Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa
File:                     a872dc60-b0fd-32cc-a999-53e91767b69c.roa (raw, json)
Hash identifier:          Px+KOQgSQmG30dBgR3q1fsEaEi7usFczaQXfadCscpY=
Subject key identifier:   5B:4B:E0:C8:B9:34:E5:E7:0A:20:AA:A0:64:52:DE:F3:BD:AF:17:7D
Certificate issuer:       /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
Certificate serial:       010D0C9F43285848AF2B836E867E311A808C43E0
Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2602:f8d4::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:83:6e:86:7e:31:1a:80:8c:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=2e0c8ad0-5089-49a6-8ce9-6408a00ba63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:df:2d:8c:b4:cc:40:f3:c5:fd:68:87:06:
                    1b:47:33:d1:1b:7d:a9:c3:f7:8e:3d:5a:c6:70:aa:
                    97:d4:7c:eb:8e:ff:18:50:82:5f:58:7b:8b:82:aa:
                    5e:60:ef:fa:d3:06:c7:89:b0:9e:be:6a:39:8b:62:
                    6a:c2:37:89:07:62:ee:b2:27:b5:a6:26:09:1d:71:
                    1e:d3:4a:3f:34:2e:37:2c:1c:42:b3:1c:f2:a0:a7:
                    c8:43:d5:26:da:14:98:02:0d:78:73:64:02:09:22:
                    88:33:aa:59:07:65:7d:0a:f3:49:23:0c:d2:24:be:
                    d3:81:3d:9b:f3:e6:66:bf:e8:f9:30:ef:81:d3:2c:
                    b1:9d:d0:1c:d7:76:52:41:7e:7a:9e:e5:4b:75:df:
                    e0:b0:1d:b3:c8:10:62:db:ba:98:6c:dd:b9:a7:65:
                    b2:9f:9f:8f:ea:9e:c8:44:14:0e:84:1b:af:bc:35:
                    9a:53:e9:59:6c:1e:63:4e:dd:34:fe:b6:90:a7:0c:
                    f0:fd:65:95:34:7a:74:e0:58:ee:26:01:b3:69:65:
                    b7:79:f3:bc:77:b9:5d:ab:f2:80:05:95:b1:06:ad:
                    c1:57:d4:80:ec:ff:a2:c7:b4:8d:c3:d6:19:da:28:
                    8d:39:3b:b5:e2:cc:b6:1d:2e:b3:7b:0e:50:2a:0f:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4B:E0:C8:B9:34:E5:E7:0A:20:AA:A0:64:52:DE:F3:BD:AF:17:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d4::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8e:84:fb:ef:79:6b:cc:95:dc:00:18:bd:cd:be:98:f5:50:
         79:55:64:f3:8b:c4:94:6e:41:3d:5b:bb:29:45:df:8c:97:56:
         53:3e:30:3d:0d:7e:f1:45:0c:95:39:b5:11:b0:7b:6c:e4:bb:
         82:85:d6:dc:54:63:a9:28:13:99:72:51:a7:d5:05:e5:7d:b6:
         e5:13:3c:b7:81:c2:30:66:06:d6:c3:d4:ce:19:b6:a4:89:90:
         23:ec:6f:63:d7:1b:f1:b0:8f:00:73:80:d1:0b:cb:fb:b4:e3:
         af:3c:fb:93:46:4f:0b:74:f5:68:4d:5a:87:6c:19:b3:41:b5:
         f5:d5:77:1e:f4:0b:36:8c:91:f4:ad:b4:db:3a:58:3e:13:98:
         05:89:65:86:e3:aa:c2:25:f9:9e:fb:99:50:12:e1:29:8d:f3:
         89:8f:c8:01:78:2d:14:57:4b:f7:f0:9d:e0:a4:80:d9:cf:12:
         47:57:6f:bc:a0:c8:50:7b:9e:16:92:ec:c6:f3:27:cd:ea:cf:
         70:74:cd:bb:81:1d:d4:c9:62:fa:02:1c:c6:23:8a:03:f0:d7:
         21:98:db:ee:7b:54:8b:d3:00:b7:4f:06:e1:e0:95:7c:84:c9:
         ce:a7:19:96:7e:31:dc:bf:83:c7:b7:89:83:a4:57:21:0e:55:
         42:33:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:29 2025 by rpki-client