Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa
File:                     30d374fc-486d-372b-9c83-8a66ef0b4926.roa (raw, json)
Hash identifier:          IKHnjGNiDSVYFnwWgyTGPEl7FYOs9IjBWyyAiClFpEk=
Subject key identifier:   83:97:6C:8D:3A:6C:C4:E2:78:70:78:D2:83:B2:E7:AA:10:02:0F:1E
Certificate issuer:       /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
Certificate serial:       010D0C9F43285848ADC5FF92D7B6FCB27D0B55A0
Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     395261
IP address blocks:        2607:4980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c5:ff:92:d7:b6:fc:b2:7d:0b:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=6ae2cb6e-eb85-48ff-8b0e-ad893b45688a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:82:f9:f2:87:60:ff:bb:63:00:e5:a1:ce:
                    a6:a6:40:9a:37:50:e1:d7:25:8a:e1:22:50:cb:20:
                    b7:a6:41:0d:53:5d:c2:45:6c:d4:d1:58:c9:02:fd:
                    56:40:6a:f6:5e:03:85:77:df:f4:80:fb:ff:09:83:
                    92:c4:87:18:68:de:11:4b:c5:c2:d2:d9:5f:9d:c0:
                    0f:65:1d:9c:96:7e:a3:59:cb:f7:c3:19:a9:d3:b2:
                    9c:c2:82:3e:55:45:5f:83:25:be:00:0c:d7:67:a6:
                    2b:4f:49:b0:49:35:8e:56:82:29:40:a5:2c:b0:99:
                    6f:b0:a2:46:5d:20:9d:d9:bc:a8:0e:46:9f:93:88:
                    67:2e:df:93:e4:a4:0b:64:71:ca:31:ce:a5:bb:51:
                    b4:fb:1e:f1:6e:54:a2:03:6d:1f:89:99:dc:8d:0b:
                    82:fa:ed:19:72:e2:d9:71:67:5c:81:fd:69:de:55:
                    46:0d:36:e4:4f:b0:a8:4a:c3:41:32:31:b5:d9:52:
                    aa:86:51:38:de:8d:88:6d:c0:a1:8d:36:c5:0d:b8:
                    b8:b1:ff:5e:77:9c:b2:70:ed:4d:ab:90:06:21:f2:
                    13:57:c8:ba:c4:72:c3:40:b4:80:16:fa:1c:e3:93:
                    e5:e4:84:38:e2:ab:dd:a4:ad:ac:45:a0:df:44:b3:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:6C:8D:3A:6C:C4:E2:78:70:78:D2:83:B2:E7:AA:10:02:0F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/30d374fc-486d-372b-9c83-8a66ef0b4926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:be:f8:a8:df:01:34:8f:10:4b:e3:aa:fd:ea:5e:e1:a6:
         ef:50:79:19:e1:f5:75:61:ae:2d:6e:92:6f:6b:9f:84:72:62:
         07:fa:07:dc:73:2f:12:b2:36:15:2b:b6:b6:0e:08:c5:4f:ca:
         76:3d:bc:e5:eb:3a:f7:61:ee:88:b9:de:8a:56:6e:5d:34:3a:
         af:60:a4:c4:36:44:11:64:21:46:7e:68:9f:d4:f8:df:93:de:
         44:2d:40:ce:53:b4:21:0b:1f:ea:a9:87:0a:ef:c1:2c:13:ce:
         35:1b:59:12:f6:cf:43:f8:f8:f1:04:6b:f7:5e:cc:72:5b:a4:
         69:ff:9d:fb:cb:99:79:dc:4a:89:18:8c:1c:bc:c4:b5:14:5f:
         c6:24:90:26:0d:d1:5f:bc:13:87:6d:37:1b:05:25:7b:3b:a9:
         2c:0c:27:44:e0:06:cf:0d:fb:81:61:06:15:75:47:1e:aa:c5:
         2d:67:f2:d5:0b:8b:46:cb:51:53:01:5c:56:b3:ac:a0:01:4e:
         f3:e6:45:77:52:cb:93:42:51:2d:26:26:e3:af:80:e0:63:8c:
         d9:9c:52:6b:c9:31:21:d7:fd:17:e9:f8:36:80:bb:ca:1f:0c:
         f5:df:76:d1:81:98:94:b9:13:00:cb:e4:3d:2b:4c:ca:42:0c:
         37:3b:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:25 2025 by rpki-client