Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa
File:                     84eba332-7cf8-3813-9951-e44ab46403d4.roa (raw, json)
Hash identifier:          7ErQ8C6muSCj8VEndPBbKh4VQGURd0xx7x8+QSB6BDM=
Subject key identifier:   A1:45:66:38:D9:E3:B2:88:5F:5C:D0:3C:1E:F6:C5:E4:80:43:B7:2B
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285848222FE2C151806621A9AB3F80
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        2607:f368:804::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e2:c1:51:80:66:21:a9:ab:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=c4086907-8ba5-416f-90f9-5fa49538ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:33:69:d4:f2:eb:2d:b3:a0:10:99:16:ed:
                    a1:10:af:11:62:75:1d:af:a1:25:b7:de:1f:50:55:
                    e3:06:7e:41:05:66:d2:79:12:48:a6:7e:0b:56:2f:
                    11:9c:20:7d:d6:de:b8:fd:f0:56:1c:6c:40:04:4d:
                    01:cc:04:06:3b:d8:e5:31:40:37:ea:78:d5:1a:0d:
                    b2:75:4d:4c:56:c3:1d:d5:a1:ff:39:13:e7:67:72:
                    11:84:94:20:a1:78:49:b6:65:a4:92:a3:c3:61:33:
                    ad:fb:61:4e:69:34:3d:b6:4e:64:dd:0f:8c:04:36:
                    91:33:66:5b:f8:ea:e6:b9:eb:28:24:a4:2b:b0:37:
                    be:e4:5e:e5:e5:1b:16:8c:30:68:12:f7:2c:d7:f1:
                    1b:32:0f:44:3b:a1:a5:fe:3b:15:58:67:1a:f1:f3:
                    ad:44:67:54:d8:06:c9:91:78:3b:9e:9e:ed:63:65:
                    ce:28:08:1d:2e:13:1b:06:d7:46:c9:23:ac:29:32:
                    57:18:b9:40:6c:18:44:04:3b:3d:5c:14:a1:aa:fc:
                    4f:62:50:62:07:8d:cb:fe:48:05:d3:e1:78:86:6a:
                    2e:33:0a:26:fb:83:15:0d:e7:1c:cc:64:66:2d:39:
                    1c:b1:95:06:fa:80:6c:77:74:2b:73:50:1a:45:a8:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:45:66:38:D9:E3:B2:88:5F:5C:D0:3C:1E:F6:C5:E4:80:43:B7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:26:1f:1f:ce:b4:6a:7d:3e:62:65:fe:4c:b2:92:20:7a:
         8f:fc:19:70:44:e2:0c:15:fd:bd:11:87:4e:0d:b8:e9:88:83:
         da:3c:c2:b1:ff:67:43:12:97:6f:9a:8d:60:f0:a5:bd:d3:41:
         41:ce:e7:7b:4e:c6:1a:86:c2:b2:1a:71:c8:d6:69:b7:23:7b:
         40:8d:93:98:3d:f7:bd:78:4b:db:76:2f:28:b7:85:f1:a7:db:
         5a:83:1e:53:f0:fd:7e:84:e2:f8:65:61:60:2c:31:dc:b6:6a:
         f3:31:0b:58:c4:ee:aa:99:7e:4e:5f:be:87:cb:25:7f:29:05:
         53:60:07:85:25:66:f4:1d:53:fa:91:e4:fa:c6:8e:14:d8:6e:
         a6:82:73:77:49:86:e5:37:8f:8f:fb:97:90:4d:37:0e:53:66:
         a1:92:b4:1b:d6:03:77:14:a1:9f:ee:9c:bc:b8:47:2f:6f:a2:
         70:6e:32:78:43:b0:ce:9a:99:b9:56:36:71:ad:bc:36:b3:5c:
         6d:07:ce:c1:f1:11:dc:fe:9f:fe:29:a8:6c:47:13:ba:cb:63:
         14:f6:79:ab:65:9b:2e:f6:c2:c9:60:3a:04:e8:50:7c:41:be:
         3b:7e:83:e3:7f:26:9b:e6:17:ea:1d:cb:d8:5a:f1:99:fb:6f:
         e5:22:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:27 2025 by rpki-client