Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa
File:                     09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa (raw, json)
Hash identifier:          nMbN2g8tN9UxHGD4G1MRlON9VbczXAbD/A/gnvvi7VI=
Subject key identifier:   AE:B9:EB:D0:BE:6E:DF:43:59:73:60:B2:7B:95:17:BC:E4:19:BA:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C5818CC8A24EFE3D0EDED840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     11344
IP address blocks:        2600:1900:4110:800::/54 maxlen: 54
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:8c:c8:a2:4e:fe:3d:0e:de:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9c357f77-ddec-4e44-a9b2-b7a87772eaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:1a:51:4a:63:6b:17:4b:d0:f6:a0:22:3c:
                    62:96:b5:7f:61:be:dd:26:6c:16:5b:2b:7f:84:35:
                    84:eb:dd:cc:9e:45:a5:88:21:16:95:1b:49:3b:cc:
                    67:c1:d5:07:ea:8d:7d:13:8f:25:4c:bc:be:b6:b2:
                    b4:f3:b9:f7:12:a8:50:b7:fa:55:3e:5d:78:42:0d:
                    60:45:93:ab:15:19:b7:84:e4:04:ac:f0:28:44:31:
                    5c:5c:e1:bc:db:11:8f:49:c9:91:ae:af:d4:e0:61:
                    09:c6:02:ad:20:b0:5e:bc:b3:96:32:4c:1e:65:43:
                    18:00:c6:e9:a1:78:8d:35:35:f3:7f:06:29:f4:4d:
                    8c:59:f5:0d:e8:8f:44:e2:f2:59:17:84:1e:b9:cc:
                    e8:59:52:58:29:0d:b4:a9:4a:8e:59:e5:50:80:0b:
                    ea:3f:20:fd:49:92:49:4c:a2:b6:00:78:10:d5:cf:
                    dd:8d:63:40:0d:71:8d:26:45:d3:6e:30:a0:e0:7f:
                    c8:87:8f:ed:6e:62:56:cf:e2:f2:6a:31:61:3d:7a:
                    b9:70:d5:94:f5:7f:72:f7:4a:44:9e:13:67:ce:0c:
                    05:aa:b0:e5:19:ed:70:ea:65:8d:5a:a7:06:ef:15:
                    47:f4:49:12:1b:cc:75:6d:38:e3:33:81:67:af:37:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:EB:D0:BE:6E:DF:43:59:73:60:B2:7B:95:17:BC:E4:19:BA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:800::/54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9f:59:11:ae:e9:63:ab:40:be:04:80:8e:f0:28:82:dd:3d:
         4e:08:09:0c:24:9c:c3:95:e4:71:1b:ce:0a:09:ce:de:0f:8c:
         84:56:74:1b:0d:5b:e8:4a:c0:91:fd:65:d3:e5:04:c9:63:2d:
         26:b6:cf:f1:41:ad:99:b5:b8:54:36:a6:df:6f:30:b6:43:b4:
         a1:c0:3b:b7:96:0f:3e:9f:e3:00:f3:fa:06:5a:6d:fc:ec:89:
         3a:ac:34:78:5b:18:70:b0:5b:1a:b0:3c:a3:67:18:3e:68:29:
         94:c6:46:25:e1:5c:ba:90:be:b3:ca:47:8e:16:ad:62:ed:30:
         3d:4b:a9:53:1e:95:2a:93:f7:3d:d0:ec:34:a9:09:ff:17:76:
         bb:16:a9:1d:50:e9:02:79:ae:28:c8:62:b0:23:39:d8:9d:7f:
         92:e4:22:4d:49:fb:a8:d5:d4:4b:0c:c0:4d:83:00:f9:a9:ec:
         1c:38:b3:58:64:ed:e7:73:0e:af:c6:6b:1f:d6:3a:04:ff:cf:
         bc:39:60:c8:37:f7:a9:99:77:08:fb:95:52:90:79:42:c6:5f:
         f7:10:ba:77:22:8e:72:6a:29:05:91:fb:22:31:9a:67:f9:7b:
         77:53:07:8c:6d:0e:98:aa:c7:47:be:c6:27:39:74:f2:48:e0:
         df:1a:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:49 2025 by rpki-client