Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa
File:                     f285fce8-0e10-3435-bf49-9793aefeda4b.roa (raw, json)
Hash identifier:          ShL0aUpBcg+86UL5MgG9VZVL1hsotv/kKi6URDiQr7I=
Subject key identifier:   0B:EC:2F:AB:AD:1D:4A:5E:11:7B:65:FA:06:B6:1F:A5:F3:4F:D8:8A
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858484D75952555456E770BC40F80
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     7018
IP address blocks:        2620:a0:2003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:95:25:55:45:6e:77:0b:c4:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=62839103-9d13-49cf-ba10-e8d786ec8ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:03:80:5d:d4:0e:53:37:9f:ae:1b:bb:5b:
                    6b:40:10:ce:d8:fa:86:b9:e5:25:d9:72:84:a8:86:
                    88:6b:4b:b5:ea:16:66:bb:95:29:ad:5d:7c:4f:af:
                    e9:9f:a7:65:16:6e:2b:d8:4a:cf:b4:da:d2:42:db:
                    75:b7:a9:cc:3b:8d:3c:d8:eb:f9:00:66:f8:9c:9b:
                    47:0c:65:6c:9b:88:73:21:94:c6:d9:4a:1c:7e:5b:
                    40:d3:03:67:69:6d:a2:1f:de:1e:b2:66:90:ee:54:
                    39:b4:23:5b:f2:f8:43:f9:ec:e8:bd:42:b3:39:af:
                    5b:86:9b:8b:91:74:0a:1b:0f:11:02:70:fd:73:99:
                    9c:13:01:ee:6d:95:c3:93:f3:bf:0a:0b:54:ba:89:
                    19:9c:0d:32:bc:fb:35:e3:d0:ab:31:43:f9:4f:7f:
                    36:82:34:d0:05:f4:b2:64:47:9b:54:fe:3f:f7:15:
                    78:ac:b8:92:ab:bf:b2:6e:d7:b5:ec:82:f9:11:88:
                    d3:32:08:95:e8:44:b3:ae:40:15:d5:d2:59:77:60:
                    57:33:66:58:b4:5a:af:ff:85:b3:b2:ef:dc:18:4c:
                    c7:4a:6e:a8:6b:84:05:42:5d:0e:78:ed:9b:7f:4e:
                    64:82:b1:96:48:21:74:4b:4c:b5:b5:6b:29:26:3f:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:2F:AB:AD:1D:4A:5E:11:7B:65:FA:06:B6:1F:A5:F3:4F:D8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:06:3a:78:67:bf:5a:d0:f2:10:0d:4f:f9:33:e6:ad:23:
         6a:4a:c3:d9:0e:91:8a:99:d1:64:c3:f0:1d:4f:3d:ff:7e:63:
         b2:b6:ee:a0:a9:2f:06:86:d9:69:52:57:12:03:5a:9d:9d:bb:
         91:90:8d:a1:fd:de:cb:2c:e9:4f:33:b0:95:be:51:4f:17:0d:
         26:1b:92:5d:df:c3:d8:47:16:e3:24:a2:85:7b:98:f7:df:bb:
         b7:1d:b8:c9:aa:9c:8b:e0:fc:ed:bd:58:95:ae:06:e9:15:d8:
         30:f5:b9:b7:99:3e:99:8c:bf:89:30:7d:f4:9f:7a:45:d5:04:
         c1:88:e9:1a:ab:b2:f5:fe:23:75:f6:3a:2f:8d:11:f7:5d:68:
         28:d1:af:1d:b1:62:78:2d:5d:ee:87:07:f6:a0:83:c9:c1:4e:
         eb:b8:91:46:f7:f5:53:ed:97:fa:e9:b5:94:b0:d0:62:74:bf:
         d1:a7:ed:5b:82:69:a6:90:14:60:c5:65:c2:47:b7:db:74:97:
         2e:e5:7a:bf:3e:94:1c:95:8e:57:aa:17:7d:09:4c:c2:3c:b9:
         07:c7:50:3b:21:00:f8:70:fd:fe:28:f4:bd:06:8d:23:2d:16:
         74:b4:82:40:cd:54:a8:50:fa:80:b0:75:bf:66:9d:6d:a6:85:
         c9:13:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:51 2025 by rpki-client