Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/49059429-394c-3c11-ac7b-2722179c21f1.roa
File:                     49059429-394c-3c11-ac7b-2722179c21f1.roa (raw, json)
Hash identifier:          fRAvZcB/oaZygPDdKUdmG4DKGtaucE4biJCvqL9ieaM=
Subject key identifier:   5D:6F:B4:AC:46:2B:A9:E5:E1:11:88:04:1A:BA:0A:45:FB:AD:6F:06
Certificate issuer:       /CN=3c374cc3-37f8-48a7-88bc-e046c1661931
Certificate serial:       010D0C9F43285848E59BB6DD87FF396DD2E89580
Authority key identifier: 10:E9:2F:E6:FF:F1:FE:3D:03:31:B9:D1:7F:6A:0E:AF:B3:EC:83:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/49059429-394c-3c11-ac7b-2722179c21f1.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     18796
IP address blocks:        2607:8e40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/3c374cc3-37f8-48a7-88bc-e046c1661931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/3c374cc3-37f8-48a7-88bc-e046c1661931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:b6:dd:87:ff:39:6d:d2:e8:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c374cc3-37f8-48a7-88bc-e046c1661931
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=beade5c7-5799-41f9-8055-c2826b982cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:bc:bc:76:54:18:32:9f:91:b0:11:38:6b:
                    3d:3a:43:a0:52:5a:78:05:48:66:9a:71:66:dd:0f:
                    bf:f9:4a:c6:f3:ef:df:88:67:7e:0b:09:c8:fb:72:
                    00:31:5d:ab:43:2c:08:96:65:27:52:f3:3b:4c:5a:
                    40:86:4e:eb:22:c3:97:fe:5e:62:c2:31:33:b6:c6:
                    a4:9b:87:67:f8:6b:38:57:fb:64:84:e6:aa:b8:44:
                    5d:70:2e:4c:bf:65:f1:ec:b5:d8:e1:32:1b:9b:eb:
                    73:09:31:6f:af:da:47:b3:4e:ad:2b:08:b0:ee:9c:
                    c5:27:64:c5:38:25:0f:51:40:c5:d3:b0:86:56:07:
                    f9:d9:eb:d7:42:93:d8:1a:58:4a:37:3c:3e:10:59:
                    da:55:59:55:fa:01:8e:26:18:54:86:ca:1e:02:b2:
                    de:b7:b7:85:df:4a:43:70:52:70:69:1c:f1:27:db:
                    17:53:e1:5b:50:1c:f5:b3:e0:c5:cc:19:2c:de:ba:
                    5d:f0:0a:b2:c3:f5:ba:b2:e5:6d:cf:98:20:04:9b:
                    77:72:8a:95:b4:4d:ce:aa:c9:9f:1a:4e:d3:f6:95:
                    7b:71:2f:29:75:af:62:ba:3c:89:e7:26:c6:8b:bd:
                    9b:43:28:b0:6d:1f:f1:ef:5b:77:75:e5:da:13:dd:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6F:B4:AC:46:2B:A9:E5:E1:11:88:04:1A:BA:0A:45:FB:AD:6F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/49059429-394c-3c11-ac7b-2722179c21f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/3c374cc3-37f8-48a7-88bc-e046c1661931.crl

            X509v3 Authority Key Identifier:
                keyid:10:E9:2F:E6:FF:F1:FE:3D:03:31:B9:D1:7F:6A:0E:AF:B3:EC:83:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:73:e0:35:88:e0:ea:6f:1c:8b:0c:72:40:82:db:47:aa:86:
         9f:bf:4b:5b:7f:c5:93:22:1c:ba:ac:fb:34:80:a7:77:f7:f4:
         aa:02:53:aa:f7:aa:de:40:58:c1:1c:85:74:04:1f:a8:1b:c9:
         01:f9:cf:42:d6:f1:fc:74:8a:3b:cf:ad:eb:88:e7:dc:49:43:
         92:93:1b:3b:8c:24:6b:fa:91:a4:cd:f5:8d:da:01:47:bd:d8:
         f5:32:42:29:1d:04:57:1d:51:08:20:10:94:40:22:8e:dd:98:
         62:dd:d7:cd:25:6b:cb:eb:7b:75:90:7e:41:52:e2:4b:74:29:
         c8:bd:9f:1a:30:2f:23:2b:d0:88:fa:c9:8b:d3:1c:68:65:01:
         7a:de:94:4d:18:2b:42:05:f2:43:e8:82:ca:89:32:9f:76:64:
         2d:f6:26:72:88:fa:80:f6:38:49:01:37:77:07:1c:12:bf:6c:
         b3:2e:13:b2:86:9b:cb:72:b1:ed:a9:1f:8a:e0:3c:7f:84:a0:
         6b:94:63:e9:f1:15:6d:19:fc:c4:5e:8a:af:a3:e6:20:b5:20:
         23:8c:9e:dc:59:a4:ce:b0:07:48:7f:57:fb:45:b4:9e:cf:cd:
         e8:50:98:be:39:1b:46:31:4d:a3:ca:6b:41:bb:d1:cf:41:d5:
         f9:56:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:25 2025 by rpki-client