Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/31b19ccf-3771-3488-afcc-3b9d947962e2.roa
File:                     31b19ccf-3771-3488-afcc-3b9d947962e2.roa (raw, json)
Hash identifier:          DHVkMj0wRLKGmD63gssP4l8PFWGTYBSxuibYIhdgqPo=
Subject key identifier:   BB:F7:F6:96:D8:B5:C7:ED:01:FD:AD:D2:FF:56:4E:BB:6C:4A:C7:7D
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F432858486960694702A88AB4FDDAF380
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/31b19ccf-3771-3488-afcc-3b9d947962e2.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     61112
IP address blocks:        2602:fa4f:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:69:47:02:a8:8a:b4:fd:da:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=3533b977-85c8-458e-95f7-dd42b217cc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:04:15:c7:ec:62:10:b7:d3:d7:1b:50:2c:
                    de:b4:b4:ae:6e:7e:6f:38:f5:46:cf:b3:a3:d4:a6:
                    14:fa:c7:6c:f8:47:2d:98:95:f6:70:3a:4d:7e:20:
                    56:9e:11:0a:4d:3a:38:f7:30:44:15:93:20:a4:2d:
                    fd:59:70:01:f4:c8:01:50:16:93:f6:0e:39:26:7e:
                    50:a7:ce:2d:ac:d3:6b:ec:81:e9:ef:ab:4e:76:a3:
                    a6:d5:af:07:2d:04:5e:40:51:34:71:b9:76:c5:98:
                    b4:8e:c0:d9:52:28:d0:5a:06:e6:ba:0b:58:31:ac:
                    e5:3f:d2:5a:ec:77:0e:13:0e:80:fb:7f:61:dd:13:
                    ea:da:49:8b:aa:c0:b6:4a:e7:08:a7:5c:c8:a9:28:
                    ff:7c:eb:4d:c1:50:57:f8:f2:a2:45:10:16:ef:04:
                    1f:50:b1:68:5b:82:e1:ef:bd:36:cf:4f:8f:cf:ef:
                    42:44:74:3a:5f:7f:42:b8:77:95:49:47:44:87:db:
                    f0:23:ed:a2:05:a0:be:e1:28:b0:00:96:9c:6e:be:
                    7e:e4:62:df:0e:11:6d:51:46:81:30:b2:89:33:48:
                    02:d2:43:b0:61:18:a5:3f:37:c1:43:15:c6:d3:39:
                    c6:5b:b4:ec:8e:03:a4:21:6b:45:7e:11:20:46:3d:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F7:F6:96:D8:B5:C7:ED:01:FD:AD:D2:FF:56:4E:BB:6C:4A:C7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/31b19ccf-3771-3488-afcc-3b9d947962e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:66:37:53:50:36:bf:89:a4:4b:71:a4:4f:51:e2:62:8f:
         30:bb:e3:45:66:2a:04:f3:cb:85:5f:ec:7d:8d:5a:ca:63:e6:
         3f:c9:ef:fc:37:58:73:88:8b:a1:e4:1d:d1:03:9a:4a:b4:27:
         d8:cd:b5:85:cf:4a:2c:74:2f:f8:f8:04:62:6c:3c:ea:1c:9f:
         04:8a:20:27:a8:c2:a2:2a:0e:b2:6c:f5:36:39:a8:e4:f2:c4:
         37:19:bc:32:ff:cd:70:d2:8c:0c:be:eb:4a:96:47:e8:3a:2c:
         c8:43:17:e6:4c:6e:99:b8:a4:1e:1e:96:48:94:6c:1d:c6:81:
         72:c7:be:f6:31:36:02:c3:4e:11:8d:e5:62:76:4c:63:20:39:
         02:c2:cb:15:ef:08:e8:51:f1:c9:bd:f7:c2:72:a9:7b:42:21:
         e7:a4:a4:c1:c2:b6:42:8f:dd:d8:4a:11:26:fa:b9:d4:ab:01:
         3d:e4:19:b4:9b:eb:db:53:04:ee:6e:a9:d5:e9:e9:5d:5d:92:
         31:1a:f7:da:8b:d2:d6:93:26:bd:27:dc:4f:bd:a6:8f:75:e1:
         99:7d:9c:97:f8:fd:8f:40:6f:8a:13:1f:70:f7:de:12:38:49:
         76:93:99:89:2d:42:fe:03:9d:1c:3f:d3:e0:09:9f:45:14:0f:
         8a:22:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:59 2025 by rpki-client