Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13605885-3c3e-35e1-a02e-809f13053162.roa
File:                     13605885-3c3e-35e1-a02e-809f13053162.roa (raw, json)
Hash identifier:          2j9lHAEdgrGkKYRuijtqZ5mFlOT3uRZ2oP47d5UBWdA=
Subject key identifier:   C2:56:24:03:18:87:4C:68:60:E9:2B:F3:81:05:42:04:1B:C8:07:56
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B3033B23A7F08C8B39580
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13605885-3c3e-35e1-a02e-809f13053162.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     11404
IP address blocks:        2607:8100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:30:33:b2:3a:7f:08:c8:b3:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=1e7fdf3e-752e-4e39-ab0f-ac850dec4cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:88:7f:58:e3:74:ac:03:fb:1d:1c:d2:41:
                    c9:dc:39:62:1c:5d:59:3d:71:d8:3b:77:79:be:fc:
                    09:b4:ae:5f:04:fb:41:68:46:a9:17:f6:c3:e6:ff:
                    56:02:88:84:3e:81:57:3f:d1:f0:df:12:df:33:81:
                    52:46:e0:27:03:31:54:1f:6b:56:bb:3b:34:c2:8f:
                    a3:72:c3:4d:ff:d1:7b:41:b2:71:f3:39:8a:80:6f:
                    84:be:82:88:f9:87:d7:92:af:f9:c5:f0:46:c0:cb:
                    65:4a:b2:b2:e4:ac:b0:65:b6:a2:c3:02:7b:08:db:
                    bb:ba:61:16:15:93:be:84:f9:fb:b8:bf:50:6d:07:
                    14:d4:bf:47:62:86:eb:37:b1:65:93:70:aa:42:de:
                    7e:31:c0:2b:60:94:88:7c:c1:76:ef:7d:2c:72:13:
                    88:bc:8f:0b:d9:4b:ba:37:b2:d3:33:84:a3:2b:95:
                    ad:c6:1c:28:7f:e0:92:e5:83:19:18:09:b6:47:ec:
                    bb:be:4a:ba:74:82:d1:26:dc:93:03:7f:eb:71:df:
                    8c:b5:f0:85:ff:5f:c3:65:2e:45:70:a1:b7:dd:19:
                    fe:b8:47:8f:8b:8b:d4:18:f7:1a:4e:f3:59:95:3d:
                    07:a5:81:5c:6a:1b:6f:b1:f5:bc:c1:a1:b3:8b:d0:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:56:24:03:18:87:4C:68:60:E9:2B:F3:81:05:42:04:1B:C8:07:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13605885-3c3e-35e1-a02e-809f13053162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d9:d3:8e:35:36:ce:e0:5f:43:f5:34:86:cb:67:cb:7e:f2:
         75:fb:2c:b6:de:75:05:80:be:75:0e:ec:18:8b:59:a5:bb:3b:
         90:c5:77:88:78:f5:77:eb:f8:04:79:70:0c:6b:02:81:b8:d9:
         85:74:c2:eb:37:93:89:bf:91:b0:9c:18:79:80:50:36:68:c0:
         3a:39:d5:7c:8b:1f:fb:8c:06:23:91:ab:13:85:96:85:30:4f:
         68:c0:8b:25:6d:c4:c2:05:09:03:95:f0:76:25:f5:70:82:a1:
         f1:74:7f:5c:82:07:ec:00:5c:e4:b2:bd:3c:51:fd:2e:2a:45:
         a2:67:49:1f:ab:b8:5a:3b:aa:56:83:67:23:3a:60:22:86:70:
         e9:5b:d1:81:54:2b:fd:5c:21:40:f5:e9:22:2e:48:a7:b2:89:
         6d:3d:68:84:93:ab:36:8d:a2:82:af:60:6c:76:f3:c1:55:23:
         83:69:01:0d:54:9c:d4:6d:ed:df:c3:af:d0:64:0e:40:c4:6a:
         59:c5:14:6f:ac:a3:23:20:7e:00:92:7b:e6:bd:ab:45:d0:da:
         4b:c3:75:5e:29:92:da:27:1f:51:d7:04:92:f5:40:7f:c6:cd:
         87:9c:85:21:5c:d5:d2:55:fa:a1:1d:c1:ff:fd:c1:b1:7c:57:
         99:70:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:28 2025 by rpki-client