Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/143d5548-5b18-3916-9539-1111067737f0.roa
File:                     143d5548-5b18-3916-9539-1111067737f0.roa (raw, json)
Hash identifier:          k8ob///7XYDsCDO30UBgn9he8Xe3aDEy9YAmUCte/dc=
Subject key identifier:   C5:8F:03:B0:3C:C6:6A:C5:A8:0D:F6:74:99:27:05:FE:7A:2A:FA:C6
Certificate issuer:       /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
Certificate serial:       010D0C9F4328584855D594BF041B81AD3A71B600
Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/143d5548-5b18-3916-9539-1111067737f0.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     399135
IP address blocks:        2602:fcc3::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:94:bf:04:1b:81:ad:3a:71:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=8f532947-655d-4853-9c05-47ccdb747ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:1d:e9:10:e0:d2:43:dd:b0:d7:51:d5:a1:
                    12:19:2e:31:1e:34:43:19:e9:62:6f:1b:84:7b:27:
                    cf:4f:b8:f0:0e:0a:66:fc:f9:6b:85:fd:1d:c2:85:
                    39:30:00:db:20:60:08:66:8a:3e:4f:28:b2:44:83:
                    c6:84:ec:51:25:b9:c7:46:3c:cc:1c:d3:48:ce:43:
                    d5:cc:1a:5e:fa:08:97:58:3c:55:b0:12:d7:06:83:
                    ec:ce:ae:a4:ba:58:aa:e8:30:88:0b:36:56:04:7d:
                    44:7d:d7:65:2c:34:18:66:38:62:14:64:de:51:f9:
                    39:7c:7e:b3:06:3f:aa:37:e6:f4:69:25:6c:fb:89:
                    c2:ab:bf:33:8f:ad:cf:03:c4:56:bd:c2:4a:23:21:
                    46:92:c0:3f:b4:26:c9:4d:46:15:20:bf:9e:f4:df:
                    de:ad:8d:92:74:2e:dd:a8:35:d7:96:c0:2e:f7:d3:
                    f7:e4:d7:94:42:3d:37:5a:5b:f0:74:a6:78:ca:e5:
                    e5:5a:61:78:6b:a9:01:ce:3b:be:85:e8:a9:ee:0b:
                    e6:04:d1:0d:da:d9:11:b7:24:83:39:b7:8f:b7:7b:
                    6d:12:17:4f:27:ce:8b:ff:41:2b:21:97:fd:71:23:
                    11:ac:83:10:c6:c8:9d:26:f2:72:5e:11:af:ba:3e:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8F:03:B0:3C:C6:6A:C5:A8:0D:F6:74:99:27:05:FE:7A:2A:FA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/143d5548-5b18-3916-9539-1111067737f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl

            X509v3 Authority Key Identifier:
                keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:89:00:c8:a9:1c:69:9d:b8:7a:43:ac:d8:06:4d:77:0b:d5:
         c0:11:ec:38:ff:11:44:0e:5e:89:f3:76:47:11:3f:6a:21:d0:
         c2:c7:f1:60:80:50:8e:fc:65:b5:bf:23:21:45:89:9f:7d:c8:
         0b:58:2a:9b:1a:b6:52:7a:bc:53:7e:a0:dd:11:f8:3a:47:31:
         af:47:63:f0:8e:74:d6:cd:6d:cd:8a:17:65:38:04:60:6d:4c:
         fc:c0:bf:5b:73:1c:54:71:ec:d6:42:5c:f4:93:90:da:ca:19:
         49:fa:8e:b9:08:96:cc:12:8d:e0:d3:d7:60:7a:30:2b:17:a8:
         48:22:90:25:f3:93:20:19:03:d9:d4:d8:0e:92:f9:9a:41:cd:
         7e:9f:f3:f7:aa:ae:f2:02:06:4d:cc:5f:ed:13:53:1d:26:b9:
         33:31:54:8f:9b:43:44:f8:a6:5f:8a:43:53:dc:be:24:fe:c4:
         65:40:ac:86:64:3b:44:e7:31:c5:b3:45:e7:51:fc:0f:a8:23:
         f2:b7:1a:6a:88:3e:6a:e1:6d:74:55:b4:18:be:4b:55:7c:93:
         95:09:07:53:6b:da:4a:fb:aa:91:64:7e:86:30:75:bf:4a:61:
         e7:e2:c9:10:69:ee:4c:24:a8:a5:43:47:e3:07:13:d0:95:9a:
         6e:5e:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:50 2025 by rpki-client