Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/4206b00d-8614-3eec-91ec-152b75703e80.roa
File:                     4206b00d-8614-3eec-91ec-152b75703e80.roa (raw, json)
Hash identifier:          5B+PHn367dWSD/97PC/JobgrwPg31B9vPj5RTa3fp8g=
Subject key identifier:   76:C8:BB:C6:86:1F:23:77:8B:98:EB:F1:40:46:65:C2:44:58:70:3B
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F4328584819CFC0EE321902D868E10B80
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/4206b00d-8614-3eec-91ec-152b75703e80.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     32298
IP address blocks:        2600:cc00::/28 maxlen: 48
                          2600:cc00::/32 maxlen: 48
                          2600:cc01::/32 maxlen: 48
                          2600:cc02::/32 maxlen: 48
                          2600:cc03::/32 maxlen: 48
                          2600:cc04::/32 maxlen: 48
                          2600:cc05::/32 maxlen: 48
                          2600:cc06::/32 maxlen: 48
                          2600:cc07::/32 maxlen: 48
                          2600:cc08::/32 maxlen: 48
                          2600:cc09::/32 maxlen: 48
                          2600:cc0a::/32 maxlen: 48
                          2600:cc0b::/32 maxlen: 48
                          2600:cc0c::/32 maxlen: 48
                          2600:cc0d::/32 maxlen: 48
                          2600:cc0e::/32 maxlen: 48
                          2600:cc0f::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c0:ee:32:19:02:d8:68:e1:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=1742c6a4-515b-4e45-9301-93c46a6221ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:85:53:5d:25:4d:54:48:5b:03:ec:c3:c8:
                    88:60:dc:b3:3b:fe:5e:16:d0:49:de:07:7c:59:20:
                    58:09:97:37:a6:44:1d:2b:49:83:0e:98:b7:22:76:
                    cb:6b:42:43:f7:ca:e6:40:00:c6:34:48:ae:41:1c:
                    11:b7:fb:fa:99:be:04:4f:3b:58:21:d1:41:60:85:
                    6b:28:2c:4b:72:b3:ba:5d:04:bc:13:df:04:6c:da:
                    90:18:ad:5d:f8:4d:b5:3f:46:ef:19:11:fd:8c:ac:
                    be:65:d3:82:99:35:4e:95:4d:77:c7:e8:fe:d5:70:
                    d7:71:b0:99:fe:9b:07:91:ea:48:a9:b7:87:f1:ea:
                    0c:f9:40:16:ef:83:af:bc:f1:34:81:a5:a3:78:60:
                    80:4a:8f:96:ae:df:94:17:0c:5b:e1:3a:2f:3e:56:
                    4c:83:3f:ca:b4:9d:9f:5e:2c:5d:09:88:a7:76:46:
                    75:38:6a:9c:03:51:a5:fe:55:d1:18:f3:2a:cc:82:
                    81:04:6d:0f:e6:5d:a1:93:e7:e0:71:23:a9:d0:5e:
                    c4:6c:05:dd:fb:2d:c5:38:92:51:36:d1:9c:cc:4e:
                    44:96:6b:b4:3e:94:82:fd:49:1e:ea:1d:58:63:4d:
                    f6:38:c1:da:f4:2f:b7:ee:52:8f:2e:8c:53:75:cd:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:BB:C6:86:1F:23:77:8B:98:EB:F1:40:46:65:C2:44:58:70:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/4206b00d-8614-3eec-91ec-152b75703e80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:cc00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:a2:e0:e9:f5:c3:7e:bc:d0:5b:bf:c5:22:de:43:05:dd:
         85:10:9a:ef:08:76:d3:cb:21:af:0d:60:58:84:1b:33:62:2d:
         7a:e5:13:61:fe:b4:f2:e2:cb:88:d0:8e:14:ef:ba:30:1b:92:
         e4:a9:bc:6c:14:51:4f:98:c9:be:61:38:5b:3d:b3:50:4d:c8:
         01:65:90:e6:21:01:a7:f2:35:0b:2e:a2:51:e4:ec:20:84:9a:
         e8:77:d9:42:76:8e:ef:5a:38:67:3e:a9:83:06:83:7f:68:38:
         a8:46:4d:60:18:d1:2e:44:59:67:fe:fd:d8:a7:c9:d5:00:33:
         70:29:59:42:b9:45:53:be:a6:53:f2:3a:a3:1f:0a:3b:5b:77:
         6e:8f:f6:c6:8f:d3:72:73:c3:41:08:fe:08:37:b7:8f:eb:4c:
         44:14:32:c9:99:56:1b:b9:b3:6f:5b:11:5f:e3:aa:e7:53:dd:
         2a:b4:61:e4:1f:81:45:9f:d7:4d:bd:d8:fa:c1:9d:26:0e:85:
         c0:5f:38:f9:75:83:c3:46:fa:58:a0:30:96:7b:8e:8d:1c:b8:
         39:81:be:3a:35:3b:47:5d:41:5a:a3:c4:c1:d9:cd:d0:a3:66:
         91:8e:e6:32:53:96:37:b9:0e:6e:17:5d:77:b3:a8:3c:0d:ec:
         b3:e3:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:50 2025 by rpki-client