Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
File:                     a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa (raw, json)
Hash identifier:          l8oSAj7Nja6yNNSLLfngAMfp9uwKnoB0TZPNfMCg/Vk=
Subject key identifier:   75:E2:73:AA:BD:0B:72:2E:9E:C3:95:DE:87:DD:89:B7:FE:A8:0B:40
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B500F7F4204DCCAC34A5FC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        2001:4c8:10a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0f:7f:42:04:dc:ca:c3:4a:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=7dbebf9f-b5c7-48ed-bb97-dd413c04775a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:e4:db:78:53:b8:40:ad:57:72:46:f8:8c:
                    1e:ac:4c:5f:51:d0:13:e1:c2:6b:78:cf:58:7b:02:
                    f6:1e:f6:e6:72:11:3c:cd:b1:ef:e4:ac:8e:b9:c1:
                    a0:7e:05:b3:b8:93:55:a6:7c:d5:2d:5c:0a:91:eb:
                    ed:a5:d0:93:7c:5e:ec:e7:75:d2:96:67:8c:2e:bd:
                    9a:fa:93:c5:b7:98:23:b1:68:0c:6a:9e:64:70:6d:
                    74:a5:cf:a3:24:ab:15:e9:8a:b9:99:ce:3d:78:3d:
                    b3:22:94:08:97:34:35:31:d5:46:ad:14:94:d2:a1:
                    25:70:e1:5b:64:4c:01:58:7c:37:19:e7:c3:8d:55:
                    a4:4a:6f:ed:a7:5a:fd:93:ba:02:21:75:f0:de:ae:
                    cf:cd:2a:5d:2d:0a:41:1d:52:22:72:42:74:2f:1e:
                    af:f5:b4:d9:1b:49:50:ba:c8:38:1e:17:70:15:f5:
                    3f:21:d8:24:e8:96:d2:ce:77:52:7e:b7:c3:6b:4c:
                    4e:cb:8e:8f:83:88:24:be:9a:82:fa:a3:91:4f:d4:
                    3d:cc:a7:f4:e5:be:eb:82:cd:ba:f2:28:eb:21:dc:
                    d9:bf:6c:5e:a0:e5:51:ca:03:93:fc:ee:0a:53:b9:
                    1b:bc:d2:9f:54:fb:42:cb:85:a1:d5:65:a7:0b:d5:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:73:AA:BD:0B:72:2E:9E:C3:95:DE:87:DD:89:B7:FE:A8:0B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:10a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:46:06:c4:6f:98:fa:a7:5d:b0:fd:7a:be:62:89:3d:9f:6f:
         91:97:7d:e6:17:5e:32:c6:f3:6a:08:de:49:50:a2:3d:25:cb:
         51:f0:b9:e8:89:b2:93:79:94:45:14:c4:b5:54:c2:81:d0:aa:
         5f:91:24:3d:15:27:82:d7:a5:19:f1:07:95:07:bd:f0:44:3f:
         3f:64:dc:36:08:3c:16:4a:02:d7:2b:e2:4d:9f:00:a8:62:43:
         17:4d:82:d0:7d:bb:6f:f7:57:21:dd:4c:61:31:39:09:bf:a1:
         d6:7d:35:a6:d2:47:f1:24:7c:f9:45:a0:c1:d7:a6:0d:6b:c6:
         bb:0e:ea:a8:57:10:2a:68:c5:7a:89:4b:82:36:a0:12:43:95:
         1b:2f:88:d5:85:c9:ef:30:5c:c7:89:08:66:f0:4f:33:80:43:
         35:f1:21:b8:7d:7f:2a:3d:9a:07:24:8d:66:59:7c:c7:56:f2:
         19:dd:1a:b1:26:b1:78:67:1f:c1:a6:3a:df:02:e1:46:c5:af:
         4d:2f:11:d0:c4:c8:72:3e:a9:3d:33:da:56:ea:39:c9:eb:97:
         91:3e:ec:98:0a:d3:10:e1:24:bf:29:62:de:4d:23:0f:f0:22:
         fa:8d:80:78:c7:0c:a6:ee:45:d2:b8:1c:0f:f5:26:1e:60:09:
         7d:d8:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:21 2025 by rpki-client