Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
File:                     9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa (raw, json)
Hash identifier:          6aiPpORZLnwIa4L/BNnhoWOt+kx1m6Akh4aTZX6bcyQ=
Subject key identifier:   32:5E:06:79:88:67:5F:9C:AD:D8:9A:3B:54:08:F4:7A:F5:73:BC:35
Certificate issuer:       /CN=bb3e1744-5186-489a-9b86-cb31cef73874
Certificate serial:       010D0C9F43285848451590288AA40FD2C19FEE00
Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        2620:20:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:90:28:8a:a4:0f:d2:c1:9f:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=562073b6-9ab9-4dcc-834a-74a42af6ef3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:42:00:72:11:cf:3d:1c:8f:e0:ac:ac:7b:
                    11:53:4b:4e:25:f6:f5:f2:02:dd:87:2e:4e:e1:cc:
                    ed:7f:4b:fa:39:4f:51:b7:3b:e8:16:1e:32:60:5e:
                    d4:2b:5e:1a:8d:f3:53:aa:b3:53:0d:a1:ee:fa:48:
                    96:53:1d:26:92:b9:e1:9e:d2:fe:1e:fa:f4:35:1b:
                    95:2a:4f:ea:a3:e9:ea:6b:e3:a4:ac:77:bf:14:ab:
                    7b:a6:b1:af:94:11:f3:e5:53:1a:b1:0a:83:97:a2:
                    a2:ce:27:0d:cc:e5:7a:8c:01:1f:3e:a8:99:44:63:
                    97:18:20:39:a3:08:dd:24:e8:9f:8f:32:86:c0:15:
                    9c:30:c1:55:01:b9:4e:eb:65:46:3b:f4:3f:08:1d:
                    1f:a9:93:5d:c9:ae:ed:e1:bc:90:70:dc:23:4c:a2:
                    71:b7:3c:67:13:cc:81:85:95:bc:a2:1a:20:55:5f:
                    63:48:5c:4c:e9:01:8b:1d:12:4f:10:0b:a5:dd:b3:
                    36:fd:77:ed:d3:de:30:10:72:1e:c4:31:a7:ac:5c:
                    4c:2e:81:9f:fb:b7:ca:39:e4:be:b8:93:c6:f9:fc:
                    66:06:43:61:8b:8f:42:f3:aa:0f:87:4f:7a:f5:b6:
                    e0:f0:df:70:12:4a:fb:6f:f2:00:bc:9a:b7:a6:a8:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5E:06:79:88:67:5F:9C:AD:D8:9A:3B:54:08:F4:7A:F5:73:BC:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9ca829f6-f3f0-31c0-8ddd-5f95cea0d04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:20:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:4d:ce:a7:6b:35:58:2f:6d:32:e6:09:7d:b6:a0:91:7b:
         12:39:9c:f4:bb:4f:a1:99:f7:33:38:25:fa:3f:71:30:bf:f2:
         90:9f:ad:78:96:83:7e:8d:b0:65:a6:5e:b5:e6:0e:13:1e:49:
         c7:8e:1a:6e:ad:3c:d4:47:9d:5f:14:53:23:e8:a1:76:dc:8f:
         70:21:07:1a:38:39:be:fa:76:5b:6d:b0:a1:06:13:d0:b1:e6:
         9b:2b:5c:e7:c6:20:fb:0e:3a:90:1f:83:c3:7d:eb:96:51:f0:
         c9:68:84:1d:04:20:fb:3f:01:39:fd:34:e6:ca:3a:c6:99:be:
         69:22:77:16:09:b5:53:82:1f:da:24:20:b1:4d:92:43:35:2d:
         e9:02:4f:5d:4e:fa:21:5e:80:3a:02:48:22:e2:d9:3d:71:a0:
         5b:43:a2:e4:47:31:ae:f1:15:72:49:45:88:d6:db:6e:cb:a0:
         5e:5c:4a:ad:23:f3:6c:ff:07:01:52:0b:8d:e3:d3:31:50:de:
         85:fb:53:7c:2c:c0:81:10:cb:92:67:2d:75:e2:4c:c9:50:30:
         ae:8b:8d:9c:4b:ac:29:42:cb:5a:71:e5:be:8e:16:24:b1:e2:
         e9:63:2c:7f:eb:a8:92:e8:6e:77:11:fd:6e:8e:d8:55:df:d8:
         3f:97:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:07 2025 by rpki-client