Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa
File:                     a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa (raw, json)
Hash identifier:          vlAysHi9pensiQ6J4rsLdFBtKfSAtqpkm20rcK8ju6I=
Subject key identifier:   F5:D0:48:0F:4D:42:1E:9C:1B:4F:5A:51:6F:FC:18:9B:C4:9F:91:31
Certificate issuer:       /CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
Certificate serial:       010D0C9F43285848222FE3B28E41DD197309D300
Authority key identifier: B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     400283
IP address blocks:        2602:fbf9::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e3:b2:8e:41:dd:19:73:09:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=4e71101a-d3eb-4c4b-9fad-1fa52793c29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:58:77:fc:bd:3f:d5:77:dd:1e:ef:f2:08:
                    bd:29:fd:c9:39:77:1c:ec:09:af:3b:be:db:0d:c9:
                    18:23:0e:2a:88:1f:c7:f0:e9:f2:ff:12:b2:7a:45:
                    fc:50:62:c6:0f:1e:58:5e:7f:00:f2:9c:09:3b:67:
                    d9:c9:f2:56:6a:b6:c1:9c:a7:bb:d5:ec:bc:3a:63:
                    20:30:9f:af:a2:b9:85:48:e8:ec:2e:50:d7:9e:fc:
                    2c:c6:18:bb:8f:5a:db:ad:f4:93:de:35:5c:24:31:
                    04:d8:b0:7e:43:07:94:dd:f1:16:60:33:e3:2c:a3:
                    41:c3:d6:40:de:61:6e:c2:8e:bf:de:ba:3c:18:86:
                    70:96:cf:67:e1:75:e9:f1:58:61:11:e9:d1:95:a9:
                    0f:29:ef:41:f6:da:e2:4c:49:55:83:8d:ae:57:d3:
                    13:7a:a9:86:e4:cc:66:5b:82:f6:27:b6:07:b9:f7:
                    19:b9:ec:88:6a:4c:65:1c:4b:67:8a:4a:fa:06:32:
                    3d:ac:67:0f:dd:80:b3:a7:7a:fe:b2:16:2c:1b:0f:
                    0a:bb:fb:5b:1b:61:82:7e:a2:33:cd:4c:03:79:e6:
                    23:1b:cf:50:45:82:90:83:a3:25:a6:d5:e1:44:14:
                    f1:41:e8:e6:de:2d:b9:d3:43:99:e6:e0:38:3b:a0:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D0:48:0F:4D:42:1E:9C:1B:4F:5A:51:6F:FC:18:9B:C4:9F:91:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.crl

            X509v3 Authority Key Identifier:
                keyid:B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7b:44:5d:71:ae:ed:6a:d5:6d:a6:7c:23:ac:a6:ab:7f:eb:
         2f:ad:0f:82:cf:3e:07:93:06:6d:4d:9c:72:0b:02:b6:a0:c6:
         6c:eb:46:22:df:77:70:c5:2f:e0:e8:6a:2b:ed:26:16:9f:d4:
         d1:7f:5a:09:1d:68:4a:f3:89:24:1d:66:9b:1a:a8:22:22:fc:
         1e:f4:23:9b:b9:1e:bb:70:24:8d:91:c9:ff:98:61:9a:ae:d2:
         bf:71:ea:71:7b:65:29:dc:ea:f9:ae:82:f0:7c:cd:0b:c8:c2:
         49:74:85:a4:d8:b9:b9:84:e2:fe:9a:20:87:c4:26:21:e3:14:
         a9:e1:59:4d:ab:c2:47:1e:cd:64:26:1e:62:1d:e8:7a:17:48:
         77:98:86:8b:68:e0:97:53:7a:e5:4c:8e:09:b5:cc:4e:33:d2:
         3b:1f:4f:42:03:55:f7:e9:91:9b:96:2e:60:47:7c:ea:7e:71:
         53:72:1e:8f:ed:69:5c:91:96:99:54:b0:e3:73:7d:7b:52:a7:
         54:0c:a6:84:84:47:1e:cb:01:6c:5f:6f:65:3a:0c:22:f8:eb:
         5f:21:20:e2:cf:b4:14:87:ac:6e:00:bf:93:38:49:d8:fa:90:
         dd:53:7c:e2:35:8d:1a:c3:f5:a5:6c:5b:1f:48:a7:c8:c9:05:
         73:b3:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:12 2025 by rpki-client