Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa
File:                     40449c0b-7967-3ad1-800d-976492202fef.roa (raw, json)
Hash identifier:          NNtdfHrYl1z54a1ue+QxyPO0CAUDpi7AQpMK7gB3oM0=
Subject key identifier:   CF:3A:D9:44:80:3A:3B:51:D9:04:F8:B7:D3:4B:F2:55:2A:3D:3B:D0
Certificate issuer:       /CN=d714f85c-7c5b-49fe-8910-f5b808ebb556
Certificate serial:       010D0C9F4328584905B6B4151A1DDC82B26C74C0
Authority key identifier: 27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     18646
IP address blocks:        2620:be:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b4:15:1a:1d:dc:82:b2:6c:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d714f85c-7c5b-49fe-8910-f5b808ebb556
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=b6ac2041-5d1e-45e5-ab98-cb61f10afac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:fe:ca:64:60:73:05:e6:9a:05:31:06:9c:
                    dd:ee:90:b4:e8:e1:c1:ec:96:1e:1a:67:e8:30:7b:
                    50:be:31:cd:b1:0d:9c:50:99:3f:b7:4d:f6:13:f2:
                    f2:50:fe:40:a1:5c:7c:95:4c:ac:43:92:2f:b0:77:
                    51:c4:da:d8:f8:99:85:0c:1e:20:9a:67:a9:e5:eb:
                    62:d7:2f:3d:90:56:ed:76:b3:fa:3c:94:1e:8b:14:
                    d6:56:2f:85:b5:04:d7:83:15:c9:a6:52:c7:93:b2:
                    32:1c:b0:39:cb:a0:fd:74:2f:cc:23:6c:74:f3:97:
                    75:65:b4:f1:0e:5d:2c:00:5e:03:75:4e:3d:be:a2:
                    84:b1:59:94:ee:fa:24:b1:d2:38:42:07:89:55:9b:
                    e4:7d:d1:60:6c:e7:7e:a9:03:0f:e6:5e:bc:3f:ea:
                    7e:f8:be:35:f1:ea:56:d6:4d:44:3f:2f:e5:ed:e7:
                    b1:c1:64:24:00:15:42:5c:49:f0:ca:74:59:72:35:
                    44:ef:2b:77:66:30:da:b5:9b:6f:d0:8e:85:08:87:
                    42:46:51:99:85:69:81:4d:fc:c4:03:59:a4:2e:b9:
                    57:ab:0d:9a:d7:13:8d:38:20:8e:1c:47:d0:4c:15:
                    f3:1e:82:b1:b6:c3:f5:16:f3:64:f9:b2:1d:ab:bd:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3A:D9:44:80:3A:3B:51:D9:04:F8:B7:D3:4B:F2:55:2A:3D:3B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/40449c0b-7967-3ad1-800d-976492202fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556/d714f85c-7c5b-49fe-8910-f5b808ebb556.crl

            X509v3 Authority Key Identifier:
                keyid:27:C3:38:AD:C5:DF:C1:B6:5D:08:22:EB:E2:FD:35:53:3E:D5:C6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d714f85c-7c5b-49fe-8910-f5b808ebb556.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:be:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:80:78:b7:6b:a3:63:27:3f:1e:c2:ce:83:0a:d1:d4:d0:48:
         cb:ec:d3:67:3d:5b:b8:89:cf:b5:bd:5e:43:4b:0a:c8:fc:72:
         06:de:db:19:b4:bf:7b:d9:c2:f9:48:25:15:12:48:37:29:4f:
         a7:dc:72:e3:a6:7a:6b:8a:17:19:05:26:b4:dc:31:75:c2:f7:
         09:12:eb:c9:b2:7d:5e:f1:75:cd:b0:80:0a:28:a0:94:74:8a:
         00:24:41:08:8b:c4:d3:3a:f1:74:64:46:cf:77:0a:be:60:7a:
         dd:07:8e:54:cc:ac:85:aa:ca:b3:c0:ce:a2:11:48:06:91:ee:
         81:f6:3a:18:07:4e:4f:39:ee:44:68:d7:93:39:b0:91:2e:a7:
         e7:63:4f:c7:39:ef:66:1a:d1:34:22:f6:20:2d:1a:c0:82:54:
         a4:21:aa:a1:d8:6d:19:ab:b4:f5:f3:c1:e7:17:98:93:c7:76:
         d3:74:e9:60:8d:5a:71:d2:c4:12:7e:ae:8a:1b:01:bb:4f:67:
         58:f5:31:36:be:1b:68:42:0f:16:a7:0d:d6:f7:2d:1a:4f:ca:
         12:0f:6c:2e:cb:f7:83:0b:dc:30:b4:e6:10:e7:42:e9:22:32:
         68:78:35:21:2c:9e:4b:3e:51:71:eb:3d:fa:0a:c0:4b:81:24:
         38:77:6b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:29 2025 by rpki-client