Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/1f84397b-44ed-30dc-81f9-30616da81340.roa
File:                     1f84397b-44ed-30dc-81f9-30616da81340.roa (raw, json)
Hash identifier:          CTm6USNf2QDhK04Du6vNGMFJCsTI3/jyL3SOB0lfTDM=
Subject key identifier:   53:39:75:71:EB:63:8E:17:57:60:35:7A:F8:33:34:90:ED:25:3C:25
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285848100A849493242201D7DBCE80
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/1f84397b-44ed-30dc-81f9-30616da81340.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     398493
IP address blocks:        2602:fd37:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:84:94:93:24:22:01:d7:db:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=fd4799af-6088-4d3e-bcfa-d242bad14a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:0a:88:5e:0a:1a:7e:f8:62:1d:2b:f8:d7:
                    dc:49:17:14:81:07:78:fe:0f:94:f8:34:8e:22:0b:
                    ec:eb:84:ac:92:13:34:31:c5:36:73:8f:05:e8:31:
                    7d:06:cf:a6:a9:00:a6:67:87:e3:a4:d7:e3:7d:be:
                    82:3c:42:eb:7d:a2:49:0a:9f:0a:4b:4d:0e:fa:1a:
                    29:0d:e2:63:57:1c:70:ba:86:26:e0:ea:c6:2b:97:
                    29:6b:a0:3d:3d:ef:d5:64:b5:5b:de:22:46:56:07:
                    d9:06:09:f1:d6:87:2a:89:d5:67:be:d0:8e:84:fd:
                    c3:55:67:08:dd:a2:e7:1e:c3:06:65:2b:2c:fb:e4:
                    75:88:b9:73:75:42:7c:7b:2f:6b:1b:07:ac:e4:36:
                    65:0b:c0:ce:5a:3d:2a:86:ba:0b:1e:e1:23:e2:28:
                    f5:54:d9:0f:9b:67:bc:2d:c0:a2:81:29:fe:5f:61:
                    b1:b4:66:11:91:68:dd:73:c4:a0:98:0e:60:fd:b5:
                    1a:3c:a4:e6:71:de:80:fb:de:e9:88:43:c0:4e:38:
                    72:74:d3:50:bc:9a:b5:39:2b:7d:fa:53:d6:f4:27:
                    8f:71:6b:f5:12:cd:0a:87:3f:c1:b2:1d:40:1c:e4:
                    52:e7:91:18:60:ad:db:44:57:0d:28:84:5f:bb:1d:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:39:75:71:EB:63:8E:17:57:60:35:7A:F8:33:34:90:ED:25:3C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/1f84397b-44ed-30dc-81f9-30616da81340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:23:99:b5:e8:5f:1e:00:41:b8:b3:c5:21:47:e5:53:5a:5b:
         ed:e7:b2:e4:f4:ec:d8:ed:e4:1a:4e:21:49:fa:3c:17:df:5f:
         15:75:45:65:a1:17:37:7c:ec:75:4b:20:fe:e0:d3:ce:04:43:
         2d:37:84:50:f9:0a:77:c3:55:3f:f7:1d:de:ae:13:1b:51:77:
         3f:16:75:6e:5c:0f:b5:44:9b:07:9b:7b:92:e5:b4:67:4e:e5:
         8b:5e:ad:5d:12:28:ba:a7:8b:62:e0:87:7b:40:69:a4:52:a9:
         44:9d:11:1d:92:94:44:92:3c:7a:94:19:f4:f8:01:f4:34:ac:
         b7:19:84:01:d4:31:96:7c:44:c3:e5:c1:9d:d4:2a:20:8d:76:
         0a:1d:f0:9d:12:42:9c:aa:3c:b2:3f:c0:6c:81:01:8f:d5:8c:
         2c:9d:a5:c7:71:17:22:4e:02:bf:32:ed:b1:f8:94:b1:08:1b:
         0d:02:93:2c:0c:32:25:84:29:aa:7b:ee:ff:6a:38:c8:f5:d9:
         24:57:f3:ed:98:87:74:77:3a:0e:b8:ed:90:0d:83:bb:e4:51:
         38:39:ff:f5:65:59:fc:80:44:38:52:84:74:a6:3f:c1:15:b3:
         e4:f4:90:cc:58:ad:9e:2d:83:0e:e6:99:e7:23:56:24:81:00:
         b2:1f:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:34 2025 by rpki-client