Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/d38094cd-02e9-344d-ac31-85024e3543d7.roa
File:                     d38094cd-02e9-344d-ac31-85024e3543d7.roa (raw, json)
Hash identifier:          BNvl3uWkJAOpe6uDfSbkikZtxZT6jgEQtx8O/zplqP0=
Subject key identifier:   D5:2B:64:63:DD:28:D7:EB:B9:39:38:63:33:77:B6:37:EE:E3:2B:49
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F432858489FD098ECAEE0601904056E60
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/d38094cd-02e9-344d-ac31-85024e3543d7.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     46474
IP address blocks:        2602:819:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:98:ec:ae:e0:60:19:04:05:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=34368117-3f9d-42d1-b861-2af4d10cb555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:49:12:4a:e1:ba:5b:e3:b5:10:1b:9d:3a:
                    fc:f3:d7:f5:c4:e6:eb:71:34:7f:2f:0b:84:49:7f:
                    a0:4e:05:8e:2f:4e:b2:36:0f:20:a8:57:a3:b2:3b:
                    5f:ae:1f:b2:b0:c3:54:ad:4a:d7:74:80:c8:79:16:
                    35:74:9e:37:06:f2:5d:e3:99:49:64:89:3c:cf:f6:
                    54:4f:02:2d:4a:68:e1:d8:94:be:fc:a4:e0:7b:ec:
                    da:af:28:be:27:59:22:75:5d:d8:2e:9d:76:98:72:
                    e9:a9:16:28:7f:f3:28:43:c6:e1:aa:92:71:0d:23:
                    66:65:b2:88:a9:75:36:6b:73:a2:96:b1:cf:c0:fe:
                    44:3c:6f:dc:3e:e6:4d:52:10:58:c6:f6:fd:9b:44:
                    8a:1b:cd:08:8e:0b:31:10:ca:13:3f:dd:6f:a9:bc:
                    63:a5:bd:22:a6:9d:ba:65:4b:23:e2:1b:6d:0d:8e:
                    50:74:09:cb:a8:23:21:70:78:58:67:d5:f3:46:9e:
                    59:34:f6:32:f7:c0:b1:47:fc:35:92:32:c0:b8:24:
                    94:ba:88:97:35:33:47:09:45:98:cd:ad:92:1b:3e:
                    7f:dd:dc:93:fb:57:48:88:d5:e7:31:c8:3a:16:a1:
                    b0:0a:0d:df:0b:aa:d7:7c:00:a4:2e:94:41:ef:2f:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2B:64:63:DD:28:D7:EB:B9:39:38:63:33:77:B6:37:EE:E3:2B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/d38094cd-02e9-344d-ac31-85024e3543d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:4d:ff:54:ff:01:dc:9b:8a:28:c0:f8:6b:e8:d2:f6:83:
         e0:91:66:9f:6e:f9:aa:df:d2:40:43:e4:32:0a:b9:d1:5c:9f:
         17:2f:1b:07:fa:a3:17:37:3a:01:83:9c:7d:08:29:a9:15:92:
         ee:47:f7:ce:44:b9:98:98:b2:2f:c0:28:eb:41:5a:0e:01:d8:
         62:95:58:6d:41:25:90:7a:4b:3d:8c:77:fc:64:94:95:2a:77:
         f5:b1:01:0f:10:46:d8:86:bb:ec:84:14:b0:0e:14:aa:ac:7b:
         1c:87:51:5d:5e:3f:08:88:3f:1b:3c:d5:b7:96:d2:96:ca:15:
         fc:83:90:c0:36:97:cb:10:5d:fc:fc:e4:32:7e:06:6b:1a:3e:
         99:fc:31:c2:b4:52:45:58:2b:61:40:2d:56:2f:3b:89:7b:8e:
         47:85:a6:1a:2a:6b:f1:2c:a6:03:d5:b0:ca:a6:e0:b1:f7:31:
         9e:ea:1d:c9:8c:81:be:6d:ca:e2:39:59:3e:04:25:c6:d5:3e:
         83:3e:a1:81:f8:ad:07:d6:11:46:c7:c6:a3:45:60:ec:77:1a:
         8e:15:c4:42:69:d7:cb:10:d9:f9:a7:ba:fc:3a:9a:47:e1:23:
         49:d9:49:2b:ef:d2:a5:57:dc:71:00:cd:cd:5a:92:6b:ff:07:
         78:97:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:41 2025 by rpki-client