Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa
File:                     06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa (raw, json)
Hash identifier:          aF7g8Ox4h5QVWPYV4hIeyi5RMlQIWKQ+y9goLBMYe5U=
Subject key identifier:   6B:9D:62:C6:C2:1C:42:C5:01:8F:3E:E5:8E:22:A1:8C:73:2C:BE:30
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584851A57FDA8CD513E5782370A0
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     398573
IP address blocks:        2607:2240:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7f:da:8c:d5:13:e5:78:23:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=152cd0ba-983f-4fc4-88b3-add7fe6ef044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:50:66:51:c8:66:6b:74:0f:7f:e8:ab:ef:96:
                    31:3c:ca:5b:99:20:43:07:80:83:83:bd:83:da:e6:
                    a8:99:92:54:3e:c9:e7:91:1b:18:be:9b:cd:c1:2b:
                    33:25:c4:9f:fe:61:d1:08:be:f4:1d:cc:5e:96:63:
                    de:44:86:85:cc:ab:cd:59:51:41:e0:83:a3:1f:bb:
                    a2:82:15:38:d8:c6:a2:1d:6f:27:4c:97:df:f1:33:
                    3f:c2:60:7c:8a:37:1c:f9:ab:99:70:d0:ed:51:60:
                    3c:22:9d:12:83:59:3d:20:31:27:17:0d:d7:c4:ab:
                    ae:6e:33:c3:e2:4f:79:50:ba:58:94:ff:9d:83:55:
                    ed:00:e3:33:23:e2:7a:55:bc:64:23:90:a3:fc:47:
                    0b:5d:c3:19:8f:d0:1a:ce:cb:b7:8f:2c:c4:48:dc:
                    7d:e9:08:37:81:19:f8:1e:11:8b:6a:c2:b1:dc:0d:
                    7d:ab:c2:d0:5f:c4:35:98:64:21:d8:5e:82:77:a4:
                    06:75:31:87:c0:a9:ae:49:0c:f1:24:4b:da:b7:0d:
                    f9:fe:e0:72:db:0c:b1:8e:2e:23:e7:ef:95:47:da:
                    d0:30:da:b2:3c:cc:30:84:0d:d7:e9:89:dd:c6:a2:
                    35:1e:8b:f9:f9:ac:11:da:5b:76:94:1e:11:4b:ae:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9D:62:C6:C2:1C:42:C5:01:8F:3E:E5:8E:22:A1:8C:73:2C:BE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/06ed8f59-75d5-38f6-8967-dddfc5d1b1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:ce:de:78:60:c9:26:9f:e5:30:c0:c0:08:d5:78:3b:db:
         4f:8f:5f:e7:38:24:59:29:95:01:67:68:cf:8d:58:14:d5:92:
         0a:48:a1:45:6f:b3:73:f6:7b:d1:1f:57:af:2e:bf:14:07:3b:
         60:6a:bb:29:dc:05:0b:20:8b:e6:42:a7:32:55:75:5b:2e:c5:
         40:54:88:ef:26:1c:e5:5d:8f:e8:99:fc:9f:f3:22:1a:5d:34:
         5c:dd:fc:79:77:7b:72:a0:59:75:99:05:be:db:5a:c4:ce:34:
         46:72:2e:2e:8a:29:90:32:b1:d4:6d:47:93:60:c4:45:4d:19:
         95:ac:27:47:05:24:28:8e:f8:20:a9:56:4d:28:31:32:7f:ff:
         aa:88:0a:27:f9:66:82:48:b3:a2:23:83:79:d6:14:72:17:df:
         27:f5:4f:dd:37:78:3e:00:24:3f:f8:1b:86:8c:81:0c:41:ba:
         64:75:e0:3c:fb:3c:9c:3a:e0:51:0b:b1:c6:98:fa:e7:25:4d:
         b6:87:e4:6f:68:d5:c7:25:78:01:27:d1:ef:7a:24:37:3b:9f:
         ab:50:4c:83:8f:93:ce:9a:32:ae:34:ea:71:9e:7b:44:36:f9:
         5a:98:60:c7:d1:e1:df:30:34:82:94:4f:34:88:b9:21:a4:7b:
         80:de:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:44 2025 by rpki-client