Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa
File:                     342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa (raw, json)
Hash identifier:          UQuhGcPdf/LW+mXFHjT88sHruH/+hMy9w3+h05vOpe0=
Subject key identifier:   98:3A:A3:A7:2F:3C:81:4A:5F:27:34:E5:84:9C:70:AD:C0:11:63:A1
Certificate issuer:       /CN=56346803-30d8-4fc8-bed2-9b76d8093c65
Certificate serial:       010D0C9F432858487755DFB1AA2631CC878A6300
Authority key identifier: E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     15318
IP address blocks:        2620:0:2220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:df:b1:aa:26:31:cc:87:8a:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56346803-30d8-4fc8-bed2-9b76d8093c65
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=33fa1d87-fd43-4a1b-8d3c-5ece7ef14f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:70:e4:83:af:b9:c3:22:c5:fe:97:8d:af:49:
                    3e:1d:ad:f7:84:d6:11:6c:25:67:10:e4:c9:50:a5:
                    7c:27:5d:6c:a9:b2:77:d4:0f:bc:e9:0c:94:9f:47:
                    a2:94:2b:58:c9:95:3f:04:05:ca:5d:92:a1:64:76:
                    e7:d8:f9:ab:21:f2:a0:0b:f3:ab:24:d5:8f:9e:c0:
                    7d:cd:0a:10:37:4b:f8:cc:99:17:de:64:ae:74:86:
                    5b:25:bd:4a:44:c3:a5:42:8e:dd:fa:66:fd:01:06:
                    b7:fa:b7:89:23:9b:b7:e7:7b:1c:77:39:54:05:d9:
                    59:80:df:d2:e1:8e:cc:42:3d:12:c4:c5:35:86:15:
                    e7:20:c5:38:ce:77:57:cb:1e:90:29:29:e3:5e:5f:
                    9c:4e:10:f6:b7:10:42:2a:0a:58:2e:0b:ef:3c:52:
                    33:e4:48:73:a5:c0:0b:35:91:47:73:43:fa:1e:3c:
                    2e:34:c5:3e:92:b8:d7:f2:5b:8c:c6:e6:0d:3a:cb:
                    d4:38:29:df:46:9b:94:00:e3:01:02:22:6d:f1:70:
                    e5:4b:a1:9c:0c:78:40:14:51:0b:05:36:76:17:39:
                    2a:a4:7d:28:32:ff:cb:56:a0:bc:13:10:6b:6b:49:
                    1c:fa:3d:51:2a:b2:7d:5d:a0:c0:da:a2:7a:0c:e6:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3A:A3:A7:2F:3C:81:4A:5F:27:34:E5:84:9C:70:AD:C0:11:63:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/342fa3ab-2ab0-3c4c-9c13-0955013ca1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:2220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:bf:83:43:75:02:30:ac:a7:db:66:36:47:62:aa:eb:46:
         34:0a:47:a9:d8:1e:78:67:9d:16:2f:7c:5b:38:ee:9d:56:d2:
         62:ba:2e:61:b1:29:21:88:84:ed:f0:7b:67:e6:cc:89:9f:1d:
         01:8d:a9:18:15:6a:f2:db:c4:55:7e:f2:72:50:8f:53:c0:12:
         5b:64:1d:45:63:43:df:a0:92:a0:ca:2d:21:c6:25:43:d0:35:
         60:b3:ee:03:8b:f8:9b:94:d6:4f:4a:49:18:a1:1a:ad:92:51:
         f5:e0:94:76:ea:4a:9e:9f:c8:52:f9:2c:8f:08:6e:77:dd:d2:
         0d:fd:b7:cd:eb:3c:32:6a:d8:70:d2:7d:7a:fd:32:5c:b4:8d:
         d3:f4:69:dd:fa:97:ac:51:d8:af:e9:c7:b9:34:96:af:e2:28:
         68:3f:28:d1:c5:0d:22:b7:6c:3a:1a:b0:a9:22:89:05:8e:16:
         f9:3b:f4:40:98:b4:f8:c3:9c:0e:3f:80:8e:d2:bc:84:e7:85:
         52:80:46:6f:6a:e8:b7:32:25:f6:4c:8b:90:55:07:12:ba:40:
         f4:d0:55:50:1f:b7:42:f7:8f:ba:5f:97:ce:da:89:7f:4a:d7:
         d7:f3:aa:8f:60:db:2c:41:16:05:6a:d6:cc:25:43:ad:ea:24:
         cc:3b:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:48 2025 by rpki-client