Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa
File:                     c9de73e4-ff6f-3544-9755-08941b2cafbb.roa (raw, json)
Hash identifier:          QDjuFTNvvoO6/r9L8Y4u6h8/nPgMEq0C3iaSddhLZ3k=
Subject key identifier:   AE:01:BE:56:63:46:D6:ED:DA:67:96:36:3D:04:AF:6D:0D:E3:FD:48
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F43285848A565FC050D10A13874A8EA00
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     7764
IP address blocks:        2610:20:2020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:fc:05:0d:10:a1:38:74:a8:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=4f207b6c-a828-4a81-86e8-4952935041b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:36:2d:71:02:6d:5f:b6:ce:8d:34:be:9d:
                    91:5f:85:25:f9:6c:fc:a2:9f:e1:b4:65:be:1a:b3:
                    07:21:1c:ad:17:19:66:4a:6e:21:17:e7:76:81:84:
                    52:7e:8e:cf:1e:45:ad:b8:3a:48:2b:46:48:1f:89:
                    f5:20:ac:6d:cd:0e:69:d7:c9:5a:a5:87:fb:a9:25:
                    1e:29:9a:f0:8d:bf:4f:54:1c:44:fa:ba:98:b1:f3:
                    fd:5c:ae:4e:b4:47:ae:6a:b7:ac:56:d1:ac:57:d5:
                    f3:d5:b2:6f:3b:8f:46:fc:9f:52:cc:e9:c7:4d:6b:
                    31:cd:ed:4b:b0:2d:a1:e5:00:cd:01:3c:a9:7e:03:
                    c7:f0:4c:7a:7e:cd:ac:a8:6d:14:58:58:49:3e:8f:
                    03:51:5c:45:a1:ae:7c:a5:40:c8:e5:70:7f:23:4b:
                    f5:12:68:ae:f5:72:4e:d5:84:e8:29:0a:2a:9d:9a:
                    3d:22:58:6d:27:78:04:1e:3d:34:f0:4c:0a:96:c0:
                    ef:f3:1e:80:42:19:7a:4a:37:11:12:cc:3d:5f:c9:
                    0b:58:9c:65:f6:b9:ae:38:8e:8b:86:8f:2b:a2:f3:
                    fd:7b:1e:22:b4:32:0d:c4:95:29:8f:ec:ca:29:97:
                    7a:09:5b:44:dd:72:e9:54:fa:fb:31:a9:06:45:44:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:BE:56:63:46:D6:ED:DA:67:96:36:3D:04:AF:6D:0D:E3:FD:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:2020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:2b:49:14:bb:33:73:d7:08:4f:bb:af:be:25:60:df:d1:
         86:46:24:a5:3d:c8:db:98:5a:47:81:ca:91:59:d2:1f:e0:ce:
         a8:fb:60:15:3b:6d:58:09:0d:09:1b:d9:8e:4a:73:61:29:6d:
         fa:34:a4:7f:7d:91:6c:b2:b3:81:4c:03:cc:33:3a:da:46:27:
         9b:c2:91:d0:4c:a6:63:4d:74:b7:dd:aa:76:68:22:eb:94:a3:
         14:77:90:d7:52:86:e8:69:77:4f:a3:dd:51:ff:a5:a8:60:5e:
         37:36:23:37:13:f1:4e:a7:26:ea:88:31:a4:57:b8:91:65:ea:
         c7:0d:4a:66:a3:2c:c5:fa:fd:d1:38:e3:0e:75:f4:99:e6:86:
         f9:94:f8:77:4e:dd:d1:7a:f1:fc:ae:ba:eb:0e:85:e9:d3:56:
         e1:94:3e:0d:92:0d:17:8f:e2:e2:76:d6:0b:c9:67:31:9d:c3:
         ec:08:b0:01:ac:d6:0c:94:c7:39:9a:94:98:83:5f:01:ab:ec:
         c9:4b:cc:cc:25:20:b9:d3:65:33:7e:48:c4:a0:ab:08:fc:b6:
         bd:d0:d2:ae:bc:7d:f6:5c:1e:0d:f5:9a:0a:22:c8:3d:4d:47:
         1d:e6:ea:a9:7c:ff:8b:a8:fa:9f:6f:59:ce:fa:ab:38:73:48:
         ae:8f:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:57 2025 by rpki-client