Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
File:                     c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa (raw, json)
Hash identifier:          riXbD361i2jpIodGV5MHUc5rxqjUPpoxU3w6oYuvfwE=
Subject key identifier:   91:79:4D:E1:FB:D7:45:E1:BD:C8:1C:50:B7:0C:E3:34:94:2C:FF:4C
Certificate issuer:       /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Certificate serial:       010D0C9F43285848C5818DD9E20EF662F9C9A480
Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        2606:73c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:8d:d9:e2:0e:f6:62:f9:c9:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=cb1b3bd0-d575-46ff-8bc1-d9ce066f0653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:ca:63:71:cf:a2:67:5f:75:9c:55:b3:4c:
                    a2:b3:a9:b8:8a:00:ce:1c:eb:b3:70:45:5e:ac:28:
                    81:9d:7c:42:e9:72:18:24:74:bb:4b:a6:1c:99:3b:
                    6f:52:d9:fb:75:dc:17:70:0f:99:de:f0:aa:d0:c8:
                    2e:25:b6:8d:f3:e6:a7:1c:18:a2:db:6e:8d:06:ce:
                    42:09:ed:f1:20:72:37:2c:a8:95:e3:9c:b4:fd:a6:
                    86:4b:8b:cd:07:69:b3:b3:da:4c:1c:92:33:28:9a:
                    61:c2:a5:39:e7:08:c8:1b:5a:67:17:be:cd:63:05:
                    53:ae:cc:af:12:e6:8e:6d:93:df:12:66:ce:66:0c:
                    6d:db:ab:28:e7:4f:21:09:0c:00:69:2a:34:05:99:
                    32:3f:3f:a9:17:48:53:fd:a0:d6:d9:22:16:e6:38:
                    56:49:9d:98:ad:33:c6:97:d6:f1:02:a2:d0:a8:8d:
                    86:cf:df:e5:9d:d5:5f:f0:e7:e0:1a:ac:5a:7f:fc:
                    b4:e6:a9:87:cf:bb:95:cd:9e:e2:0b:09:22:67:01:
                    21:88:76:c5:1c:12:1e:1a:04:87:e2:cb:10:43:f1:
                    1e:24:5d:0c:a3:48:f9:32:84:93:b7:70:a7:ab:10:
                    4c:35:af:99:4e:0b:76:14:85:82:c2:48:d0:c9:df:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:79:4D:E1:FB:D7:45:E1:BD:C8:1C:50:B7:0C:E3:34:94:2C:FF:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:73c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:13:47:db:1b:4a:eb:22:03:e6:97:03:1c:4f:14:e7:83:
         43:49:b2:5d:e8:69:27:d3:f6:88:e0:36:9a:95:ff:f4:18:04:
         ed:03:d1:1b:ea:9b:37:44:f8:ab:ba:18:5f:d9:5d:20:8f:89:
         03:c7:14:22:f8:33:60:21:e3:5d:44:17:e7:b9:f9:fe:95:31:
         13:09:02:7b:61:0d:23:cc:06:fa:9d:64:7c:46:c8:a8:9f:84:
         b9:11:44:8a:1c:bf:94:6c:f8:8b:22:f5:4b:ea:c7:8a:09:d8:
         05:fb:cc:08:80:97:80:a4:2e:00:88:b6:65:75:fb:4f:cb:72:
         a6:bd:d2:96:dd:2d:a0:e2:fb:35:01:91:d0:d8:20:0d:57:8e:
         d9:b8:c2:59:ca:44:ea:3f:e2:b2:80:20:60:0d:10:62:28:b9:
         1c:59:1d:10:db:1d:73:76:05:11:04:91:2e:83:6d:b4:6a:28:
         6b:88:e5:87:d1:15:93:16:09:48:4c:87:69:8b:5c:15:ac:f6:
         0d:a4:b2:43:ef:2d:f4:d9:ba:b1:29:6b:b7:3d:c4:f5:91:8f:
         5f:92:6a:34:a8:d2:6b:78:e4:f2:78:73:5f:d5:d4:7e:2f:65:
         4b:67:ec:41:28:34:14:d0:9c:a9:c5:bb:1d:2a:43:b2:03:66:
         45:ec:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:54 2025 by rpki-client