Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b04ffde5-2a11-345e-918b-88673ef2babf.roa
File:                     b04ffde5-2a11-345e-918b-88673ef2babf.roa (raw, json)
Hash identifier:          oTEwrrPSCd0eVmEwXQhdo/mHdX6ANVb1dFXddFXFMl8=
Subject key identifier:   33:9F:37:DF:6B:4F:7E:1C:7A:03:40:B7:BA:83:AD:EE:C5:AE:0B:A3
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848424AD122F1F88277C72BC600
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b04ffde5-2a11-345e-918b-88673ef2babf.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6453
IP address blocks:        2001:5a0:9000::/38 maxlen: 64
                          2001:5a0:9400::/38 maxlen: 64
                          2001:5a0:9800::/38 maxlen: 64
                          2001:5a0:9c00::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d1:22:f1:f8:82:77:c7:2b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=3e268683-d885-4bba-9bbc-93b62a4c9a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:db:1a:13:bb:43:0e:1e:a9:08:e5:5f:2e:82:
                    58:9c:91:4e:9c:15:29:cb:e7:37:c7:0d:19:a3:bb:
                    80:f5:6b:75:22:70:07:12:40:9a:3c:8f:ec:b1:f1:
                    ab:68:2e:8c:99:17:6e:2e:21:88:5d:02:8e:1d:0e:
                    fb:d2:6a:15:90:b1:24:65:01:56:92:3c:4e:30:e4:
                    6b:24:8c:e9:d3:02:b8:4a:3d:e5:f3:25:e0:6d:27:
                    bc:70:d3:26:6b:fc:58:a7:fe:ce:b8:65:6e:a6:da:
                    e7:58:38:e5:cb:90:6c:fd:d9:bd:9c:0f:40:aa:b0:
                    5b:32:1c:13:5b:fa:00:80:34:d1:1e:a9:81:d1:9a:
                    cc:3d:20:22:84:2c:b3:09:25:0a:8b:44:0e:cc:1e:
                    45:e2:8f:fa:6c:7a:26:d3:17:35:b1:02:0d:38:a4:
                    fd:26:c9:a3:df:33:94:29:3f:49:31:9a:e9:ca:7e:
                    fe:02:e0:40:5c:8e:7a:9d:95:10:c1:ea:50:dd:46:
                    56:49:de:26:93:91:2b:5a:68:4e:4c:ea:5c:f5:d0:
                    ee:34:67:d2:51:34:58:53:f7:5c:78:b9:4b:0e:d3:
                    a1:da:0e:54:db:95:25:4a:69:4d:59:3c:26:c6:32:
                    ed:57:c2:c7:b9:5f:74:49:b2:0c:5a:d7:b4:e6:0f:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:37:DF:6B:4F:7E:1C:7A:03:40:B7:BA:83:AD:EE:C5:AE:0B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b04ffde5-2a11-345e-918b-88673ef2babf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:ad:1b:2a:3d:5c:94:8c:6c:be:b9:34:a2:c5:8c:cf:3d:
         03:ad:2a:7f:b3:04:a5:a5:ed:1d:02:5e:94:e4:b8:f1:13:6f:
         11:f6:03:f8:5b:f2:ef:a2:75:15:bb:1a:07:3e:5f:9d:a5:cf:
         13:fc:22:70:bf:3d:4b:42:5b:55:05:62:46:2b:11:23:00:0f:
         d1:6f:38:b0:54:22:75:43:b3:e5:3f:95:83:f8:e1:c1:0e:80:
         ff:38:46:c4:38:34:55:d3:a0:04:6e:54:83:a5:fa:de:d4:ac:
         39:40:72:a1:1e:04:9c:57:8b:91:30:1d:a4:5b:1f:eb:76:ea:
         71:f6:19:53:0b:e2:ca:9e:02:b8:88:b0:3e:f1:f4:3c:90:b8:
         ca:f1:66:cd:15:b9:73:e6:1d:5b:bc:af:c8:26:ec:11:75:23:
         42:06:a7:a2:39:21:1e:72:aa:89:b4:bd:e0:1f:1d:b0:e9:56:
         14:d2:0e:dd:cd:40:57:f3:c8:5d:32:4f:54:59:ae:7c:4e:6f:
         a7:0a:c1:b6:47:1b:ba:f2:40:d8:39:60:d0:ad:34:8a:5c:56:
         a3:3f:93:2a:50:e8:16:15:b6:9b:e3:86:10:0b:35:06:9a:ec:
         b8:dc:e2:72:05:ac:db:2e:df:84:a5:72:5f:7d:a5:7c:89:04:
         ae:79:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:52 2025 by rpki-client