Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/dad3c3ce-29c5-3443-b40e-8d38150e9a05.roa
File:                     dad3c3ce-29c5-3443-b40e-8d38150e9a05.roa (raw, json)
Hash identifier:          SAdaPGoo6OK1z5pDnCy93prdABvU9x0nyCb/vLy/c9s=
Subject key identifier:   C6:96:25:67:C7:2A:7D:48:E8:80:93:7B:72:C0:DB:E4:CB:DD:0B:6A
Certificate issuer:       /CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
Certificate serial:       010D0C9F432858487E1A9F50F265B58E6F9C8400
Authority key identifier: 0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/dad3c3ce-29c5-3443-b40e-8d38150e9a05.roa
Signing time:             Fri 10 Jan 2025 00:12:23 +0000
ROA not before:           Fri 10 Jan 2025 00:12:23 +0000
ROA not after:            Wed 09 Apr 2025 23:12:23 +0000
asID:                     8075
IP address blocks:        2602:f73e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:1a:9f:50:f2:65:b5:8e:6f:9c:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
        Validity
            Not Before: Jan 10 00:12:23 2025 GMT
            Not After : Apr  9 23:12:23 2025 GMT
        Subject: CN=98a5fa6a-6930-41d6-a767-f25699da38fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:9f:2d:5d:26:1c:55:71:35:52:e6:3d:09:
                    58:09:4a:10:72:b3:29:7c:af:59:c9:8a:bf:fc:30:
                    8d:05:fa:50:6c:1b:6f:b6:8e:1f:79:ea:92:3d:e9:
                    d9:27:78:65:1a:a0:b7:d4:eb:70:f9:5d:c1:cf:93:
                    0d:e7:d0:8f:53:8b:00:b9:26:35:97:06:f6:b9:19:
                    0d:a5:e9:9c:fb:9e:8c:b2:c6:18:f1:6a:0b:18:02:
                    e0:a3:1f:bc:3e:fb:88:c1:96:a4:87:52:18:00:d6:
                    5e:04:9d:89:a9:d2:dd:78:74:63:7a:4d:0c:87:70:
                    db:61:f5:71:a6:67:be:29:83:bc:c1:a3:3d:ba:eb:
                    7d:7b:0e:23:50:3d:77:bd:3f:91:e3:18:c2:77:27:
                    48:52:66:f0:43:c7:86:e6:fd:b4:60:57:f7:82:63:
                    ae:88:da:21:34:94:75:7f:2b:61:9d:d8:cd:d8:3e:
                    df:32:cb:ac:84:40:dd:64:c9:99:89:7f:e7:7d:90:
                    4a:7e:de:bb:e3:3e:15:82:71:35:aa:25:8c:c7:b0:
                    48:f2:01:13:98:08:26:ac:c1:c7:73:9b:a5:8b:4a:
                    08:79:22:dd:d5:5e:8a:42:5d:00:de:ea:e6:01:c8:
                    2b:74:d7:9b:06:1b:6e:a9:54:8c:e8:97:ee:ee:ad:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:96:25:67:C7:2A:7D:48:E8:80:93:7B:72:C0:DB:E4:CB:DD:0B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/dad3c3ce-29c5-3443-b40e-8d38150e9a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f73e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:28:86:47:47:19:73:c8:45:18:f2:8a:53:45:db:19:f2:b4:
         80:26:d7:1b:ce:c1:e9:8a:7c:e4:76:ea:81:b8:e1:4c:31:f1:
         a4:88:76:28:86:92:1e:85:90:e2:78:1c:9d:c0:23:04:e2:90:
         0b:f0:c2:c0:f1:02:d9:25:e4:b4:42:a0:51:82:12:f1:6d:35:
         8a:61:b4:71:80:22:12:50:03:89:79:e0:80:d8:42:65:36:a3:
         97:b3:31:3b:3e:7f:3c:67:e2:85:65:98:22:8f:56:c4:0a:2d:
         e0:1e:9d:dd:e4:fd:54:36:99:73:bf:2b:cd:b1:e8:53:fe:b0:
         cb:b8:61:c4:5f:e8:03:c1:5c:f5:80:43:97:ce:bb:e5:39:21:
         92:b3:66:3b:e2:52:d3:bd:37:0f:0b:6c:24:0f:a1:a4:64:6d:
         2d:be:d1:19:18:54:60:9e:66:9d:15:88:a0:db:d4:50:6d:41:
         71:aa:37:92:8e:35:b2:c5:d1:1e:3a:f9:ad:b4:12:32:66:49:
         45:0b:80:2d:95:1f:12:89:39:95:6f:de:96:b7:97:73:59:86:
         b4:58:f9:6f:60:c0:67:12:ba:2b:83:e6:44:29:b4:97:8e:60:
         ed:29:cc:ba:05:d6:d6:2b:00:b2:14:e5:ee:06:61:af:3c:4f:
         d1:25:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 22:01:25 2025 by rpki-client