Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa
File:                     101dc82f-fc97-31a5-91b4-27b864fd35bd.roa (raw, json)
Hash identifier:          KDUHZ6FoIXs/3FHQGj8P3GXlrC48j8nlNZ85sxIaS7Y=
Subject key identifier:   9D:92:FB:60:19:37:0D:23:7E:D9:8D:7E:3E:3B:87:1C:09:6D:BB:04
Certificate issuer:       /CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
Certificate serial:       010D0C9F43285848BBBB839BC4DE707629E80F00
Authority key identifier: 1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     197767
IP address blocks:        2602:fa56::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:83:9b:c4:de:70:76:29:e8:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=25574382-93ec-4519-a1c4-94f59b28523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:1b:b6:38:38:a7:7d:b7:d4:c2:2d:ea:b1:
                    e5:b2:e9:f1:f1:6c:c3:5f:2c:1a:46:61:1e:f3:e8:
                    53:1e:ca:77:c1:81:3a:8b:4e:bd:e6:a7:3f:e2:15:
                    57:2f:55:5d:c3:a3:b5:bb:39:f3:41:f8:ca:eb:a1:
                    9f:a2:8d:65:a4:9a:a2:87:4f:ee:fd:13:ce:b0:cc:
                    bf:89:93:f7:62:54:d6:0f:65:ec:39:7e:f7:26:c1:
                    72:76:83:a9:34:c7:fa:5c:14:63:14:f6:64:a9:00:
                    bc:aa:20:37:80:d6:4f:6c:b1:d3:43:5e:39:c3:5d:
                    f4:23:f8:72:d5:1f:42:23:d2:ed:d7:b1:46:20:17:
                    58:0d:73:c1:e4:0f:9f:8a:e0:64:95:4d:77:c8:55:
                    36:16:ba:e7:50:88:06:c8:99:d2:77:98:fc:5a:d8:
                    51:55:e5:55:f6:f5:48:63:9b:2e:b5:1b:3a:8d:1f:
                    7f:8e:5c:03:41:bb:a0:e6:80:e0:e8:e3:55:55:29:
                    a3:70:f2:6a:73:10:69:02:85:9f:04:eb:d8:d6:7d:
                    ce:57:70:0b:52:45:d7:6a:1a:14:22:0e:9e:3f:a7:
                    c2:b2:de:91:94:8e:fd:cc:cc:13:f3:f6:97:0b:30:
                    1d:55:7e:72:15:4b:6b:74:61:71:41:4b:4e:70:4c:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:92:FB:60:19:37:0D:23:7E:D9:8D:7E:3E:3B:87:1C:09:6D:BB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa56::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:fb:77:ba:7d:51:4d:d7:50:a8:eb:03:2c:7f:a0:b0:4c:
         b0:65:b0:d6:9e:2e:72:42:99:b3:d9:e6:4d:90:c6:7b:b7:49:
         8b:73:02:bf:15:0c:f6:2f:66:58:2d:3f:a9:03:25:4f:0b:a2:
         95:69:8f:5d:bc:48:d1:98:e8:8e:e9:42:a3:50:42:78:08:85:
         1a:bd:72:9b:ec:2d:d2:97:df:b5:bf:7c:91:46:26:63:bc:24:
         4a:bf:bd:f3:a1:c1:68:26:8b:2c:96:57:fe:53:e8:3c:ee:3b:
         f9:56:42:c0:e1:46:42:5f:cb:42:62:a3:8c:21:49:9b:3b:ae:
         88:5e:6d:90:b7:79:7f:ce:d8:cc:76:fe:d0:0b:bc:97:89:e2:
         b8:4d:10:10:bc:8f:bf:a6:4b:e8:10:e5:5b:08:26:cd:79:93:
         bf:11:14:c5:1e:73:ab:ed:4f:e8:6b:10:78:67:49:42:99:12:
         fe:47:dd:dd:d6:c6:31:91:04:0c:09:96:a4:41:7b:4a:e1:41:
         03:12:4a:62:e5:66:cd:6e:b9:c3:36:2c:ed:67:f9:06:8c:d9:
         4a:6f:d4:37:d8:c4:6f:8e:e5:f8:73:6a:3d:e9:1e:09:87:bf:
         c2:f3:70:fa:dc:4b:35:aa:3a:09:3a:a0:6f:87:a6:a7:45:56:
         f3:44:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:23 2025 by rpki-client