Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa
File:                     ecfa0f99-7baa-3072-8fa5-53106bacf901.roa (raw, json)
Hash identifier:          im+sJgcFNDwHCzyWMdAl/lBOyd/SLeTcQufn1uHmMow=
Subject key identifier:   2B:B3:D7:69:58:30:22:52:47:04:32:EF:8E:37:3A:C8:81:5E:E4:45
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F43285848547022127D78398180355880
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     34553
IP address blocks:        2602:809:3004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:22:12:7d:78:39:81:80:35:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=e20516d0-c3f4-409e-a09d-167e744e6c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a9:f9:14:3a:c1:ad:65:19:ad:03:e1:12:b7:
                    89:75:75:e4:75:c7:9f:5a:91:98:3c:51:51:18:fd:
                    02:91:31:14:e3:44:31:c3:fb:c9:6c:6f:da:e0:aa:
                    d7:23:d4:b4:f4:1d:83:63:eb:44:44:ff:b1:1f:ed:
                    c6:68:a0:e4:d2:1c:bb:9f:af:57:16:c2:2f:a5:cc:
                    5f:13:1a:78:96:d9:bf:71:18:d3:c5:8a:c7:b6:cb:
                    7d:d8:df:6d:79:77:cb:56:02:4f:02:3a:fb:b9:2f:
                    ee:c0:1e:c7:cb:34:c8:19:ab:9f:27:0c:8d:b7:4e:
                    a8:7b:8a:78:5d:18:78:96:e1:36:6b:30:06:fe:cb:
                    86:75:fc:52:13:c3:10:d9:4b:09:95:48:2b:21:ce:
                    66:0a:a2:01:fd:76:f2:f0:b5:8f:9a:32:f8:58:20:
                    20:18:b3:95:9d:64:04:e8:89:a6:9f:aa:b8:71:4b:
                    3b:61:e3:05:ca:d8:00:e6:9f:43:38:32:dd:63:9d:
                    d8:92:88:5e:46:2e:68:55:c1:7b:56:ce:dc:34:20:
                    da:76:e9:3e:fd:9c:4a:ad:8c:82:d5:fe:c6:d4:37:
                    81:d1:0a:be:17:b9:96:f4:ac:5d:7f:05:43:a3:eb:
                    16:d9:d2:f8:91:f0:b7:e6:9b:b9:6f:33:0c:89:23:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B3:D7:69:58:30:22:52:47:04:32:EF:8E:37:3A:C8:81:5E:E4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/ecfa0f99-7baa-3072-8fa5-53106bacf901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:809:3004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:45:a4:c0:e6:0c:b8:00:22:8b:27:23:d7:8e:b5:2e:f4:b4:
         e1:15:d0:23:7e:ea:62:81:cd:de:7a:67:8d:d4:00:5b:9d:2c:
         f6:b0:5f:16:44:5a:e8:3a:e7:31:f3:c8:9a:34:01:f0:79:27:
         ed:46:82:fb:b7:41:17:fa:cc:65:fd:af:a5:db:05:a9:a3:59:
         fe:1a:26:bc:bd:52:83:39:34:38:ca:dc:b8:da:7b:c6:56:61:
         5b:6b:fa:f3:97:66:16:42:c5:29:eb:29:b3:81:79:32:85:7e:
         5b:ce:07:6c:f5:a8:c6:15:4e:6d:2a:df:35:4e:f6:19:e3:f8:
         53:ea:e0:bd:ea:02:38:3d:e1:b8:4f:67:e5:81:73:13:da:f4:
         ef:11:ed:0d:7a:51:4b:7e:8d:17:4d:57:dc:cb:1f:55:02:e6:
         36:89:0f:ca:1b:ae:b0:4a:36:29:ad:36:13:8a:38:79:4c:18:
         0d:ab:b4:bb:e1:c9:b9:76:0d:7a:19:4c:be:c6:9a:21:e8:58:
         fb:e3:e4:a7:68:b0:d6:2f:3f:ae:4f:77:ff:9e:d0:f1:0e:55:
         e3:31:ce:06:57:dc:20:49:54:61:67:9d:40:42:a1:b0:a6:4f:
         ac:eb:b0:dc:f4:a7:d6:6e:ab:cf:6c:a3:b4:e8:db:27:09:37:
         74:8a:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:02 2025 by rpki-client