Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
File:                     c983825e-c67d-363b-8674-4ab78008496c.roa (raw, json)
Hash identifier:          bflkkYXwB7FwtS0kL5oWs8B7so3AadrL+saZD1FTywg=
Subject key identifier:   A7:38:2A:AF:AD:3B:56:BD:8B:A7:39:6B:60:88:23:88:33:30:5D:ED
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584839EAB9FEB3E16FB0898BED80
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     20205
IP address blocks:        2001:4950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:b9:fe:b3:e1:6f:b0:89:8b:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=f9d5dff6-4d28-423f-ae25-58e8810ec588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:7f:6d:2b:c5:cd:19:67:43:a4:54:1f:0f:
                    76:f8:57:b7:72:6e:70:fd:4c:fc:44:a2:73:63:d2:
                    cb:10:38:8e:0d:2a:35:b7:b9:70:01:08:72:c9:d4:
                    3b:5f:f3:bc:41:22:01:ae:9e:8a:8d:8e:65:3d:7d:
                    2a:7e:68:f4:db:f6:a5:a8:5b:a9:e8:42:00:9b:1f:
                    00:91:9d:55:d8:8d:31:5f:08:3e:79:d3:de:5d:30:
                    cb:b3:58:0d:7e:20:90:b0:80:6b:c6:88:01:fb:b8:
                    81:3e:5a:0a:e4:d3:55:c5:27:40:3e:b1:10:3e:47:
                    c0:0b:bb:ef:ac:3e:44:f8:7b:5b:7e:60:67:7a:f6:
                    9f:53:25:c3:53:3b:48:61:23:a1:10:ff:b0:70:e1:
                    f8:12:43:16:28:07:31:57:c4:11:21:dd:69:bc:70:
                    82:63:0b:19:43:26:eb:d9:fd:dc:59:b8:4c:1f:b5:
                    fc:c3:82:6a:18:9c:e5:54:b0:9e:82:f0:76:b7:74:
                    0c:52:46:39:a1:19:93:3a:cc:6b:98:11:08:d4:7d:
                    26:6a:10:f2:aa:12:6b:84:cf:28:c1:2b:8b:25:51:
                    40:66:a0:31:79:cf:15:57:aa:5d:23:d0:33:8b:e1:
                    ce:af:0a:ab:00:23:fd:ad:f1:b7:12:e8:5c:5e:7e:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:38:2A:AF:AD:3B:56:BD:8B:A7:39:6B:60:88:23:88:33:30:5D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4950::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:cb:f6:d7:6d:4c:12:ec:56:7d:48:42:cb:40:77:9a:7f:8e:
         2c:7d:35:48:80:66:3b:12:d8:ea:2f:33:1c:1c:47:d4:58:0d:
         d0:1b:f4:8a:76:74:0d:0c:de:04:b5:d4:ef:3f:08:87:22:e5:
         67:7b:20:7f:cf:ec:50:5d:1b:36:7c:96:5d:95:5b:23:4d:9b:
         0f:aa:98:4c:69:19:87:85:be:67:a4:f3:00:09:23:85:c3:1b:
         1f:ee:b4:ee:7c:cd:eb:02:f8:7e:d7:c1:3d:a2:05:3e:4d:93:
         94:4f:17:03:0a:b9:79:73:6c:34:36:80:2b:07:fb:4b:7f:21:
         d9:fc:ce:23:cf:d5:9e:83:43:28:65:ef:6a:f4:9a:fe:02:29:
         f8:11:c7:b2:21:cb:66:e6:7c:29:96:d6:e3:45:1e:f0:fe:ad:
         49:c8:55:2f:db:31:73:20:f4:5e:71:43:61:13:3e:27:2f:d8:
         fe:a1:bf:d7:d3:74:d7:bd:62:44:33:71:63:da:c8:fc:96:73:
         f1:db:a2:d2:6b:ca:96:f3:7d:a4:67:3b:fb:bf:67:13:37:51:
         b3:57:c5:93:22:d8:6a:9c:be:02:bb:0a:9b:b3:0f:66:55:3f:
         5f:7b:32:a3:0e:1c:6a:6b:31:c4:1e:09:b0:70:d3:5e:59:0b:
         e9:2a:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:56 2025 by rpki-client