Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa
File:                     5cf65140-1fa6-3025-943f-30f9ab0055c6.roa (raw, json)
Hash identifier:          2vob8rUwpFTOKasEin3PRZeZE/Q3he/aYr75PcHPW4M=
Subject key identifier:   5F:88:78:6B:23:6C:BD:1E:B5:72:FF:05:C9:3A:81:22:5F:D2:FD:22
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F43285848E027F5DC25BEBB703C57D5A0
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa
Signing time:             Fri 14 Feb 2025 03:08:28 +0000
ROA not before:           Fri 14 Feb 2025 03:08:28 +0000
ROA not after:            Thu 15 May 2025 02:08:28 +0000
asID:                     134963
IP address blocks:        2600:3100::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:27:f5:dc:25:be:bb:70:3c:57:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Feb 14 03:08:28 2025 GMT
            Not After : May 15 02:08:28 2025 GMT
        Subject: CN=5bcaba49-ce09-4204-a0b6-83c938bf6f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:ad:0b:d7:24:48:92:27:c9:74:71:03:bb:
                    88:8d:6d:76:05:8c:86:08:ee:15:e2:2a:d6:1a:2f:
                    cc:4e:44:e3:aa:c3:ca:b6:6f:68:50:3c:cc:07:c2:
                    7a:ef:28:5d:e5:e1:cf:03:cd:d9:36:1b:3c:92:c6:
                    da:fc:e7:35:27:8b:55:7a:ab:7a:7f:32:8b:60:08:
                    7c:be:df:6b:34:be:76:72:6c:d8:48:c1:58:35:bd:
                    ce:3e:47:9b:70:38:9e:e7:88:ee:b7:9c:3b:0f:69:
                    43:11:fe:95:1b:45:05:e1:fa:ce:04:ec:6e:ba:80:
                    32:1e:c8:e3:ef:aa:c0:f1:4a:ff:1f:a7:16:ed:da:
                    bc:39:33:29:36:06:b1:70:f2:7e:44:f6:af:ac:f2:
                    c8:c7:aa:81:41:e6:02:57:e7:71:9c:51:18:91:0c:
                    06:95:ca:ef:75:c9:74:c2:54:cd:63:48:bc:46:cf:
                    5c:9f:f9:6b:04:11:81:5e:d6:5c:b4:b9:33:62:63:
                    cb:c3:70:3e:91:bc:b6:e8:07:e0:ee:9f:4f:0c:ec:
                    89:a5:c7:86:e2:91:a2:04:83:82:92:eb:4c:70:68:
                    46:02:2c:61:16:a9:f9:93:4e:34:f4:1d:06:32:64:
                    57:cb:1e:f3:00:6a:36:48:64:f7:85:8b:96:ee:9b:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:88:78:6B:23:6C:BD:1E:B5:72:FF:05:C9:3A:81:22:5F:D2:FD:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:a5:99:a1:f6:53:45:84:46:b2:f9:0d:ea:e6:1f:70:70:
         84:9f:52:88:be:47:e6:82:ce:13:fc:62:17:56:69:fc:58:81:
         88:56:31:64:6c:b3:a7:a2:39:50:5e:6e:28:9e:a2:67:29:a7:
         6f:2e:71:f2:e2:c4:55:2c:b3:57:e0:a6:d5:e0:ad:8a:de:a0:
         df:b4:89:6d:4c:2c:00:43:c2:71:f8:08:7a:d6:f6:64:c6:69:
         db:e3:50:16:a9:5c:f4:d7:4e:ea:2f:83:77:49:c5:d2:69:15:
         c8:db:25:3e:01:a7:8a:56:06:ca:9e:d0:e5:43:3f:50:3b:36:
         0a:c1:ea:53:ca:4d:06:22:3b:c0:87:0e:12:f4:a7:19:58:07:
         15:45:eb:5e:ba:c4:6f:24:5d:da:e9:3e:57:ac:87:35:e9:ca:
         db:4a:b9:cd:b7:ad:4d:ff:b7:c1:c4:f1:42:bf:6c:79:23:ca:
         5e:d9:30:53:41:9e:ca:b4:d3:50:08:d1:26:78:72:44:2a:9a:
         43:71:55:29:79:dd:8c:f1:ec:dc:c9:cb:63:3f:11:de:9a:65:
         bc:45:32:cc:8f:30:7c:08:e0:54:95:4a:48:c1:d2:6d:92:76:
         c5:61:1a:f1:78:91:bc:14:31:fc:ba:3a:e2:8a:16:53:e2:76:
         be:a8:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:29 2025 by rpki-client