Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa
File:                     0169fe11-c32d-3023-933f-02e828e6ce1f.roa (raw, json)
Hash identifier:          vdwuryw3eGowUD4QPyx2Vf0mpnlp6533kBg1JlREg2k=
Subject key identifier:   32:5B:BB:5C:D7:E6:A7:DA:7A:B9:56:6D:BE:DC:F6:DA:ED:7F:C5:4F
Certificate issuer:       /CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
Certificate serial:       010D0C9F432858488C0BB94D93DE281379121220
Authority key identifier: 0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa
Signing time:             Wed 15 Jan 2025 00:03:41 +0000
ROA not before:           Wed 15 Jan 2025 00:03:41 +0000
ROA not after:            Mon 14 Apr 2025 23:03:41 +0000
asID:                     8987
IP address blocks:        2602:f73e:20::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8c:0b:b9:4d:93:de:28:13:79:12:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
        Validity
            Not Before: Jan 15 00:03:41 2025 GMT
            Not After : Apr 14 23:03:41 2025 GMT
        Subject: CN=2f0e4aed-872b-42a1-82ea-d1bc2a87a145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:48:1b:fe:a5:55:6a:6b:1e:45:38:b4:cf:
                    12:86:dc:97:77:cd:2e:37:53:30:e3:18:72:52:14:
                    27:7e:93:50:c1:30:7b:32:5d:19:31:dd:3c:60:49:
                    8a:0c:39:1e:7d:27:79:be:0b:a1:99:ce:a8:bd:c4:
                    1b:f9:49:68:e9:69:c1:cf:62:c2:14:31:b1:ab:ae:
                    39:a6:fb:90:ea:1a:3e:aa:1b:09:40:e2:35:8c:ae:
                    f2:07:43:13:93:a7:0f:8f:fb:75:77:1a:98:2a:ff:
                    cc:f3:ba:d3:83:6e:b5:76:70:54:b7:f4:4c:c5:bb:
                    51:af:5d:f2:f1:ca:d7:3e:9b:2f:42:27:c4:b9:7f:
                    e8:f4:98:a5:28:69:5e:de:61:3e:1f:57:fe:65:10:
                    29:6c:80:bd:18:5a:af:75:43:20:9e:bb:73:8c:54:
                    83:66:82:c9:cc:fd:11:53:0d:4c:a6:6d:47:76:a5:
                    8d:69:4b:19:c4:b5:a5:90:14:c1:11:0d:54:b2:8f:
                    19:51:ab:8f:c5:c2:0b:12:69:b2:80:70:fd:10:c6:
                    45:00:02:45:e4:c2:56:c8:ca:84:08:ae:80:0b:cb:
                    79:f6:1e:3b:06:d4:be:2c:a6:e1:59:04:07:ad:05:
                    93:ce:35:42:a4:43:c2:19:75:75:9d:36:12:a5:65:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:BB:5C:D7:E6:A7:DA:7A:B9:56:6D:BE:DC:F6:DA:ED:7F:C5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f73e:20::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:3b:e3:2a:26:3e:b2:da:e7:ab:03:4e:f2:56:50:02:bc:
         d3:e0:52:a6:ac:9c:00:31:92:e0:de:a5:64:ea:21:9d:d4:00:
         49:97:81:07:c6:fa:e5:d6:e1:1f:23:51:0e:dd:94:d4:6f:b3:
         94:cb:aa:04:56:12:30:a3:cf:f3:08:79:86:c1:eb:84:62:c4:
         31:c1:a4:3f:35:3b:48:37:63:c9:09:85:3d:d4:86:e4:e8:0d:
         dd:16:ac:9a:68:e9:aa:4c:db:13:ad:ad:67:ba:aa:47:68:8b:
         bd:3d:d9:90:fe:b5:53:a3:80:8c:f6:4d:20:b2:18:f3:a0:6c:
         9e:12:81:2c:b5:ed:cb:ed:b7:06:41:f8:c0:11:08:f5:1a:66:
         ae:d1:8d:b3:40:78:27:7c:29:b9:f5:49:5a:13:85:5c:77:63:
         8b:72:7e:5d:b2:54:62:83:aa:56:17:f4:8b:4b:ad:ce:15:67:
         08:d3:ee:88:66:24:67:c7:6c:01:e8:af:23:78:c6:f9:5b:87:
         52:8c:0e:6d:2f:db:ae:44:9b:e5:89:b5:1d:94:00:32:59:35:
         e2:0d:43:09:1c:0c:12:92:3e:99:b9:8f:d9:68:d3:9a:c0:d0:
         3f:c7:8b:6c:3f:6f:54:a1:1c:79:9a:f9:86:d5:b1:3c:8d:a2:
         70:62:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:56:37 2025 by rpki-client