Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa
File:                     6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa (raw, json)
Hash identifier:          Da76+oQQ/9Vl7XNVH7vgfQ/6RjKm6swgpITTTFfQ/o0=
Subject key identifier:   C1:DC:DB:80:BA:21:95:59:1A:D8:D9:75:34:A7:8D:AB:6B:CD:94:AD
Certificate issuer:       /CN=b9b55179-aeab-48dc-ba09-e41903a9550e
Certificate serial:       010D0C9F4328584832F042B911233E981F24EFE0
Authority key identifier: 44:A4:6F:7A:73:56:C0:C5:2F:51:F5:CC:87:A9:34:6C:A6:5A:C9:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     400810
IP address blocks:        2602:fa62::/40 maxlen: 40
                          2602:fa62:100::/40 maxlen: 40
                          2602:fa62:200::/40 maxlen: 40
                          2602:fa62:300::/40 maxlen: 40
                          2602:fa62:400::/40 maxlen: 40
                          2602:fa62:500::/40 maxlen: 40
                          2602:fa62:600::/40 maxlen: 40
                          2602:fa62:700::/40 maxlen: 40
                          2602:fa62:800::/40 maxlen: 40
                          2602:fa62:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:42:b9:11:23:3e:98:1f:24:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b55179-aeab-48dc-ba09-e41903a9550e
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=ffc4d30a-fa5b-4963-b3d4-b7df3b5b29c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:e6:a3:57:99:9b:48:a0:28:12:c1:82:89:
                    b1:05:96:80:f5:6c:51:0b:02:e3:0c:fc:fc:e1:9c:
                    c7:1c:b6:cd:ed:13:ca:9f:9d:b1:17:95:cd:6e:ea:
                    b7:e2:57:d3:c2:e0:54:04:d7:6b:5b:27:f8:63:df:
                    67:71:5e:fc:90:42:e3:d2:90:00:19:18:31:50:76:
                    0e:52:89:ca:3c:af:e1:d6:94:ec:05:f5:20:fd:45:
                    26:78:9c:1c:c4:97:64:74:a8:f7:70:cd:52:56:bb:
                    df:54:a7:e0:e7:36:0a:59:2f:79:02:51:fe:67:3f:
                    f9:5c:f6:d7:61:a9:a0:74:bf:eb:1e:23:9f:f8:a7:
                    8d:d6:c8:61:47:38:d3:ed:ee:18:e9:8a:6c:b3:1c:
                    ff:09:ba:c7:74:52:fa:78:84:b3:5e:23:69:00:77:
                    4b:de:9d:a3:05:73:86:7e:e5:ed:b9:b2:de:8f:84:
                    63:e0:1a:cd:39:3a:48:e2:df:4f:b7:db:f7:63:97:
                    00:a5:3a:22:a8:97:9a:8e:0f:c9:94:ab:6d:cb:59:
                    f1:e4:eb:82:e6:53:a7:42:ad:7a:1b:03:dd:5b:5c:
                    f7:fa:2f:57:d1:9e:7b:9d:75:9f:f2:57:19:50:ea:
                    2c:c0:4d:bd:13:96:fd:46:24:96:0e:c8:d7:73:ec:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DC:DB:80:BA:21:95:59:1A:D8:D9:75:34:A7:8D:AB:6B:CD:94:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.crl

            X509v3 Authority Key Identifier:
                keyid:44:A4:6F:7A:73:56:C0:C5:2F:51:F5:CC:87:A9:34:6C:A6:5A:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa62::-2602:fa62:9ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c3:73:0f:b7:3a:37:fb:4d:c8:16:f8:2b:2c:e1:5a:4c:be:
         19:f9:77:ce:2b:44:aa:97:0f:70:96:71:b6:79:a4:b0:95:04:
         fa:2e:59:1c:45:81:0e:8e:38:8b:50:5b:97:6a:d8:7b:3b:05:
         07:fb:71:c7:6d:7a:cc:1c:8b:ef:cf:1b:76:42:1d:de:7b:2b:
         67:29:26:e0:f5:6a:37:83:1a:fa:3b:e9:d7:d0:56:ae:5f:3c:
         c4:aa:79:ba:19:a5:07:f3:b1:5b:14:d0:2a:6f:f0:d7:e8:c8:
         7a:45:5b:17:76:5a:61:a0:33:6b:83:84:95:e5:48:f9:8b:b2:
         ef:cc:1b:7e:13:bc:4a:f5:8e:3d:27:d9:4c:1d:cd:53:25:bc:
         c8:36:e4:d7:b4:5f:92:c4:cb:d3:41:56:c6:f0:53:84:b4:7e:
         2a:b6:59:28:01:74:4c:18:80:b6:c5:2f:bd:51:0d:a5:f7:c7:
         69:7a:a3:91:11:5e:db:3a:9d:64:80:21:78:9d:ca:4c:48:ac:
         a0:91:af:48:de:aa:14:2e:f2:6d:30:99:f0:6b:60:87:dd:3f:
         64:4c:1c:85:60:9d:da:20:30:e4:a6:07:e2:26:9f:4f:b3:d0:
         47:a5:23:46:77:bc:e3:52:77:9d:be:23:b5:9a:a3:fc:7e:3d:
         62:a7:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:15 2025 by rpki-client