Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29eab676-695a-3d54-abf2-9ba90caec947.roa
File:                     29eab676-695a-3d54-abf2-9ba90caec947.roa (raw, json)
Hash identifier:          2PsKxtarvSH5PKIE4Uk6HUPYmBQADoAREn0RZ5DogB4=
Subject key identifier:   4A:59:6E:F6:C0:03:B3:18:66:81:EE:AC:B0:23:81:CA:14:BA:3D:B4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFFCAB4BC1A68341EB0900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29eab676-695a-3d54-abf2-9ba90caec947.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397213
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:fc:ab:4b:c1:a6:83:41:eb:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=fceed0e6-5b06-4c41-8d13-5c59d970c2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:df:e9:0d:82:06:cc:f5:c4:f5:b0:d4:48:
                    19:08:71:4f:b5:63:d7:10:6a:45:51:ca:95:96:fb:
                    2e:bd:5e:47:53:13:6b:a3:23:af:af:04:5c:d5:c4:
                    25:ce:c4:27:b7:15:32:d5:97:95:50:37:6c:33:69:
                    0a:c7:ae:24:f2:b0:11:a4:bd:8f:96:95:da:cc:04:
                    99:b6:54:8c:1f:8c:7a:ca:b3:75:c2:9c:44:a2:14:
                    61:0c:a5:c6:bc:5e:1c:b7:f6:78:bb:8f:89:77:8c:
                    da:3a:fa:69:5c:1d:39:b6:31:31:8f:5a:44:f5:e3:
                    c2:ee:da:0e:2d:0e:dd:8c:25:76:4c:ed:6b:0f:89:
                    cd:4e:19:a4:ec:26:fd:db:8b:ae:6f:0c:e7:7c:63:
                    04:a1:8e:69:79:70:bd:16:3a:cc:22:8d:cd:0d:c8:
                    b2:ea:aa:db:9e:72:c4:53:01:f1:38:b7:24:40:89:
                    b4:f6:8b:4b:ca:00:69:1a:33:ae:40:1c:ca:87:db:
                    e2:a9:72:d5:23:26:60:2d:05:85:f7:c2:77:52:e9:
                    14:35:d6:f4:bf:6e:63:57:5b:c2:28:e8:48:6e:23:
                    8a:e0:c8:2c:50:7e:60:13:a3:b5:51:7f:ef:11:95:
                    3c:c6:a8:42:8d:dd:66:e0:47:5f:41:93:b1:76:89:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:6E:F6:C0:03:B3:18:66:81:EE:AC:B0:23:81:CA:14:BA:3D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29eab676-695a-3d54-abf2-9ba90caec947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:8f:9c:99:51:ca:b9:56:5c:6c:42:57:2f:21:ac:bb:d1:
         53:d1:e0:e5:68:c9:7a:21:d4:49:5c:7f:c5:aa:4b:c6:79:86:
         3b:8a:3f:c2:c9:30:0b:34:c7:9d:65:c9:9a:11:c7:15:df:ef:
         92:8f:00:e5:f5:d5:67:95:75:7b:ed:f4:1c:6c:fb:f6:7a:1a:
         2b:fc:a9:4d:b4:cd:56:0b:d2:2b:44:8d:0b:94:e6:e5:12:72:
         d7:c1:9b:54:73:7d:99:4e:ca:aa:c0:17:50:0e:73:4c:fd:44:
         f4:58:fa:3d:68:08:5a:72:d0:59:df:b7:42:e0:b8:97:17:8e:
         d7:11:93:68:2f:4b:1f:23:2f:fd:df:08:fe:96:e3:9c:93:2a:
         cb:23:0c:c4:d6:06:2f:8f:4d:0a:ca:c7:17:a9:e9:50:b4:52:
         9d:11:04:55:53:d7:67:37:ca:74:b7:6e:23:6a:ce:37:84:b5:
         6b:e2:a4:ec:aa:12:9c:cb:eb:06:fb:16:92:f7:7e:d4:fa:a0:
         10:56:0e:5e:cb:8d:12:1f:db:a6:43:00:b8:35:f1:35:e8:b4:
         58:9f:8c:83:6f:38:f7:61:9a:cd:a0:3c:f7:7b:e0:70:0d:a3:
         11:f6:fa:72:1c:8a:a2:30:20:c1:22:7a:34:58:17:22:da:37:
         5c:84:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:29 2025 by rpki-client