Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa
File:                     f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa (raw, json)
Hash identifier:          aJhQSIICr6aZwnZvTRtFAlJbprZ1wxTMGSksD/3D9xM=
Subject key identifier:   AA:FA:8D:E9:F7:1F:9F:72:00:8C:D8:6F:49:10:12:4B:D1:F3:FC:A5
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B2672C6CFA9CFF492FF40
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     54858
IP address blocks:        2607:8100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:26:72:c6:cf:a9:cf:f4:92:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=00683757-9d50-4ba2-ae42-81bd5f126b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:dc:3a:83:e0:c0:83:f8:45:2b:5a:ec:a3:
                    14:37:29:f0:4c:c7:33:f7:e1:8b:e0:05:95:88:fe:
                    03:d0:f8:45:af:9b:61:16:ea:aa:b8:59:4a:0f:f0:
                    49:52:4c:f6:a7:ae:14:9b:32:7b:45:93:9f:0c:1f:
                    e9:04:89:f9:51:5c:b2:32:1e:24:16:90:97:be:1d:
                    f5:2b:f2:86:47:03:c8:e2:2c:65:e5:19:16:62:ff:
                    06:29:a4:c4:b1:d9:ff:08:cb:83:6f:b4:a0:1b:e0:
                    7c:4c:17:bb:8a:8f:20:06:ee:86:18:b3:52:2b:4e:
                    a1:93:11:d0:29:70:1f:04:a7:50:e0:18:76:84:dd:
                    c0:c1:87:a3:8f:5c:83:8b:80:64:24:87:50:58:2d:
                    1e:0c:26:ea:b5:16:63:6f:a5:9a:8b:8f:9b:02:7c:
                    76:8d:6e:d7:bc:c4:ba:91:3c:d9:0f:3b:a9:0a:8a:
                    6e:d0:1e:6b:51:e7:e6:46:9c:25:67:66:61:74:85:
                    02:24:44:0f:8c:92:76:29:20:10:c4:52:bb:de:3d:
                    4b:30:67:a8:af:cd:1a:9f:4e:e2:49:d4:07:5d:f4:
                    c3:fe:5d:50:bc:85:b4:e5:2d:e7:83:50:f4:09:73:
                    9f:bc:11:97:ed:bb:0d:58:64:68:7d:1f:70:0b:19:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:8D:E9:F7:1F:9F:72:00:8C:D8:6F:49:10:12:4B:D1:F3:FC:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c0:8d:d8:20:0f:46:43:d5:e5:f8:73:e9:00:ec:4d:a7:3d:
         35:8c:45:c4:ce:59:b2:03:de:b1:94:7f:26:49:32:b7:29:b4:
         c5:cc:76:08:fb:85:7c:7a:85:6d:7c:15:73:bf:2b:17:c4:8a:
         44:c2:14:84:a8:67:31:2a:51:a3:58:24:c9:6f:ae:9a:e1:58:
         6b:5e:5f:81:48:af:2c:84:69:f1:ac:16:d3:1f:be:ad:d8:35:
         ef:82:70:52:8a:b8:51:69:69:2e:50:12:9f:56:96:7b:5a:ad:
         3d:9a:58:a5:d6:24:ec:80:34:40:2a:53:f8:0b:a5:b6:4a:73:
         07:5e:6f:bc:5b:9d:63:c9:de:0d:1d:90:f6:74:7a:d0:a5:b4:
         65:e1:65:11:8e:2c:10:53:7a:86:4a:16:5a:a0:d3:3f:b5:4e:
         44:09:4c:27:0c:4d:fb:d5:1e:de:ff:b0:cf:56:0e:cd:6d:5b:
         06:dd:68:55:a8:30:13:83:d1:d4:6d:e5:c0:d0:0e:3f:65:42:
         af:f7:ab:87:20:64:a4:a3:2d:76:07:f1:b2:06:19:ad:43:70:
         13:bb:28:bc:ce:2c:51:47:cf:6d:80:83:c9:db:4a:1d:41:11:
         e9:27:c7:06:e2:67:f9:dc:4b:a8:7d:ed:88:6a:cd:55:45:ac:
         3d:00:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:46:58 2025 by rpki-client