Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa
File:                     0591e8cc-de15-308a-9274-817e31ffff4e.roa (raw, json)
Hash identifier:          XgvET7jtFN5SzK1sv9FuH8lqp2y1+1UQTeLpkXgsCUc=
Subject key identifier:   2C:0F:52:71:07:D4:F5:A6:B7:B0:06:12:A5:CA:65:F5:F5:B0:F6:D1
Certificate issuer:       /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
Certificate serial:       010D0C9F43285848BE862CCBB72C4FCB5A99D8C0
Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     8134
IP address blocks:        2001:4a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2c:cb:b7:2c:4f:cb:5a:99:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=d3771c9f-50b5-4ebc-bc42-96ff1e9a2021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:94:12:e8:4e:3d:56:b6:4a:65:85:13:ae:e0:
                    df:71:d3:ce:fd:a6:0b:1e:51:64:1f:50:7c:2c:fe:
                    34:98:31:fa:1e:cc:d0:97:0a:b7:31:77:24:64:76:
                    82:85:9f:bf:b2:b1:64:2e:7b:a7:57:3f:80:b5:95:
                    42:21:67:3a:c6:f7:dc:8f:b4:1a:83:81:a8:a5:f9:
                    14:da:80:d2:62:56:2b:a2:8a:da:ef:0b:37:22:36:
                    64:d3:58:aa:b5:d0:58:63:3a:ff:c1:a8:56:aa:4c:
                    e1:de:df:46:56:63:fd:99:cf:0d:78:99:89:6c:20:
                    21:58:fe:9c:45:17:fb:a7:9e:e1:ea:ad:fc:38:c3:
                    d2:db:30:54:81:38:57:f2:f9:94:2d:2c:49:47:bf:
                    1c:20:4f:62:1e:c2:78:4e:5b:18:8f:61:19:1d:77:
                    7b:81:62:64:db:92:bb:fd:59:18:ad:98:7d:62:ab:
                    a5:a4:2b:66:a6:57:42:10:8f:95:2c:11:9a:ad:b5:
                    89:79:07:99:d4:b5:1a:25:1d:20:26:8c:4a:82:7e:
                    21:05:63:14:cd:e3:3c:0a:bb:e8:ec:7b:86:42:ef:
                    35:19:3e:f6:a0:bc:5b:c6:64:e5:f9:02:6c:cc:ff:
                    dd:03:85:e9:13:c4:f7:3a:0c:4b:62:8f:bb:92:34:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0F:52:71:07:D4:F5:A6:B7:B0:06:12:A5:CA:65:F5:F5:B0:F6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/0591e8cc-de15-308a-9274-817e31ffff4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:77:4c:46:8f:c4:2a:17:31:30:4d:56:54:fd:c5:92:4a:7e:
         72:e0:11:fe:00:e7:64:04:e2:a1:c5:14:47:0e:74:76:b3:1b:
         a9:58:b9:cf:0f:76:49:00:df:41:99:f9:e6:f3:93:42:5e:52:
         a3:e3:d1:bc:8f:19:bd:1f:0e:41:48:b9:5a:fa:28:e8:11:44:
         f0:f1:44:1d:15:92:51:41:1a:d6:68:6f:ed:59:b2:58:1d:22:
         cd:4d:1c:a4:a3:d8:4b:1b:1a:8e:13:05:4c:60:b4:b2:55:88:
         0f:3e:41:0b:5b:11:21:40:4f:12:36:32:00:7b:f0:38:88:49:
         8d:18:d0:24:28:f7:ac:89:5c:52:24:80:86:45:8f:7e:4c:2b:
         61:15:39:aa:92:db:bd:fe:5a:15:e5:74:70:f1:a1:f2:24:1c:
         66:33:f5:ce:20:06:2b:bd:5c:1d:ad:a8:c4:0e:17:ff:92:fc:
         5a:e9:84:35:4b:a4:c4:87:9e:77:c0:cc:86:5c:76:36:c8:48:
         2d:b9:3f:41:bd:8f:74:4b:5a:1a:35:d4:00:00:b6:40:7d:b5:
         01:40:cc:74:d2:35:c1:4a:17:44:5e:3c:6f:8a:c2:a0:3e:41:
         99:cd:29:ec:e9:57:1f:56:dc:c5:a9:17:27:77:d3:e2:5b:5f:
         1f:4d:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:57 2025 by rpki-client