Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa
File:                     99a6120f-79f5-3510-b656-c65e64170adc.roa (raw, json)
Hash identifier:          XEfPmvKaM8ogHiJsOzdP+PozR/nUWXjnRcsDfyTw0lw=
Subject key identifier:   98:31:03:34:44:3D:D9:2B:6C:CC:A1:2A:D4:06:19:F1:6B:3C:AF:98
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F432858481BD6E41EC80BB6D848AC8640
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa
Signing time:             Thu 05 Dec 2024 19:26:41 +0000
ROA not before:           Thu 05 Dec 2024 19:26:41 +0000
ROA not after:            Wed 05 Mar 2025 19:26:41 +0000
asID:                     401485
IP address blocks:        2602:f777:400::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:d6:e4:1e:c8:0b:b6:d8:48:ac:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Dec  5 19:26:41 2024 GMT
            Not After : Mar  5 19:26:41 2025 GMT
        Subject: CN=f8b922df-a18f-47e8-a250-bde48397478f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:d1:b6:f7:7b:48:1b:ec:51:c2:b9:35:a4:
                    b2:e4:b4:70:7a:b5:51:63:2b:d1:cb:b7:11:00:4a:
                    e9:cd:bb:a4:6b:e8:1a:38:50:9c:19:e0:38:66:35:
                    28:3f:75:28:b6:4b:49:ff:16:da:28:a7:f5:12:dc:
                    f5:05:31:54:0a:e3:03:e1:be:9a:a6:46:9e:b9:4e:
                    67:7a:90:c0:bc:f4:c4:b8:5a:a3:6d:92:96:6e:90:
                    1f:54:de:45:60:ca:22:20:cc:06:e2:7e:aa:02:93:
                    8a:04:ef:d7:7c:03:9b:b9:13:4d:7c:60:51:73:40:
                    e3:db:ae:ac:59:67:d8:8d:ef:5e:53:fa:c1:db:a0:
                    9f:b2:32:a8:31:94:eb:ce:86:19:32:62:22:99:51:
                    e5:6b:bc:7c:d3:bb:91:05:ca:a6:88:a2:16:a3:1a:
                    24:bf:2e:0f:c7:c1:9f:74:e9:ca:68:03:d0:34:4c:
                    9e:a8:a6:6b:88:14:6b:87:31:08:f2:f5:21:7e:e9:
                    23:ae:ee:3f:91:c3:d0:d4:23:52:15:07:16:2b:f6:
                    81:0c:32:23:5d:19:8d:03:28:74:8d:fc:17:d1:de:
                    3d:0a:83:d0:33:e5:de:68:c0:c7:e2:7a:d0:e9:a5:
                    0d:3b:6d:dd:dc:53:60:22:21:d6:cd:b8:3a:7e:b4:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:03:34:44:3D:D9:2B:6C:CC:A1:2A:D4:06:19:F1:6B:3C:AF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:8f:b5:2d:06:23:85:4b:59:5e:8f:d2:fe:f6:66:89:ae:
         b7:13:b4:32:9c:b2:59:f3:76:fb:26:f9:af:4a:22:22:46:47:
         ae:97:dd:d0:eb:5a:fa:1d:6a:75:75:8a:1c:79:c3:61:cb:b0:
         01:b4:b9:69:28:29:c8:fd:22:8a:67:f4:60:3f:a6:40:28:4b:
         0f:3f:7d:94:8d:8e:cc:35:e7:18:37:00:92:0e:38:40:b1:16:
         8d:01:1f:dd:c6:c9:5a:b5:c3:c1:d8:90:b2:19:f9:f8:0c:2f:
         3c:11:76:98:83:dd:3f:93:3a:f9:c3:04:c0:63:6d:cb:c8:55:
         6a:c6:34:76:e6:dc:ee:b8:c9:60:df:f3:29:bb:fe:da:7d:7e:
         50:b6:e8:3a:fb:c5:bc:cc:35:48:be:c3:00:3c:2f:00:5d:2a:
         e5:c6:bc:1a:b1:d9:d9:52:63:55:52:e1:19:3a:40:6d:e9:42:
         27:42:45:be:62:d0:e4:e9:cd:73:2a:46:51:ab:19:89:10:93:
         76:62:21:be:87:2f:a1:df:36:28:3c:7d:dd:97:eb:51:20:ab:
         e2:06:70:e7:8e:70:e2:50:6c:d9:bd:24:72:60:da:7c:37:e5:
         78:cd:9b:f1:77:d0:06:68:87:c6:af:ad:c5:0e:91:a1:83:5e:
         b0:1c:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:52:44 2025 by rpki-client