Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/629781ae-7f89-3f48-91a5-ed9189d7ce52.roa
File:                     629781ae-7f89-3f48-91a5-ed9189d7ce52.roa (raw, json)
Hash identifier:          Pma4C+ohcbzyW+w9WDhQQErxsBcvmcZsrtGbQyZPtko=
Subject key identifier:   3C:67:A3:27:3B:E8:95:BF:D4:9E:E6:E5:7A:AF:19:EA:2E:54:BF:E0
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F432858482BF55A8CC91697292E12DE40
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/629781ae-7f89-3f48-91a5-ed9189d7ce52.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        2620:1b2:6b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5a:8c:c9:16:97:29:2e:12:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=49367b42-223e-452b-a352-90a5f042c279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:66:5c:4c:19:2d:53:61:89:8f:b8:98:99:
                    a0:10:9b:b6:2b:b3:fb:67:3d:b1:b5:54:33:ed:4d:
                    44:aa:5d:0b:4a:5d:65:41:e0:5d:eb:1b:d0:9a:c3:
                    12:27:30:82:3d:23:df:6b:8b:a9:8d:9f:55:17:6d:
                    8f:fe:42:ae:a5:9a:e0:97:7a:3b:3e:6d:95:65:ed:
                    99:c3:8f:a4:c5:e7:73:e1:60:1e:40:9e:63:d9:32:
                    0c:d0:4e:b0:51:bc:a6:aa:84:8c:55:d5:05:26:59:
                    13:90:1c:dc:30:cf:9f:05:02:98:22:8b:f2:16:85:
                    d2:1a:27:22:33:72:b4:7e:91:37:e0:1e:25:91:a8:
                    d3:99:fc:99:96:63:06:bf:e5:78:4e:bb:ee:bf:0b:
                    18:91:0a:01:6c:d8:55:29:4a:c3:bd:23:25:25:6c:
                    07:d5:7a:de:a5:80:a7:59:94:07:43:f6:0b:93:43:
                    93:c8:ae:74:61:48:52:c8:c3:09:3f:3f:bd:d4:de:
                    6b:24:1c:4d:a8:c5:20:5f:50:f4:7e:d5:d0:6e:32:
                    b1:23:52:22:3d:3a:30:5f:97:3f:0c:2d:9c:90:ea:
                    74:bc:df:de:2f:ec:bc:51:73:79:c8:a1:e7:d7:fa:
                    73:e9:0e:cf:cb:53:9f:29:16:2d:19:03:84:b9:a6:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:67:A3:27:3B:E8:95:BF:D4:9E:E6:E5:7A:AF:19:EA:2E:54:BF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/629781ae-7f89-3f48-91a5-ed9189d7ce52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:6b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:46:26:0f:fd:23:31:fd:8e:55:88:a9:24:dd:3b:8a:df:04:
         ad:69:02:24:14:75:54:08:83:1e:84:32:e1:78:f2:78:54:24:
         ca:ec:24:ef:de:7e:9f:b1:03:c2:1c:04:df:2d:47:8c:3f:44:
         ed:b9:6e:f3:c3:9e:b4:f5:98:54:b4:91:d1:28:7c:22:07:62:
         d4:32:0f:43:00:cc:30:a2:44:ca:ed:84:21:11:85:5c:6b:1e:
         f0:d8:49:42:a0:d8:8e:c3:77:4a:ce:8a:e7:78:bc:28:60:d0:
         b5:29:7e:d7:ee:c9:9f:ac:cb:b7:64:58:1b:40:4a:8e:f1:9c:
         8b:47:ab:e7:03:49:0b:89:a0:b9:0e:1e:0f:a0:a2:90:50:2e:
         36:7a:db:08:a2:e1:45:24:77:a7:dc:a6:ad:f2:5f:00:fd:cb:
         33:27:6e:c8:51:a2:0b:b8:41:25:8a:8f:85:dd:3f:c2:f8:0c:
         97:3c:2c:54:5a:a8:e0:b7:df:1d:72:24:81:55:40:9b:20:23:
         cf:f6:68:03:44:d2:2d:93:66:62:43:6c:c1:99:1f:93:ca:90:
         87:c9:e2:57:3e:61:e0:2b:33:11:b3:76:4e:07:6b:92:9f:0d:
         94:20:5c:44:5d:4d:f5:63:6e:c0:72:f0:18:99:88:b6:24:94:
         cd:d7:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:28 2025 by rpki-client