Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
File:                     cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa (raw, json)
Hash identifier:          JPSAFmzbypQYmgPctvpKdVTcM3re72msFYLXHNlCly0=
Subject key identifier:   EF:2A:9A:83:81:45:92:B8:BD:86:1D:DA:6F:E3:3A:A2:E7:CB:56:E9
Certificate issuer:       /CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Certificate serial:       010D0C9F43285848A400B54F1805CD7D1C4A5700
Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     396319
IP address blocks:        2601:1308::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:b5:4f:18:05:cd:7d:1c:4a:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=2f911989-48a2-4d75-a416-8ffa75517eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:d6:4a:8f:3a:57:cb:2f:66:8c:59:87:3b:
                    e8:30:9e:d9:2c:e4:d4:15:aa:c7:27:38:e0:f7:7e:
                    9e:31:64:ac:c1:54:4f:6c:8e:d6:a0:78:b8:6c:a1:
                    38:f7:4e:dd:bc:5a:e0:db:d3:26:76:e8:c5:ce:1f:
                    7b:6c:f1:bb:6e:f1:af:12:e6:84:b5:e1:e9:93:44:
                    d5:5c:90:a8:19:2a:27:2c:5f:30:0b:81:bd:3f:6b:
                    69:01:af:fe:16:05:56:13:cd:53:32:62:8e:f3:89:
                    0c:18:48:4f:ac:59:59:9e:a6:f5:bd:31:bb:0d:ee:
                    92:a3:63:0c:8d:a0:0a:38:bb:43:4b:40:bc:26:4e:
                    93:9e:6e:7e:e2:35:82:21:83:1b:47:0a:2d:03:5f:
                    f0:7f:8c:a7:e4:bf:19:e6:75:7a:18:1f:c9:58:a4:
                    0e:af:e1:fa:e7:9a:95:86:d8:f2:b0:8f:96:3e:bc:
                    14:48:da:7e:77:56:cc:0c:51:dc:bc:c0:1c:a8:31:
                    49:56:ad:7c:a9:10:57:5c:63:e5:e5:f3:97:46:ba:
                    a2:e8:69:f2:34:5d:18:85:b9:63:7a:9f:60:71:c1:
                    d7:de:f5:a4:72:e2:19:36:cb:76:fe:75:8c:79:f5:
                    72:6c:99:0d:ac:4e:4e:6a:37:83:b3:95:8e:fb:31:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2A:9A:83:81:45:92:B8:BD:86:1D:DA:6F:E3:3A:A2:E7:CB:56:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl

            X509v3 Authority Key Identifier:
                keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1308::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:e2:62:81:b6:f9:4c:0a:8d:f3:7b:75:ae:2a:ef:05:d3:
         0c:09:4f:f6:cd:8f:38:01:9f:95:7d:bc:7c:5d:97:eb:95:ed:
         84:82:47:2c:fe:9c:90:a4:78:b1:83:7b:6e:57:cf:75:eb:75:
         e8:99:ed:08:fe:f2:17:73:52:45:bc:54:46:1e:36:8b:ab:9f:
         ed:61:71:c7:d8:10:ed:ee:d1:e4:53:2e:f2:cb:04:09:ad:de:
         1c:83:15:c9:65:b8:c3:69:a6:91:e3:b3:21:91:7e:6a:5b:6e:
         f6:f7:4b:01:a1:33:c1:bd:f3:87:1f:9c:8f:38:11:77:cf:fc:
         fe:a2:98:58:6b:10:4f:36:cc:d8:08:86:6f:5e:12:8f:8b:88:
         19:38:74:db:03:52:d9:0d:ed:1b:5e:ce:f6:42:60:88:4c:35:
         92:58:bf:de:f5:00:1b:46:6d:fc:23:72:83:ca:fe:bb:aa:3b:
         d8:46:78:3b:2e:b6:8b:e4:4c:3b:91:3b:87:53:d3:27:51:3d:
         7e:e5:7f:db:98:9c:ae:27:18:6d:c4:04:ad:01:da:ae:cc:76:
         ff:69:27:d5:ab:a7:18:fd:85:89:de:ef:b7:89:96:68:c4:04:
         8d:00:10:db:3e:f6:03:2f:80:f7:6e:5d:f3:5f:8b:0a:d0:7d:
         6c:e4:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:21 2025 by rpki-client