Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa
File:                     9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa (raw, json)
Hash identifier:          FvM8ht7ucxdH8EUd77Gm8X9En9zRt/v5oQiLXquYWZY=
Subject key identifier:   3A:C4:25:D3:02:EF:86:24:0E:AF:AE:90:E2:7B:59:B0:9D:F7:D1:5A
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F432858489BA0B28FD737759FD52376C0
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     2639
IP address blocks:        2607:13c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b2:8f:d7:37:75:9f:d5:23:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=9bf21465-df83-4204-9521-cd8588549ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:37:41:9a:85:bb:38:41:26:62:f7:71:c5:
                    1b:24:6c:5a:84:d1:04:c3:2e:12:c2:77:8f:e6:2a:
                    a3:6d:18:9c:46:b7:bf:48:ca:8c:00:6d:03:d8:4a:
                    55:2f:2a:0a:7c:59:dc:1b:f9:e9:e7:80:25:0d:9e:
                    fd:60:9e:c0:10:8c:47:98:03:a7:75:00:48:a5:75:
                    1b:e8:3d:2f:d6:51:9b:1c:5f:09:f8:03:76:f0:37:
                    a3:1f:1f:66:a8:68:14:22:36:25:30:60:9c:7d:0f:
                    97:3d:15:db:56:ea:13:7d:2a:cb:3c:a8:e3:e2:1b:
                    50:ca:82:ab:d6:e2:14:e5:2c:e4:e6:fb:b1:49:68:
                    61:2f:b3:22:b6:8a:2e:d5:6f:7a:ef:ac:1f:55:79:
                    f4:ae:b4:be:72:7b:1b:99:f4:bd:8a:8a:54:fe:5e:
                    3b:67:51:5a:80:53:f0:f2:43:18:23:1a:90:f2:ec:
                    b1:2a:ae:ed:2b:d4:09:26:87:fe:16:af:b7:e7:49:
                    ce:73:3b:71:7d:24:a0:3a:16:3d:f7:b2:09:19:65:
                    e0:6a:68:4e:ec:7b:5a:87:f4:51:ab:fe:40:87:96:
                    6d:4e:43:bb:d1:05:76:f8:6a:da:f6:1d:54:86:d5:
                    f4:51:ae:55:d4:5b:97:1b:a7:b8:e1:59:4b:c1:c5:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C4:25:D3:02:EF:86:24:0E:AF:AE:90:E2:7B:59:B0:9D:F7:D1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:13c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:97:e2:bf:0c:8f:f9:4a:4a:d5:e9:27:2c:98:f1:b5:2d:5d:
         02:c2:0f:f0:2d:8a:1f:ad:2d:75:79:b1:da:5c:92:1c:9a:de:
         01:04:b6:38:e1:18:f8:f9:4b:7d:60:82:b3:74:3b:77:ad:1c:
         dc:55:f7:25:3c:10:c1:b6:a2:f5:b1:75:9b:fd:60:da:9f:ea:
         50:57:9b:5f:d9:42:74:1d:48:cf:01:b3:ad:17:df:cd:bf:07:
         43:12:d4:a9:a5:0b:ae:cc:99:05:81:2e:89:20:b1:d3:ed:16:
         fc:2e:eb:3d:ce:1e:01:0a:a5:0f:9e:14:80:f2:95:c9:4e:c8:
         8c:d7:48:95:17:02:17:2a:02:d5:06:ec:00:d1:22:33:43:62:
         7d:22:51:f4:2d:04:81:5b:f8:67:fd:cf:a2:41:3d:ed:dd:34:
         fc:a2:bb:4a:ca:f4:31:83:59:e2:00:9f:64:d9:b5:66:62:8e:
         32:85:ae:8e:da:f5:c2:71:51:45:13:7a:1a:08:21:1d:0a:ec:
         45:ac:62:b6:a0:1f:62:f1:6d:a2:21:ae:a6:9d:ca:aa:f0:71:
         bb:ea:36:b8:df:e8:20:72:59:20:3b:5d:12:43:0a:73:71:09:
         0a:1d:75:20:1c:5a:81:db:8a:d8:f2:5b:ed:d4:ba:17:79:cd:
         e4:54:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:26 2025 by rpki-client