Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
File:                     83c6daf3-1df5-34c8-bcfe-d09465201564.roa (raw, json)
Hash identifier:          EzBhfACatp/vY3RS/9Bcp0QMpV8cV7a2Av9MWKH3GNA=
Subject key identifier:   1D:B4:06:03:3E:A3:AB:34:F0:0B:48:AD:70:E6:39:F0:2C:41:9D:E4
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F432858481BD6584809F62F48C97D4B50
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
Signing time:             Thu 05 Dec 2024 19:25:35 +0000
ROA not before:           Thu 05 Dec 2024 19:25:35 +0000
ROA not after:            Wed 05 Mar 2025 19:25:35 +0000
asID:                     0
IP address blocks:        2602:f777::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:d6:58:48:09:f6:2f:48:c9:7d:4b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Dec  5 19:25:35 2024 GMT
            Not After : Mar  5 19:25:35 2025 GMT
        Subject: CN=95c9dba1-0242-4e56-ad14-cb208d23e0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:53:bd:cc:04:44:7e:d5:7b:05:55:87:8e:
                    1b:44:5a:13:73:e4:98:a0:af:ad:d9:fa:f0:8c:22:
                    51:18:47:a1:55:0d:52:40:23:2c:1f:95:c7:15:92:
                    4b:09:ed:e0:d2:e0:6c:ee:d0:1d:70:de:70:a3:4f:
                    27:10:d8:b1:57:9b:51:fe:e3:c0:d9:91:94:ee:02:
                    7f:4c:ff:db:e7:33:51:a8:b0:6e:01:d8:30:34:56:
                    e8:6b:bc:c5:1a:08:69:a2:3d:03:49:d4:b4:61:6a:
                    3a:fc:41:27:89:81:9b:4e:c7:d9:3a:e0:b7:b8:31:
                    86:7b:c1:2a:a5:bc:8c:4e:0c:e8:2d:5d:dd:4d:63:
                    f6:b4:51:d2:60:9a:3a:1b:f8:6e:b0:62:ae:48:6b:
                    ed:3a:5a:5e:70:47:22:f1:83:5b:9d:69:83:b2:e1:
                    b6:19:86:40:2d:74:c7:ea:22:eb:4e:37:68:6d:e7:
                    99:b5:51:9b:ea:9e:2d:b3:6f:13:14:b1:24:07:40:
                    17:73:27:0f:95:f8:4d:aa:76:51:1b:96:85:b0:9e:
                    65:79:d3:b4:c8:57:36:0f:65:f3:ba:ca:4c:8e:7f:
                    1c:4c:ce:a2:e3:fe:a9:63:ee:fa:33:d6:87:35:2e:
                    3c:fe:4c:4b:84:ee:26:bb:89:1d:7e:e6:f7:d8:13:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B4:06:03:3E:A3:AB:34:F0:0B:48:AD:70:E6:39:F0:2C:41:9D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:2d:0b:eb:09:4f:cd:7d:7d:25:00:3f:07:a6:53:b1:cc:
         af:89:df:d7:da:c6:26:54:e2:a0:56:c9:2e:87:1d:96:ca:bf:
         90:92:84:ea:84:67:47:38:3e:34:f6:5a:62:b3:93:3f:7d:72:
         c7:e2:56:4b:44:35:3b:72:42:e9:5d:6a:a9:54:b0:28:85:e1:
         fa:37:f0:46:37:aa:0f:a4:d5:ab:90:d9:24:e0:82:04:21:17:
         a9:ae:40:a8:d2:17:00:17:92:60:2e:01:45:5f:79:29:85:d7:
         14:d7:1c:c9:70:5a:33:35:03:26:d1:18:7c:e5:02:1a:36:43:
         7e:4f:e8:70:24:40:28:ac:ca:18:d9:dc:66:41:f7:9b:61:9a:
         09:ed:03:fa:9e:2f:3d:2c:8c:62:d2:c8:65:48:55:ea:b7:c7:
         e4:56:76:62:67:6b:5f:57:8d:95:cd:cc:52:50:bd:6b:bb:76:
         62:ae:8b:f1:a5:0d:18:e8:07:8c:06:0e:09:d9:5d:06:64:40:
         4c:01:b8:66:d6:47:cc:05:88:40:f8:a1:de:ea:fb:9d:c0:a0:
         63:c2:25:0c:00:27:d6:ac:16:7f:29:1d:04:de:00:03:fe:64:
         da:ef:42:b9:e9:e0:48:d8:17:a5:3d:34:2f:40:1a:a2:7a:0f:
         8d:94:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:16 2025 by rpki-client