Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/36acad54-8ec9-336e-811d-83e816124e48.roa
File:                     36acad54-8ec9-336e-811d-83e816124e48.roa (raw, json)
Hash identifier:          23Yuwa0zr/4nahCioYvh2ZT3J4tvqhyoywKEQgVJbF8=
Subject key identifier:   08:35:24:4B:FA:0C:49:06:7B:76:50:93:4E:05:EC:99:99:05:8C:61
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858484EDAC307AAA7D49CC4C46EC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/36acad54-8ec9-336e-811d-83e816124e48.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        2001:4c8:101e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c3:07:aa:a7:d4:9c:c4:c4:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=1ca6149d-8081-4bb0-a7ea-c46bb4c8d0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:7e:21:1b:1b:e9:33:c1:16:07:e8:7e:08:
                    76:a7:de:cc:79:02:26:50:1b:42:49:55:78:2f:1e:
                    e0:31:31:eb:c7:55:c2:01:78:f8:28:83:53:09:56:
                    1b:ec:e5:4a:73:7a:ce:fe:b3:a6:ba:d9:cf:16:bd:
                    23:da:07:a7:08:22:73:1a:d4:2b:16:4b:e0:10:70:
                    44:32:f1:cb:5c:14:8b:0e:19:17:26:91:21:e9:52:
                    ee:a5:3f:a1:1f:8a:9c:9f:3f:7a:c2:2d:cc:4d:98:
                    fd:d9:1d:6d:5f:4b:a8:81:1a:df:6b:fd:8e:23:d9:
                    72:0b:60:1f:91:26:18:bc:d1:de:d0:e7:08:64:7a:
                    37:9a:1e:09:6b:eb:97:d8:ba:5e:be:0c:b8:46:8c:
                    57:2c:44:44:c5:60:07:c9:f1:6e:f4:db:b6:64:7e:
                    7a:8c:a1:bc:9e:5f:6a:cd:4c:2b:3c:86:4d:46:3f:
                    13:80:69:ef:04:98:e8:ee:74:2b:ff:47:12:73:51:
                    93:dd:b8:33:83:58:ad:94:b7:d1:f6:7f:8f:bc:d6:
                    15:e3:e4:af:c2:47:f7:19:5e:99:64:be:9c:54:68:
                    55:4e:75:91:ca:4c:a5:80:e3:af:92:1e:2d:50:1c:
                    4e:a1:6d:9c:74:27:30:ee:86:82:04:20:01:11:af:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:24:4B:FA:0C:49:06:7B:76:50:93:4E:05:EC:99:99:05:8C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/36acad54-8ec9-336e-811d-83e816124e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:101e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:57:87:4e:9a:05:9b:bd:21:b6:9b:4c:32:64:c1:62:77:d0:
         7e:88:bc:82:b4:6f:93:5d:84:1a:91:be:fc:24:d1:bc:91:4a:
         5a:bd:f3:11:8f:6b:c9:3d:a8:f9:ea:ef:84:c7:40:49:5a:45:
         4f:cf:91:3f:13:69:7d:d1:fc:98:57:cd:5b:5c:68:98:3b:88:
         1a:2e:37:b0:f0:ea:aa:06:f7:0f:d6:76:93:3a:15:a9:68:af:
         68:0c:51:69:8a:3b:f5:59:ab:50:f1:98:bf:ee:77:9e:3f:61:
         6f:46:11:8d:92:1f:e8:8d:35:93:59:69:4d:48:5e:5c:ee:5d:
         ee:5f:57:fe:9b:c1:f6:65:d2:a6:f4:4a:23:f9:dc:c0:af:8d:
         7b:bb:08:e8:d7:8b:0e:9e:89:46:c0:3b:3e:b0:7a:da:19:a0:
         0a:7f:52:31:be:d9:ef:59:1d:e1:35:d9:c1:9a:c7:6c:d2:29:
         5a:7c:66:1a:70:9f:90:48:72:d5:d1:ad:d9:7f:8c:59:de:7f:
         e3:5d:55:61:31:30:b7:63:ac:5a:65:92:fd:64:ee:8a:04:57:
         7a:85:09:e0:a1:b6:84:c3:74:4c:f2:1e:5d:c4:6f:7f:4d:ea:
         04:53:f8:f9:e7:6e:fd:e2:94:d1:27:2a:5f:c6:be:9f:6f:7d:
         2e:55:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:32 2025 by rpki-client