Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa
File:                     5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa (raw, json)
Hash identifier:          QE0rO88Utrr1kfiDl4fxF7HSvT/cD+f5PRDnq1PLwQw=
Subject key identifier:   79:A9:67:27:E1:06:3C:FB:3F:FA:17:DF:E8:C7:DC:B3:06:1A:1E:09
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F43285848C2B64A9615B99081CA83B380
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2602:fcd8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4a:96:15:b9:90:81:ca:83:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=ffa4b5b6-aa45-48a5-883c-49941e6f160e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:62:ac:61:77:9e:6d:c9:bd:ca:a6:85:09:
                    dc:96:56:7c:c5:8c:c0:77:c9:4e:7a:27:5f:02:0f:
                    fc:94:01:43:c2:40:54:dc:4b:3c:33:31:0e:70:51:
                    51:44:47:01:75:6e:62:5a:56:c4:60:7c:84:24:4c:
                    dd:ad:9c:31:ee:84:56:9a:5a:5a:12:2e:2f:44:fb:
                    27:4b:ec:03:62:4b:ce:ee:44:76:aa:da:ce:c9:d5:
                    89:bc:e7:6d:92:c0:1c:b0:0a:55:65:0b:07:bd:70:
                    26:7d:00:ec:b0:c2:a1:33:8b:4b:af:cc:a1:bf:0c:
                    59:e9:e7:14:51:a2:ff:e2:bf:3f:55:f6:c9:38:73:
                    9e:25:a1:bb:5f:78:e9:ce:db:05:5c:54:19:81:88:
                    7e:86:ad:9e:16:8a:17:9d:dc:98:cf:f2:92:09:07:
                    31:7e:07:9c:65:02:0b:46:4a:a7:4d:7f:63:64:f2:
                    cf:24:c1:ab:4c:bd:69:42:17:cc:b4:f4:5b:2c:25:
                    2e:62:98:25:a2:a8:13:a7:11:82:14:0f:fe:bc:d2:
                    82:fb:f7:2e:04:82:b0:ba:e1:8d:b3:ea:2d:5d:cb:
                    c9:c6:84:14:6b:bc:6d:66:9a:23:d9:8c:2f:bc:26:
                    5d:4f:54:0e:5c:39:47:a5:bc:cf:c1:a4:ff:00:0c:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A9:67:27:E1:06:3C:FB:3F:FA:17:DF:E8:C7:DC:B3:06:1A:1E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/5b2cd881-f41e-386e-8d2e-4ad5956543cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:d6:c8:34:8f:fd:31:af:f8:f9:a3:dc:88:c2:80:4f:4f:
         0e:52:e5:96:88:3d:7a:22:d0:0b:1b:18:9f:8c:6d:8d:a4:51:
         0c:b6:d8:10:78:89:e0:ea:c9:66:fd:b9:1e:dc:7d:80:00:07:
         44:6d:11:c2:74:2e:e0:a4:af:48:de:11:5a:d8:15:62:03:e4:
         8b:6e:fe:68:b3:fd:12:c7:8f:7e:27:d7:d2:cc:6b:6a:ef:5b:
         91:e4:13:a0:9e:10:b8:07:18:8f:bb:35:02:cb:67:b9:b0:05:
         28:95:9d:c3:1e:0b:94:da:f7:1d:97:c5:b7:29:b4:c5:95:45:
         7b:11:29:a4:0c:ba:5f:d8:5d:22:15:2a:62:ff:ea:c5:13:92:
         1b:98:56:b8:d0:6f:8b:18:a5:97:f1:40:91:db:9a:96:4b:b1:
         5c:7c:7c:c2:53:66:6f:5e:38:d5:73:12:24:99:ea:73:a4:9f:
         6b:90:06:e7:b9:06:09:d9:ff:a3:c0:51:a4:a3:fe:f4:27:ca:
         6f:20:e7:6a:7d:32:83:f6:69:ed:3c:40:2a:0c:2d:8e:95:e4:
         35:d5:de:bb:aa:7f:7f:e1:58:8f:3b:c4:c1:44:2c:ba:32:00:
         10:88:13:13:28:c7:c3:f3:dd:26:d3:2f:ec:2f:00:04:66:b2:
         d0:34:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:44 2025 by rpki-client