Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa
File:                     e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa (raw, json)
Hash identifier:          yKjz6tpoFCJ8+uUMShVv6Y+U6joV0yiwrVMqq7zlvKw=
Subject key identifier:   06:F4:36:47:AE:84:75:CC:45:9A:07:71:94:AA:D6:46:F6:85:01:84
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858482D5AA3C03D5F03D36D13EE20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     22773
IP address blocks:        2600:8809:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:a3:c0:3d:5f:03:d3:6d:13:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=3781de42-ef42-4b50-a43c-6660b1c7a743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:99:d0:b5:05:22:7b:d4:be:96:f3:4c:52:
                    0d:37:14:11:ec:12:9f:89:b3:de:c9:ee:e3:60:f9:
                    71:74:ad:7b:59:da:d0:19:4c:23:eb:1d:d9:47:35:
                    99:50:b5:7a:b4:ae:a9:53:50:17:00:34:d0:4b:34:
                    25:94:0f:1e:b0:31:9e:1c:f9:29:de:e9:96:75:04:
                    12:ec:47:61:40:c7:f7:be:47:03:24:64:ad:ca:b0:
                    47:7d:f2:9f:52:3d:ad:6f:e7:d6:fd:91:b0:e4:a1:
                    86:cf:a6:0a:f3:b7:b4:86:2e:55:04:a9:b6:cd:82:
                    52:de:d5:e3:1e:fb:36:94:ac:42:74:ea:a9:5f:fb:
                    34:b6:f0:15:ab:42:fd:98:1e:5e:cc:b4:6d:28:15:
                    c5:e5:37:f0:96:b2:4d:8c:02:d6:30:0c:53:e7:71:
                    ac:a9:2c:79:91:cd:2f:43:81:87:77:77:70:98:04:
                    42:ab:4b:f6:c3:49:2f:cf:c6:28:d5:ea:73:9a:df:
                    28:dd:30:07:93:9c:b5:20:48:0c:06:e3:d6:7b:ff:
                    30:29:27:b4:55:f6:45:d3:d2:82:33:17:37:6f:3c:
                    b1:50:1b:9b:ab:e0:ff:d4:86:bc:37:63:73:44:2a:
                    2f:0d:a4:63:fa:a2:ca:2c:b4:cf:82:00:4c:c4:2b:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F4:36:47:AE:84:75:CC:45:9A:07:71:94:AA:D6:46:F6:85:01:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8809:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:33:97:8c:5c:9a:37:19:65:46:c9:e0:94:f4:8d:a7:9f:57:
         c8:06:69:fe:2e:3d:b8:3e:51:cd:e2:07:a2:7e:e9:28:36:d7:
         ad:56:84:2c:09:c6:7a:32:88:b9:4c:fe:2c:af:9c:22:1c:b6:
         b5:2c:82:bc:26:9a:63:aa:bf:76:20:c5:b7:2c:68:43:1d:0b:
         40:68:62:be:34:4e:ab:46:2c:1d:79:d3:de:17:0c:98:ba:a8:
         fa:8b:9d:b1:ed:c7:59:d2:7d:78:b8:55:48:21:bb:c4:99:42:
         a3:8b:7e:dc:cc:c4:8e:04:02:35:22:8e:d6:bb:b2:6f:fc:68:
         7d:0a:63:51:81:48:c4:0a:a2:92:d5:e8:ae:aa:ba:98:ee:c2:
         87:d4:21:ec:6f:40:ea:55:7e:b7:79:f3:20:da:19:cf:5a:d2:
         15:64:59:ee:92:f7:bf:4a:8e:d4:7e:da:3a:56:90:70:2e:cf:
         09:87:14:73:6d:5e:39:7e:b9:20:7b:00:58:ae:3e:dc:28:b5:
         bc:b0:74:b4:bd:4c:4c:49:43:b9:ff:4b:17:4e:8c:3b:37:3c:
         49:99:86:9b:bb:1c:01:4b:d8:ca:7c:c6:cb:18:49:72:2e:fa:
         f5:6b:39:d1:48:9d:eb:35:2d:21:35:3a:c4:b2:53:ef:a5:7a:
         15:46:50:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:48 2025 by rpki-client