Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6fc63da5-97c1-3909-a780-58400903a3f5.roa
File:                     6fc63da5-97c1-3909-a780-58400903a3f5.roa (raw, json)
Hash identifier:          sQg1MyseTlPFaj9HC4vepgFmq1o9t53dgDuDcgF/ZSA=
Subject key identifier:   8A:39:46:00:18:3E:B9:37:A8:E9:49:DA:D3:68:42:22:7C:EE:79:8F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B500FAB2B51F22BC8500580
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6fc63da5-97c1-3909-a780-58400903a3f5.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        2001:4c8:1108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0f:ab:2b:51:f2:2b:c8:50:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=ca8e1553-9500-49be-a7ef-b79e56ef224f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:4e:34:78:b5:fd:cc:e3:32:c3:ca:a5:ff:
                    03:0d:e8:3a:7e:ed:bf:e9:aa:e1:a7:ce:a5:69:b6:
                    8b:7e:4f:00:8f:4e:93:46:1f:82:47:d6:2d:a6:43:
                    6d:08:dd:61:d2:38:05:59:e9:93:bb:a6:5e:a8:e7:
                    67:a1:97:79:11:70:16:d3:09:07:11:18:26:86:43:
                    0e:90:3c:5c:66:56:23:49:74:ad:81:3b:11:84:7f:
                    12:c1:d8:ae:d8:dc:fb:15:27:17:27:f8:6c:7b:96:
                    1e:15:bb:c5:d1:41:61:97:5c:56:33:52:a7:1b:ee:
                    c1:bc:ef:e7:4c:31:57:5b:7e:91:28:b8:00:dd:52:
                    ed:5d:8c:7d:3c:93:ae:35:7f:72:f2:d4:d9:a0:c8:
                    33:f1:04:00:10:9d:c4:9b:32:5d:07:93:b9:8b:1a:
                    d8:01:56:e0:81:a3:3e:8c:62:31:79:9e:fe:e6:86:
                    c3:68:36:4d:a2:fd:0c:9f:b3:69:b9:86:d2:bd:d3:
                    52:c5:a4:aa:50:7a:79:26:0f:95:82:62:98:db:97:
                    24:8d:e0:8f:97:d8:71:6e:5b:1e:7a:b5:06:f7:9d:
                    27:9d:c3:81:c1:11:39:29:37:5c:45:ee:e6:65:d5:
                    b9:14:8d:f7:dc:64:38:c9:b1:69:88:dc:d1:66:5a:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:39:46:00:18:3E:B9:37:A8:E9:49:DA:D3:68:42:22:7C:EE:79:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6fc63da5-97c1-3909-a780-58400903a3f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:f4:f9:3c:73:67:fa:5e:b5:c9:dc:c0:ae:58:25:8b:d6:
         c6:9b:b5:cb:82:87:46:db:69:82:ea:d1:cc:2d:93:9a:1f:02:
         f8:ba:1d:5d:fb:2d:a0:9f:2b:0a:40:04:1f:9f:8d:41:93:10:
         28:f6:13:6d:c1:54:f8:3c:91:c2:3c:44:2c:ca:5e:9a:d9:0f:
         77:84:99:5c:7c:7f:e3:37:08:b6:6c:f0:e3:40:83:0a:aa:4c:
         e2:d1:d5:5b:d0:f6:da:07:81:c6:fa:58:98:eb:e0:aa:58:b8:
         10:dc:b8:e5:0e:69:41:9e:c4:71:b9:47:44:51:51:fa:c2:e0:
         1d:0c:be:ea:37:7e:3b:05:04:11:78:db:4b:17:71:24:9f:61:
         a6:c4:ee:00:c9:82:ff:0e:78:52:f3:78:95:ce:b6:22:2f:c1:
         d0:78:b8:57:5f:d0:8a:74:69:a2:8a:45:41:4f:82:6e:27:28:
         cb:52:03:e5:a1:39:a9:07:50:bf:0f:9b:a1:36:4e:1d:89:c3:
         9a:d5:f7:8a:3b:18:f4:bb:42:79:69:28:43:c0:34:3e:36:68:
         b3:85:22:8e:24:ef:cc:c2:88:5b:ad:0c:c0:40:e1:b5:c2:ce:
         ec:6f:c5:41:1c:fc:53:d6:67:93:63:e3:29:67:3d:fd:9d:05:
         9e:d8:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:00 2025 by rpki-client