Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
File:                     ee4cc7b7-5280-3913-ba01-72e16a155541.roa (raw, json)
Hash identifier:          Y6YkqdXnn7iTxrOd/N9td7DSR86lEflrqjcg5gqNhlU=
Subject key identifier:   FF:61:B1:FC:75:AE:12:3C:EB:66:37:46:3C:69:59:F7:B0:32:54:43
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F432858482BF55AD1102DB5A6B8744408
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2620:c3:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5a:d1:10:2d:b5:a6:b8:74:44:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=5cb8658c-08d2-4146-84e2-bb25ce59c23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:08:36:f9:80:a0:16:70:55:c0:a7:8c:41:
                    f2:2c:54:1e:51:9b:a8:85:e3:a6:6b:3d:79:0b:ae:
                    c1:a1:b9:9f:74:5d:b8:7e:4a:5f:12:84:21:67:8b:
                    63:de:91:3e:f1:c2:4b:95:4f:cf:f4:0c:74:c3:18:
                    60:b8:25:e3:26:85:28:44:ba:49:6e:b6:e3:21:ab:
                    10:44:e6:16:44:0e:96:a5:eb:5d:ba:b1:b7:24:7a:
                    94:13:9f:86:ef:19:74:49:7d:b7:d3:5f:e1:81:f7:
                    11:03:e6:90:36:a7:07:65:fc:7a:8e:62:aa:d5:2f:
                    a3:30:69:a1:e0:33:c7:3a:ed:71:14:6c:87:67:c0:
                    6b:83:ea:63:ec:af:df:bf:f8:2b:7d:b2:29:9b:b4:
                    b8:55:6a:e3:11:c9:28:e9:ac:09:7c:88:5a:76:d6:
                    3c:74:83:66:07:9a:56:8c:75:cd:64:e4:df:65:71:
                    9c:35:7d:b7:69:2d:e9:4f:11:87:3b:5a:74:96:14:
                    7b:68:1c:ee:23:2c:23:fe:ad:57:86:bf:d7:11:d0:
                    69:cd:42:b4:bb:e6:77:12:aa:f8:1a:4f:f7:ef:75:
                    1f:bc:34:30:91:03:49:53:d1:fc:4b:a3:7b:1d:2c:
                    ea:c3:7e:34:8c:62:c3:fb:fb:85:a7:3c:1f:da:d4:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:B1:FC:75:AE:12:3C:EB:66:37:46:3C:69:59:F7:B0:32:54:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d4:0f:6f:a3:a7:56:cd:d3:3a:37:5b:dc:07:8b:f2:76:45:
         de:78:9f:e2:d3:e5:09:61:11:b7:7c:8c:53:d3:f0:63:96:95:
         41:15:2e:e8:07:38:d7:72:76:6d:a6:ce:5f:75:07:2f:3b:fb:
         d0:b3:30:6d:4b:66:7d:67:d5:ee:04:85:33:d5:55:77:84:df:
         0f:f0:91:ad:a6:1e:a3:a0:f9:d8:c2:ab:68:99:14:5a:02:d9:
         06:d8:71:f9:e5:0f:15:45:4d:aa:79:16:69:16:2c:e4:7b:61:
         d7:dd:86:6d:98:05:79:a7:a6:0c:22:34:7c:f6:4b:2b:64:b4:
         e6:37:89:92:ab:e8:14:6e:49:80:ab:9a:c2:d6:d7:2f:39:f1:
         9c:15:d8:67:d8:f7:de:94:28:9f:ac:3b:44:96:a7:b0:ca:3c:
         89:f8:3a:84:d4:df:b7:99:04:8c:37:6b:c8:84:60:d7:c5:9c:
         6e:7f:90:5d:b9:c4:57:36:92:86:cb:eb:b1:e9:49:58:8e:c1:
         04:8c:3c:40:76:03:21:39:ce:bf:66:9d:e4:16:44:38:4e:18:
         47:21:7f:98:c8:79:06:d5:50:77:84:39:40:c3:79:bc:d0:3b:
         8e:c0:4a:63:75:6d:2e:9c:da:2e:24:e0:15:f6:d2:71:fb:83:
         32:00:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:39 2025 by rpki-client