Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa
File:                     44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa (raw, json)
Hash identifier:          R3MQHcZUVpuHzuHP1JScaPhRPovpfh4apZcTUfZgDyA=
Subject key identifier:   BF:84:BB:FD:8A:70:6D:AC:18:0D:4A:10:1B:DA:E1:93:1D:F9:84:9B
Certificate issuer:       /CN=47b47588-3e08-42bd-8292-d5cf9cbddd91
Certificate serial:       010D0C9F4328584883E5BAA6E896F34BFD808C80
Authority key identifier: C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     396168
IP address blocks:        2605:f7c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:ba:a6:e8:96:f3:4b:fd:80:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b47588-3e08-42bd-8292-d5cf9cbddd91
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=f033d03f-fb78-4ce8-b2ff-c539826771b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:8c:d8:4e:a3:b2:96:d8:58:d2:53:4e:83:
                    6a:03:fb:56:59:34:58:f3:15:5b:53:e3:c1:43:a8:
                    c6:2f:9b:04:63:21:65:9d:b8:db:d5:df:46:2c:c6:
                    26:c1:1c:03:cd:53:04:72:05:42:4f:89:e9:6c:68:
                    8c:76:c9:94:bc:7c:7a:29:8b:fd:91:12:0b:db:13:
                    2a:95:a6:56:bb:f3:ad:b7:dd:bf:ca:e3:a7:37:7f:
                    f4:7d:b0:28:33:fb:79:0e:44:5f:95:f3:78:83:d2:
                    34:e5:21:db:93:ad:72:b1:4a:2e:e9:ee:38:b5:8f:
                    83:c1:6e:fd:e2:76:6f:97:a1:6e:15:65:f5:1e:b0:
                    34:e1:f9:e5:5f:5a:8f:bf:f8:cb:8a:6b:89:23:27:
                    cb:a6:ba:56:e0:6a:e0:e1:60:d7:37:f3:64:0b:d9:
                    5e:41:7d:ed:e2:19:a0:11:54:31:b5:56:a9:af:7b:
                    86:c3:a9:aa:a4:76:f4:b6:dc:2a:8c:80:47:27:06:
                    c4:92:16:d4:0f:07:63:91:ae:b4:88:f0:b7:4d:45:
                    16:bc:34:be:1a:e0:5f:17:31:20:8b:54:ee:64:d6:
                    d4:bb:ea:f6:31:e4:b3:ef:5f:48:66:b7:cf:96:67:
                    4f:bb:a7:50:fc:f5:e7:3f:f3:24:64:7e:2f:26:cc:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:84:BB:FD:8A:70:6D:AC:18:0D:4A:10:1B:DA:E1:93:1D:F9:84:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:49:9f:b5:3f:e4:24:f2:cf:8b:97:1d:0a:3e:d7:a1:be:
         d1:21:ef:10:77:eb:21:62:e8:df:a9:a1:3a:31:aa:cc:cb:e7:
         d6:68:cc:0b:4a:fb:46:44:33:39:9b:d1:05:78:d0:df:64:87:
         46:9f:33:96:78:67:f2:33:84:92:d4:88:c1:72:18:5c:79:60:
         c5:38:02:6d:6d:36:81:28:3f:70:49:ef:89:fb:88:8f:9b:ce:
         38:67:2f:a7:c8:25:4a:8f:f1:ad:5c:91:04:14:1a:7c:ce:6b:
         96:84:79:bc:e0:57:16:0c:e7:d6:49:8a:5d:60:11:b8:23:ee:
         e2:ab:ec:0f:52:f7:43:51:27:25:80:32:e7:c1:0b:88:16:7b:
         ba:57:10:78:fb:9f:ac:75:d0:ec:df:3a:44:8f:dc:b8:88:21:
         32:27:5a:83:29:d5:b3:78:de:75:cd:19:03:62:5f:e8:57:d2:
         4d:94:9d:98:29:99:d0:57:2f:7a:4f:67:88:1c:75:4b:ca:7d:
         9d:f9:43:30:79:ed:4e:17:46:92:38:a4:36:b0:c1:af:a3:6c:
         75:15:ee:1e:b1:cc:8b:48:7c:40:52:21:93:a7:94:84:98:74:
         ce:f2:de:7c:3e:45:f4:c7:81:73:2a:e8:90:77:d4:71:cc:b6:
         71:22:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:37 2025 by rpki-client