Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa
File:                     2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa (raw, json)
Hash identifier:          WXCeddgFCK+IuFHAkYXfTtHVRealoy3zPp+UgGnLhgE=
Subject key identifier:   CD:11:69:5D:E7:DE:7D:1C:8D:E1:AD:0E:10:B2:4F:C6:15:D6:E0:7B
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584851A57F7985E3DA5905B0B8C0
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     22192
IP address blocks:        2607:2240::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7f:79:85:e3:da:59:05:b0:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=0a191f2f-20a0-4001-9121-283383d6348e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:99:ce:49:58:66:47:82:9e:62:bb:89:c8:
                    ef:43:82:a2:46:38:14:93:44:5e:c6:2f:cf:61:93:
                    b4:8e:74:b7:73:24:aa:1e:5d:05:b9:87:7e:b4:42:
                    ee:7a:9b:c7:1b:04:a5:b6:6c:cd:8a:08:ed:f7:64:
                    8a:2e:d4:f7:25:c0:05:e4:a1:21:ca:66:6d:b2:40:
                    f4:1e:12:f3:ab:38:ef:ed:ff:a8:a9:b9:94:37:87:
                    10:08:ca:48:24:b5:e8:1d:2a:95:ab:89:31:3f:28:
                    6f:a7:66:f5:ea:a5:d6:5a:a1:c5:40:05:56:d0:f0:
                    a0:7f:66:e8:76:27:72:80:c6:0d:3f:78:12:8b:63:
                    ab:c1:1f:9e:08:2a:ae:34:b3:c6:93:07:b6:dc:6a:
                    bf:16:00:53:cc:7f:89:0e:3f:02:04:e7:87:75:ed:
                    8e:c6:0d:63:82:58:8a:9b:f8:c4:51:20:b6:9b:34:
                    31:db:39:e8:3b:80:35:77:a6:92:6c:2c:e4:eb:fd:
                    66:3c:ee:1e:93:5c:e5:d2:43:b5:8b:ee:50:37:96:
                    5e:2f:d3:11:7d:06:af:0b:f7:f3:1a:52:49:d6:02:
                    49:7f:9c:31:6e:24:01:fd:69:8b:54:01:76:b9:7f:
                    60:77:9b:09:81:ce:72:a4:eb:ad:54:2d:53:4f:f5:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:11:69:5D:E7:DE:7D:1C:8D:E1:AD:0E:10:B2:4F:C6:15:D6:E0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:5b:78:bd:1f:a9:a8:9c:d9:d0:59:a5:66:1c:f4:6f:e2:11:
         e9:d6:43:8a:25:1e:45:a2:fa:8c:66:5d:d3:67:9b:ee:15:9f:
         30:2a:0e:70:53:85:02:e8:06:17:1c:0e:10:43:48:6e:03:ec:
         9d:b8:f8:0a:db:48:be:f9:8d:0a:57:d7:40:62:7a:37:e2:ae:
         47:f7:23:33:ae:cf:a2:0b:7a:d6:54:e4:e6:7f:13:36:ed:e1:
         96:d7:bb:3c:8f:ae:a7:1f:b1:ed:31:94:f1:b5:6d:24:c7:91:
         36:67:ac:fb:32:15:e9:93:7d:c1:53:58:bf:e3:78:84:4a:30:
         62:e9:ce:5a:b9:69:79:32:5e:3d:0e:54:bf:30:f7:a4:4c:5c:
         c0:d4:f5:b5:70:ca:0d:93:20:2d:4b:45:1d:c0:cd:39:a2:46:
         33:23:59:96:33:2e:63:32:82:86:ae:4d:75:aa:9b:d9:1b:b8:
         4a:e0:b4:96:b8:43:e0:df:4d:c4:cd:a3:39:53:1d:3b:7f:80:
         e2:aa:30:5b:fd:f4:b4:84:8d:a4:f4:65:4f:54:5a:04:f9:f9:
         bf:7f:90:32:0b:81:dd:2f:e1:89:17:3b:d0:86:a6:89:9f:e0:
         1a:e7:3f:cc:f7:71:20:bf:db:01:4c:73:52:3f:08:d5:a8:32:
         40:7c:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:57:36 2025 by rpki-client