Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa
File:                     ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa (raw, json)
Hash identifier:          1UTx146kqQcQ3D4Mhmc6J17EhBqscANeeYczGc8C0OY=
Subject key identifier:   37:3A:A2:B8:58:77:38:23:64:2E:0A:73:33:74:EE:71:0A:B6:87:4C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848467AB318CC2F86D4D9617700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     399161
IP address blocks:        2610:a1:3100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:b3:18:cc:2f:86:d4:d9:61:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=2165661d-9b0e-4fbe-9230-6eae7c78265e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:bd:d2:41:0d:72:47:89:94:fb:ff:cc:3d:
                    0e:d9:2c:e2:2a:db:c5:9e:6b:f0:9c:a5:98:74:d0:
                    02:c9:3a:77:5e:ea:d4:0e:e3:89:fd:21:0f:19:57:
                    1d:e2:28:9e:80:2a:e7:1f:61:d3:24:49:4c:91:3e:
                    46:66:50:f1:20:a0:a5:f2:00:c6:e7:47:8d:fc:11:
                    90:fb:33:16:1d:d7:28:d2:1c:c8:df:16:d4:f0:69:
                    d1:55:06:2f:be:aa:c7:a0:de:c5:41:d2:40:53:d5:
                    cc:61:9f:b9:6b:f4:d1:5b:d1:d9:f4:34:5c:dc:dd:
                    3f:bb:41:3b:fa:b6:26:bb:f6:ee:b3:68:b7:58:4d:
                    38:0e:a3:dd:34:b2:3d:dd:70:6c:cd:e1:5d:c8:7b:
                    1e:44:8d:c9:83:7d:02:36:d9:05:70:f5:fd:b4:52:
                    b7:25:57:bb:82:5c:48:17:c7:79:67:65:75:00:cc:
                    53:98:69:bd:b4:5a:10:4e:79:f3:5a:eb:96:21:b7:
                    1f:56:91:9b:a8:df:0b:8e:5c:1b:8e:16:83:a2:14:
                    22:ab:11:7e:86:fd:3a:55:d2:0e:38:25:57:2a:35:
                    ed:8e:a1:7f:3f:82:cb:0d:d4:7b:92:81:bd:f9:35:
                    74:ec:c8:51:6d:ce:6d:95:59:9f:f7:9e:0f:a2:3a:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:A2:B8:58:77:38:23:64:2E:0A:73:33:74:EE:71:0A:B6:87:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:e1:a5:cb:bb:df:c8:56:a6:8a:29:67:72:c6:52:cf:12:
         66:d5:62:9b:d1:9f:da:54:8a:25:1e:90:b9:a2:7b:e9:bc:dc:
         23:fa:f3:95:65:e3:77:2d:33:be:4d:4b:be:7e:ff:9e:23:ac:
         d2:27:7c:21:6a:53:be:95:6c:ff:b4:b5:c9:80:bf:c2:b6:2d:
         b8:36:47:d8:d3:37:de:f3:55:e3:3c:3d:ed:8b:b7:0c:20:6b:
         42:33:4d:a7:71:e1:9e:c3:5b:0f:32:63:da:fb:f7:9d:7b:f8:
         7c:9a:4f:ee:33:99:3a:58:3a:56:41:db:69:fc:05:0c:47:ac:
         0f:f9:ba:70:2e:98:58:14:72:0c:c1:d5:c4:62:73:f9:d9:8a:
         a0:30:61:b6:a4:9f:fd:61:3e:96:b5:f5:f5:7c:a1:b2:dd:7e:
         fc:14:a9:39:80:1e:2f:fd:36:ef:21:da:e2:cf:b0:ec:4a:7b:
         c7:af:3f:73:08:8b:9b:c5:98:55:36:7a:56:9c:b4:07:89:f9:
         bd:09:27:6b:8f:57:d5:65:af:6c:85:b4:26:0b:6c:5a:4f:73:
         97:87:61:f6:48:20:da:79:b7:59:16:a2:f0:8c:3b:d2:63:3f:
         a4:12:10:29:3a:3a:33:be:34:7f:15:cc:da:4b:f7:32:e7:2f:
         ee:c5:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:58 2025 by rpki-client