Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2b21343e-c534-3f61-8322-4bc8dc728828.roa
File:                     2b21343e-c534-3f61-8322-4bc8dc728828.roa (raw, json)
Hash identifier:          pl24lNwMzY95OwTr4C5j8v3HeRji62a8qxYDLg1tXyo=
Subject key identifier:   38:9F:1B:10:60:B3:23:32:FA:92:C7:27:F4:60:EB:68:E6:33:E5:9B
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A315D2C05AAF2C345A252B00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2b21343e-c534-3f61-8322-4bc8dc728828.roa
Signing time:             Thu 23 Jan 2025 06:07:37 +0000
ROA not before:           Thu 23 Jan 2025 06:07:37 +0000
ROA not after:            Wed 23 Apr 2025 05:07:37 +0000
asID:                     19165
IP address blocks:        2604:5500:1000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:15:d2:c0:5a:af:2c:34:5a:25:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 23 06:07:37 2025 GMT
            Not After : Apr 23 05:07:37 2025 GMT
        Subject: CN=d36ddd5a-4bc7-453c-8ccf-6563ac93e260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:45:5e:f6:89:3d:ef:01:13:1a:26:55:88:
                    49:96:e4:92:f1:1c:36:f2:6d:be:a1:ca:a3:d6:7a:
                    c8:e1:fe:a9:58:a2:c9:28:a9:01:67:0d:3e:8e:29:
                    48:6d:0d:6d:62:79:5c:b4:1d:f9:aa:7a:81:19:38:
                    2a:ca:da:26:f9:25:0d:74:ab:f1:5b:32:ab:32:c0:
                    cf:cc:b2:e6:57:c0:27:36:0d:e7:3a:4b:4e:b0:45:
                    a9:14:c1:19:3a:1b:d9:9e:9c:6d:5a:7d:fe:be:50:
                    40:47:de:01:9c:9f:61:d8:72:5d:b4:fa:64:ca:7c:
                    29:1f:de:8b:68:db:7d:47:05:af:a1:fb:fd:fe:57:
                    d9:a9:3a:ef:f4:e4:a3:b6:37:d9:73:84:8e:12:1e:
                    d6:c1:d2:50:a5:f6:e8:db:0e:7f:a3:8b:7e:94:fd:
                    7d:d8:f3:ea:bf:36:cb:a0:9b:41:0e:23:66:8d:9f:
                    19:22:cb:eb:bd:dc:99:89:86:10:b2:99:1b:1d:93:
                    fe:6d:7d:e0:08:da:8f:b4:fd:9c:26:fa:1d:51:ea:
                    5b:cc:46:2f:de:a5:c3:53:34:1d:d4:57:3b:3f:a8:
                    1b:01:37:43:f6:5f:28:90:46:6e:bd:1a:31:f3:73:
                    fd:ec:76:59:f9:b1:51:d4:f1:7d:d8:de:43:5a:33:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9F:1B:10:60:B3:23:32:FA:92:C7:27:F4:60:EB:68:E6:33:E5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2b21343e-c534-3f61-8322-4bc8dc728828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:1000::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:54:c5:76:86:0b:af:de:4f:55:74:bc:02:a8:4f:5c:b9:22:
         a4:bd:a6:9f:c5:f8:b5:dd:92:40:79:1b:1f:c6:6e:13:29:68:
         8a:ec:e1:13:93:9c:9b:7f:08:8c:d3:83:1a:8c:c4:29:7d:12:
         30:4d:89:bc:0d:5e:74:3e:56:78:bb:b7:7b:34:9a:02:fa:10:
         ca:d7:9b:8a:bc:97:6a:86:5f:89:37:b8:17:29:aa:b6:65:b0:
         39:7d:02:bc:61:5d:98:b2:6e:f6:6d:c4:22:1e:39:0f:de:2f:
         48:2e:bf:ea:36:6b:f7:43:fa:f0:8a:2c:45:92:0e:0c:f1:67:
         dd:7a:2a:b5:1a:18:4f:33:d1:b5:a0:05:73:88:e1:ab:52:61:
         ac:62:32:1f:68:01:3f:99:d5:0d:ee:89:fb:5d:e3:2f:7f:ac:
         a4:df:74:9b:cb:e5:0e:88:a6:4f:be:6c:98:e0:3f:6e:77:e1:
         03:12:e2:49:67:5f:21:4d:a0:3c:d2:0e:9f:19:bf:2a:5c:00:
         08:67:2b:14:2f:c5:40:b2:ef:74:14:df:09:ba:7c:db:54:93:
         e6:58:0a:68:87:d8:a0:1e:ec:4c:f1:01:36:6e:9f:c4:a8:1f:
         1e:55:b9:a0:d2:51:23:a0:93:25:f7:32:d4:fa:bf:30:ed:d9:
         38:4d:45:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:49 2025 by rpki-client