Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa
File:                     d878d921-bc35-307e-9651-8c0b7cd87227.roa (raw, json)
Hash identifier:          6Yz/GYYc/UkP6EQlekicbwG0RhT6VpchX6YuA9bUSSU=
Subject key identifier:   05:7C:E3:E0:FC:C5:6E:ED:3D:99:43:8C:0F:20:3C:FC:86:71:12:96
Certificate issuer:       /CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
Certificate serial:       010D0C9F43285848A1361601A8F71507850BAE00
Authority key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     25942
IP address blocks:        2602:2f1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:16:01:a8:f7:15:07:85:0b:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=2cd46911-79ca-4647-896d-6b54cff8229c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:69:b9:73:01:e6:7c:36:70:2a:2d:7e:7c:
                    ea:d9:96:54:8d:0f:5b:81:5b:03:71:75:fb:25:ce:
                    f4:f9:48:a0:66:87:f4:c3:69:14:b1:d1:f0:4a:74:
                    1d:52:8f:de:d6:b6:9a:8c:f8:a0:e8:e3:3b:b3:84:
                    de:50:f1:b6:6a:41:f1:8d:23:97:1c:e2:b8:74:2e:
                    ec:65:8d:0e:dd:d6:d3:61:23:67:2e:b3:4d:de:70:
                    57:3c:fd:0e:4c:e2:6d:a0:9a:cd:4f:53:f6:bf:3a:
                    e2:73:6c:a1:2a:6d:69:b5:0a:f2:33:46:91:36:60:
                    15:cb:ee:94:0e:56:df:05:10:a9:2e:3a:88:47:b1:
                    ae:15:a8:c7:9e:b3:47:d3:52:e4:87:57:74:f4:95:
                    7b:c6:36:24:7d:db:95:b7:98:ef:d9:c5:28:a6:f3:
                    35:08:c1:ae:87:48:f9:d6:97:8a:cc:36:e0:56:44:
                    bc:1f:1a:3e:68:d6:66:d0:38:f2:c8:6c:f3:ca:99:
                    d5:5b:85:7b:07:c2:e4:88:a0:e3:05:71:9b:de:62:
                    eb:e6:8b:76:41:bb:8c:65:b1:00:4f:41:c8:62:ae:
                    0d:eb:a5:2d:8e:c3:9d:76:9d:40:d6:b3:f3:90:22:
                    3b:dd:4a:8c:79:47:3d:0d:b2:7c:fd:0c:a4:fd:31:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7C:E3:E0:FC:C5:6E:ED:3D:99:43:8C:0F:20:3C:FC:86:71:12:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl

            X509v3 Authority Key Identifier:
                keyid:E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2f1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:88:0b:39:a1:8b:69:05:46:87:84:f8:5f:57:77:f3:c1:a5:
         2b:56:29:cb:b1:9e:87:41:8b:49:46:0b:9f:71:a5:28:ae:f0:
         e9:f2:c5:aa:00:e5:d1:20:c4:e1:c0:14:65:80:53:fe:ac:e8:
         06:f8:ee:1c:a8:6f:34:22:66:94:55:75:04:7e:4b:cb:27:61:
         ef:79:3c:5f:6c:1f:1b:3f:20:da:e8:67:3b:f5:48:5c:6c:f8:
         bd:f4:eb:e2:ae:70:5a:83:63:50:f5:3f:09:32:08:af:53:6c:
         52:b9:3b:bd:aa:26:b0:a3:43:62:2d:d9:c8:08:18:79:d4:55:
         0e:d6:b0:83:16:44:ec:f5:0e:21:ac:a1:54:8d:5e:66:2b:45:
         d8:c1:69:37:61:a8:d3:ea:bb:28:c4:0c:6b:8c:41:d4:40:9f:
         0e:3a:06:d3:4b:ab:fd:26:28:28:72:ce:92:9c:a0:8b:f0:82:
         d6:f7:44:ff:d5:2f:56:ef:22:0b:81:30:7e:50:d0:51:6e:24:
         06:5f:73:b0:37:19:22:d5:6d:69:b9:26:80:50:6f:19:bd:1d:
         0d:0d:78:95:46:6a:a6:03:7e:43:75:c5:90:6e:fc:81:b0:bf:
         cf:2f:5c:0d:b8:0f:d5:5b:93:4d:fa:d4:5f:68:a5:dd:81:b8:
         27:6e:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:07 2025 by rpki-client