Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73b2669d-7552-39d1-b7eb-402ac2bcc001.roa
File:                     73b2669d-7552-39d1-b7eb-402ac2bcc001.roa (raw, json)
Hash identifier:          jVtM9sslXUOZhg2emK5l8n5Jbo6zbiLrJF26DznU2Zs=
Subject key identifier:   BC:20:EA:CA:86:5E:D0:25:E7:45:B1:22:37:C1:0F:F8:E8:2B:A5:52
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFEDF80D41AF8469031700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73b2669d-7552-39d1-b7eb-402ac2bcc001.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397216
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:ed:f8:0d:41:af:84:69:03:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=0edf200b-8434-4239-bce9-919159309805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:62:36:93:ff:32:b5:00:a5:0b:5c:ee:0e:
                    95:43:44:f3:c7:08:df:65:a2:32:43:71:ba:f6:1a:
                    1d:da:a3:bc:b3:7d:e1:35:2d:e3:61:6e:4a:76:d0:
                    52:c9:c7:11:06:6f:b3:b7:c9:3c:05:60:64:8c:fd:
                    42:c7:98:2c:2a:69:4d:e2:2d:e5:ec:09:42:37:3a:
                    a4:e1:08:38:4f:f4:1f:89:8b:01:91:74:85:04:55:
                    31:4f:d1:32:32:67:cf:df:f0:69:e2:15:36:fa:4a:
                    b2:b3:53:b6:a4:f4:39:f2:38:0c:3f:2e:ef:21:e2:
                    96:53:ba:b9:ea:5f:8f:ba:9e:26:a3:b0:cf:14:89:
                    1b:c1:ff:c4:59:5a:d1:13:6c:ba:ff:8e:3c:9a:28:
                    ad:c7:5c:28:14:94:fa:d1:c7:75:f9:99:f2:73:8e:
                    e3:2e:22:b2:59:94:0f:4b:d2:d2:e3:31:4d:8d:c0:
                    17:31:2c:a5:ed:e1:ee:c3:66:df:f4:32:e8:5f:65:
                    85:46:13:2c:10:f1:5b:32:93:29:5e:db:18:16:f6:
                    23:02:2b:6f:9d:90:fb:83:93:8c:44:0e:a2:b0:c3:
                    19:12:d8:d5:dd:b3:ef:47:70:ae:ac:8f:0a:2f:1f:
                    f8:4a:64:9c:5c:5c:16:1e:68:22:f6:f9:6e:b5:8c:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:EA:CA:86:5E:D0:25:E7:45:B1:22:37:C1:0F:F8:E8:2B:A5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73b2669d-7552-39d1-b7eb-402ac2bcc001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b4:75:ae:10:28:76:23:7b:a6:a9:63:1e:6c:d3:77:6e:89:
         79:76:ee:7c:2a:fe:e3:24:a7:01:18:02:44:78:cc:bc:1a:8d:
         35:a4:fb:12:72:56:75:f6:ee:fe:7f:92:39:7f:75:7d:6c:1b:
         3e:3b:a4:ad:fb:27:2e:cf:97:5f:a0:4c:ac:39:b1:06:5f:f3:
         9f:ee:1b:07:14:6d:1a:47:e2:42:1f:fb:39:90:9f:e8:d8:82:
         ae:19:99:b1:df:b3:b8:1f:6c:ca:ee:3c:93:0b:55:e1:0a:af:
         6d:5d:eb:84:4b:0e:af:2d:90:af:17:66:00:40:dc:3e:0d:b1:
         0f:e2:6e:f6:d9:4a:10:98:46:95:a5:ea:e7:5f:08:92:df:70:
         9b:31:94:39:93:da:2a:55:0d:6c:1d:20:34:1e:51:7c:2e:d5:
         0a:a3:46:49:23:f6:eb:c8:33:dd:65:50:c7:3a:5e:67:6f:16:
         3b:0e:5e:78:a3:e6:41:f9:a3:6d:23:50:ef:93:02:e6:92:3f:
         30:af:92:8d:c3:b8:ab:54:2d:de:cb:e6:b9:be:3c:92:56:9e:
         d9:fd:32:ca:d5:27:99:52:dc:b8:46:59:e5:ec:e4:74:11:9f:
         46:1d:f5:5e:08:b7:39:8d:e4:e2:0b:ed:38:b6:cb:ad:e6:b7:
         56:6e:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:35 2025 by rpki-client