
                    01:91:8d:b9:44:72:c6:05:0c:6b:d6:2f:0d:22:ed:
                    b9:c0:34:b0:37:cc:47:10:2a:e7:db:40:a6:fd:7e:
                    f9:3b:b2:54:52:15:6f:c6:73:f2:1c:a2:35:96:76:
                    d6:10:23:e3:e0:93:e9:db:a2:61:26:1a:9c:ef:84:
                    8c:67:93:f9:46:54:e3:6d:da:64:a1:a3:35:8c:4a:
                    08:c6:15:e9:8e:9d:5e:c2:f4:6e:9a:a9:e5:ae:6a:
                    d9:86:af:ee:ba:57:cb:dd:9e:12:94:3e:78:0b:01:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:0D:A5:ED:13:FF:23:A7:65:0E:5A:8E:AA:30:C2:CC:BB:F1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl

            X509v3 Authority Key Identifier:
                keyid:62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f939:99::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:16:04:d5:64:f9:11:01:c6:33:e2:6a:c8:12:e3:64:2d:36:
         ea:25:44:3f:d2:c5:db:c2:7f:3a:9b:35:0f:3f:e0:96:32:c1:
         7b:9d:05:18:b1:d2:10:7b:cb:ae:85:60:e4:7d:a8:78:74:ec:
         cb:ce:01:cc:7a:06:6e:80:22:1d:7a:4a:64:15:bf:a5:1c:19:
         ac:d5:db:28:59:44:6b:0c:96:86:dd:3b:d1:df:04:ce:71:7b:
         27:4c:bb:09:59:d9:dd:17:16:06:28:9e:4d:92:84:40:63:df:
         29:bd:f3:d3:9a:8c:12:fa:54:46:2c:b9:04:6b:6d:3f:f7:9e:
         5e:31:b3:93:80:b4:10:73:c7:47:a7:cd:9a:6b:e5:5f:0c:2e:
         53:4c:18:a8:c1:d3:e8:10:a3:f1:56:c2:98:9a:7a:e4:7f:69:
         7d:35:a4:0b:02:c9:88:f2:2b:0c:6d:db:6c:0e:b5:6a:8f:a7:
         bf:2a:99:da:52:25:33:6b:85:6e:3d:c3:1d:f2:e6:d4:63:40:
         ad:f7:ea:25:b7:5f:08:aa:3e:c4:fc:55:b7:56:9c:39:ff:81:
         ff:9d:3b:b9:49:e1:5c:72:b7:fe:f2:cd:82:0f:cb:b4:74:12:
         1d:b2:8b:02:c5:21:b3:7b:84:50:dd:76:d0:ca:4d:68:80:0f:
         7b:18:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:49 2025 by rpki-client