Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/272eb504-2f33-3510-8d10-bd66f52f3bc0.roa
File:                     272eb504-2f33-3510-8d10-bd66f52f3bc0.roa (raw, json)
Hash identifier:          7ihBctYDgMMP/lCOSpnYudU3qKDXAm7JKaeeRRgr5Uo=
Subject key identifier:   60:D0:8B:45:06:FA:2D:90:62:9F:9F:28:21:13:EC:8E:B4:5F:9C:FC
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584865303FADEA00FCD97A13A300
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/272eb504-2f33-3510-8d10-bd66f52f3bc0.roa
Signing time:             Wed 01 Jan 2025 02:00:40 +0000
ROA not before:           Wed 01 Jan 2025 02:00:40 +0000
ROA not after:            Tue 01 Apr 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        2607:8e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:30:3f:ad:ea:00:fc:d9:7a:13:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jan  1 02:00:40 2025 GMT
            Not After : Apr  1 01:00:40 2025 GMT
        Subject: CN=d41795a2-e80b-4f75-af5b-16d195f59f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:85:36:72:ef:1f:1b:8b:80:96:e1:0a:ec:
                    63:d7:f5:e2:81:43:08:10:a6:26:a1:df:b0:bd:64:
                    4b:c1:df:8d:a0:57:27:24:a2:43:f2:f8:64:ba:b8:
                    95:61:44:7d:b0:c4:17:67:33:bc:d5:fe:50:61:cc:
                    1f:31:6d:48:c5:cc:cf:cc:0e:a4:37:04:d4:88:f4:
                    62:f1:ef:53:9f:e9:05:5b:45:c9:77:55:75:b8:79:
                    f8:b1:d8:45:f9:d4:13:fb:6b:78:cf:8a:b0:55:d4:
                    ea:44:81:71:b5:f9:e3:62:07:59:c3:3e:84:65:1a:
                    4a:60:8f:60:50:ff:24:0d:49:e0:a9:f0:ff:2d:25:
                    86:1b:cb:86:10:e5:89:89:65:59:18:83:3a:5e:20:
                    77:b6:a1:78:1e:fc:96:28:88:2c:6a:7f:0a:5f:47:
                    92:8e:0b:d3:ea:1f:36:bc:a0:37:f2:bd:3f:6e:7f:
                    37:e5:8d:ec:44:3a:93:1f:19:a3:88:94:2a:30:1d:
                    b9:e5:96:63:b8:ee:76:9d:0a:d9:cb:d5:b1:ec:b0:
                    ad:ef:6d:7d:de:42:c3:a2:2e:a9:37:7c:d9:36:e4:
                    6e:74:a7:27:f2:83:20:e5:ea:7b:d2:cb:4e:89:25:
                    29:aa:8f:90:91:7e:a7:53:58:ad:56:b9:05:5c:80:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D0:8B:45:06:FA:2D:90:62:9F:9F:28:21:13:EC:8E:B4:5F:9C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/272eb504-2f33-3510-8d10-bd66f52f3bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:10:04:ee:62:9b:db:e3:87:31:f8:c5:59:03:3d:00:28:
         6f:e2:30:72:da:d5:10:c8:b0:62:53:56:cd:3c:69:61:51:01:
         e9:d1:92:b4:b0:2e:5b:37:6c:66:b0:c2:36:8d:58:e5:b7:09:
         83:23:3f:92:2b:94:74:1c:08:83:57:20:e0:a9:17:06:49:a9:
         d5:a3:ed:f9:f2:d4:d3:8e:76:e9:9a:92:3a:56:d6:a6:b0:9f:
         00:c3:d5:c5:17:a8:06:03:5e:e1:89:65:2b:6e:98:3f:36:47:
         1f:3f:19:5b:b6:5e:5e:94:fa:ab:78:5d:4e:e5:af:45:b4:e8:
         b2:09:8f:15:b7:71:7c:51:1f:e3:79:55:e0:8b:2a:6c:1f:d1:
         d7:91:f1:da:6c:fa:33:bd:23:d0:a0:d9:e8:0e:f9:e6:e4:67:
         04:f4:75:60:6b:6f:34:cb:4e:7c:50:f2:08:0a:31:ec:ac:6d:
         c3:8f:35:8a:fc:86:e7:03:16:a8:5d:3f:04:fe:7d:88:fb:1a:
         b6:56:9f:1d:15:fe:2e:22:ae:bb:3c:50:a9:a5:ac:d5:a5:f7:
         6f:4d:16:1a:60:d1:30:4e:7a:59:d6:63:89:a4:98:28:50:33:
         33:d9:57:f3:0b:fe:a6:2f:54:0f:d3:4e:08:52:7f:8c:a6:44:
         d7:d1:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:04 2025 by rpki-client