Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db18a6ae-39f9-32cd-9ffc-0d33c13e4990.roa
File:                     db18a6ae-39f9-32cd-9ffc-0d33c13e4990.roa (raw, json)
Hash identifier:          KdKP5I3R7mQK2WYMPirg+cwXppKW3NvtpRKv5Z5melM=
Subject key identifier:   62:8B:2C:B1:35:63:54:60:DA:09:A7:AF:E6:29:4F:7F:55:5B:12:34
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B500ECF9F7012FF4F54D4C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db18a6ae-39f9-32cd-9ffc-0d33c13e4990.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        2001:4c8:108e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0e:cf:9f:70:12:ff:4f:54:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=b54114f9-9f51-4940-95c4-a3a0485b66e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:b1:01:f2:14:44:bc:04:1c:d4:95:8e:d9:
                    da:76:83:61:1e:84:d6:ae:64:38:98:5d:78:ca:0b:
                    da:03:22:15:24:e2:91:66:00:e8:e1:4a:a0:cf:d7:
                    bd:fa:87:38:4a:7b:af:64:63:5a:5c:db:72:a3:f8:
                    78:ae:85:82:9e:9a:db:b6:ef:3f:8b:4c:67:2a:c0:
                    ff:ae:80:0d:8d:63:61:26:8c:31:9b:74:7d:13:20:
                    6e:77:7d:d4:73:48:3e:c3:24:b6:e3:fb:ac:7e:62:
                    91:6e:a6:b3:26:d6:bf:dc:84:62:4f:14:aa:30:a3:
                    83:7d:09:4d:27:e5:5d:d5:f5:76:0d:9e:d0:ce:5b:
                    6b:12:76:64:16:96:9b:80:ed:c2:2a:23:05:6f:7d:
                    68:b8:a3:84:6a:aa:ac:d8:7d:ee:9e:50:e1:58:8d:
                    d7:91:f1:15:c3:d6:25:86:bd:3b:29:2c:3f:35:38:
                    50:58:b3:3e:71:f0:d1:c3:e0:e1:17:3f:d0:4e:9b:
                    ff:83:3c:4a:63:7b:9d:bc:29:80:2c:82:bd:ed:5b:
                    dc:e0:de:51:14:5b:18:28:bd:4a:be:c9:78:78:46:
                    0c:ee:28:d4:4f:ee:03:7b:0d:63:1a:d3:57:c6:ab:
                    47:cb:17:b8:a0:b4:9a:f3:13:00:87:ad:28:92:17:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:2C:B1:35:63:54:60:DA:09:A7:AF:E6:29:4F:7F:55:5B:12:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db18a6ae-39f9-32cd-9ffc-0d33c13e4990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:108e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:de:24:5b:02:ad:87:f1:f8:f3:e7:73:8a:4b:cf:85:36:ac:
         ba:c6:a2:78:b0:db:0b:62:47:22:2f:37:58:67:e0:62:27:c4:
         3b:8d:db:23:92:96:71:b4:d7:da:1d:a2:cb:af:d0:2e:18:30:
         dc:db:28:3b:2e:26:42:35:51:7f:0a:9f:a7:1b:a6:0c:65:0b:
         c5:3e:8b:41:41:e3:e3:b6:f2:25:97:7d:54:78:6d:d8:38:38:
         c7:a9:0b:9d:9a:01:0b:cf:73:ef:72:1a:ee:f1:cd:68:9d:96:
         17:55:6e:ce:e6:3e:7f:bc:a5:4d:b5:63:cd:49:03:f9:6a:3f:
         78:17:ee:a4:66:32:cb:23:2c:36:86:34:18:df:c0:ae:9f:96:
         16:71:ce:23:c5:40:5d:de:a2:4f:21:cb:7c:d4:2c:06:6b:51:
         68:67:08:43:28:cf:f6:b0:7f:95:ee:11:2e:e0:35:2a:8c:d6:
         2a:ef:db:4d:2f:14:46:4b:4f:92:ca:01:75:1e:d8:97:3a:09:
         82:05:2e:a4:1d:71:3e:07:18:b4:ee:ad:17:1d:b6:3c:18:3f:
         0d:2e:04:42:0a:50:5d:b2:a4:aa:3d:45:86:c9:ee:68:4a:8c:
         8c:0c:3b:2b:69:49:43:b4:1e:0d:0b:d1:48:64:82:7f:21:a5:
         26:4d:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:53 2025 by rpki-client