Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa
File:                     1e2f5530-ba9d-381d-9b54-2d76fceca419.roa (raw, json)
Hash identifier:          SzV+4J9MYppw5F24MNWnPXqk5Q+ab9sdETG3iiVYSds=
Subject key identifier:   EC:85:01:07:ED:D1:FE:1F:5D:E8:64:FC:0E:5E:F3:33:07:59:4E:8A
Certificate issuer:       /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial:       010D0C9F432858488DAB53F26FD591D7BD569800
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     14445
IP address blocks:        2606:2a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Feb 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:53:f2:6f:d5:91:d7:bd:56:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=c8fd02cd-d83c-487a-81c1-b4498d2e9b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:93:7d:be:1a:90:c7:cb:22:cf:e5:cd:29:
                    aa:4a:89:43:59:3d:8f:78:66:f3:a4:98:d5:0d:fa:
                    0f:70:91:cd:58:c8:0c:22:2f:c3:2b:a4:b2:16:2f:
                    b6:8d:15:bb:ee:61:d3:2b:f5:27:ef:76:f5:86:37:
                    6a:a2:b7:84:aa:2a:bd:17:56:d6:99:2e:57:f0:ec:
                    ad:09:87:48:18:01:52:2e:78:40:5d:12:89:6f:0c:
                    84:92:34:2f:fb:ee:ac:b5:51:69:a8:1e:ec:37:08:
                    3b:5f:74:78:52:ec:3e:bd:69:1b:a3:88:0e:01:bd:
                    b0:8c:07:98:58:32:f3:39:3b:c2:4e:bc:da:5f:4e:
                    29:de:94:6f:a5:13:ff:7c:4f:41:92:46:1a:6e:5f:
                    c4:b2:f7:01:eb:67:c2:ef:67:9a:49:19:4f:75:d9:
                    3d:e2:e4:80:80:a7:3d:bf:16:a0:ee:98:30:89:3d:
                    56:1d:1c:b2:8b:92:b3:70:8f:0f:56:ad:11:ee:d0:
                    a3:f9:a2:77:62:f2:74:f7:13:ac:92:32:d0:e5:13:
                    4f:66:9b:25:ed:b1:19:17:30:07:0c:15:9a:2e:a3:
                    4e:4f:46:49:68:21:90:10:cb:24:d4:8f:09:a5:1a:
                    54:5e:69:7f:3c:22:9c:42:7b:f4:9a:be:8c:3d:b7:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:85:01:07:ED:D1:FE:1F:5D:E8:64:FC:0E:5E:F3:33:07:59:4E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:bd:43:f7:c5:04:5d:d6:43:48:2e:77:0f:84:03:88:21:37:
         ac:68:69:fa:56:59:3a:c7:fa:d4:1e:35:5b:e1:9a:f2:b2:d8:
         6f:45:71:33:dc:46:04:c0:0f:ba:79:8d:4a:4b:21:bd:52:43:
         40:ba:b5:e6:b2:5e:f0:1f:85:85:25:e7:2a:85:ff:ca:77:12:
         77:d3:75:ba:70:a9:ca:06:9a:f5:be:b3:34:10:a3:64:b7:be:
         2b:6b:66:d5:02:b1:58:ec:fc:32:aa:07:f9:b8:d4:9d:de:c0:
         07:20:fe:28:4c:ef:67:31:95:2e:f0:00:53:90:34:ac:65:77:
         0d:1a:e9:d2:65:67:05:bd:63:27:82:9a:18:c8:82:84:0f:64:
         fa:6c:aa:79:02:37:22:49:14:fa:e2:c8:3b:e3:aa:9f:f5:33:
         05:92:74:f6:f9:6c:0a:d7:07:59:b7:4d:e3:9f:53:09:46:5b:
         7e:cb:bc:e7:56:99:72:ef:b2:31:14:63:8c:88:df:44:ce:68:
         1b:1d:6a:08:44:3d:0f:73:8e:67:b1:10:56:da:9d:62:d2:25:
         01:11:26:ab:23:5f:17:76:fd:5e:a5:0e:9f:9a:79:3a:08:19:
         f9:d7:eb:6f:76:ca:bb:1f:ba:d0:7c:d6:42:2c:ba:89:e4:b1:
         ba:7d:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 15:28:29 2025 by rpki-client