Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa
File:                     5423c03a-697e-3ed6-9dca-a727e4820c14.roa (raw, json)
Hash identifier:          I/H+NNqqpBMArSQYwgoJY6DUoJyVeBVCHObkQJbiS5g=
Subject key identifier:   C6:8E:17:CA:C3:C7:29:6B:9A:9B:09:15:72:F3:59:CC:E3:12:4B:80
Certificate issuer:       /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
Certificate serial:       010D0C9F4328584812D53A67CEECCEF743B9FE80
Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     32338
IP address blocks:        2605:6280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:3a:67:ce:ec:ce:f7:43:b9:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=967c4329-9383-45ea-9d48-376327e81f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:d1:85:1a:e5:12:5d:78:9a:87:4f:98:8f:
                    7e:30:ee:9a:3b:bb:48:7d:74:76:d7:e1:f2:99:c6:
                    76:b7:c9:79:eb:dc:d9:96:51:ed:44:95:0d:69:8d:
                    3d:2b:2c:b9:1a:cc:e4:6f:74:ed:92:74:38:cc:2d:
                    6e:ff:1f:6b:c5:41:87:64:3a:23:49:02:ec:c0:67:
                    d3:41:ca:c4:d8:f7:f1:b8:f5:7d:40:d6:7f:28:f1:
                    33:5a:c2:4c:ce:fd:fd:33:70:e6:fe:4d:b4:c2:a1:
                    db:e7:b3:d5:45:0e:c1:dc:3e:ed:87:2f:39:a3:75:
                    67:94:06:54:8f:1d:a8:a4:a6:cf:1b:df:3e:01:44:
                    9c:3b:9f:f6:6d:a4:65:0e:b4:62:bf:63:ba:b2:2e:
                    2a:16:b8:cc:f8:7e:cd:fd:b4:4f:32:6b:82:aa:af:
                    6e:03:d7:15:47:62:1f:4d:1f:76:f3:72:ff:4e:15:
                    b2:fd:e2:2e:48:76:f0:92:28:85:59:a9:6a:de:96:
                    2e:1d:b4:df:b2:7d:df:e9:18:e0:f5:9c:c8:35:63:
                    b8:bc:3a:46:5f:f5:fe:1e:4e:72:52:1a:95:62:7d:
                    19:83:a9:bb:cb:95:5e:60:33:af:d7:d5:3f:4f:72:
                    74:07:b3:56:33:c8:79:3f:f9:8e:91:96:69:12:31:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:17:CA:C3:C7:29:6B:9A:9B:09:15:72:F3:59:CC:E3:12:4B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:e3:4f:8b:83:55:3f:51:98:a2:e4:73:9a:80:47:88:70:
         6d:ba:d4:57:0d:5d:1f:f9:c9:a4:8a:e4:ef:13:91:ee:6b:d0:
         3c:c4:9d:0c:c9:55:db:c3:5f:1b:1b:fb:6a:3d:7c:9a:9a:b9:
         5d:88:53:1f:ca:5d:41:12:90:e8:ce:3a:10:47:4f:3a:f4:d0:
         ea:5b:61:a2:cb:02:3c:78:b3:4a:a8:4b:1b:1d:af:69:65:e2:
         fb:97:01:0b:3d:9c:4e:e2:a8:15:66:9d:20:fe:3f:87:89:4e:
         2b:31:81:3a:b1:1b:a8:ec:a1:e6:c4:b6:48:26:db:96:28:4e:
         55:c8:90:7b:7d:da:c2:99:b0:37:25:89:99:67:43:ab:51:40:
         ed:fd:8e:c2:16:13:43:74:52:21:0f:fd:97:f7:d8:f7:8c:b2:
         bd:74:76:49:18:88:37:72:37:d2:6c:4c:8b:56:6e:46:e2:7b:
         7d:01:78:ae:f3:47:a6:f3:9e:09:e9:cd:c2:94:c1:7d:4a:13:
         3a:39:ad:15:c8:29:e5:42:03:c4:56:99:bc:47:15:39:e9:94:
         25:3a:b4:91:88:3a:8b:be:dd:e2:32:55:72:ce:c0:42:6c:03:
         4b:e7:92:bc:b3:03:76:66:de:51:39:57:ff:f4:88:05:0f:b5:
         2b:7e:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:14 2025 by rpki-client