Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/bb74ee57-272b-3bc0-b595-20fae5dd4dbf.roa
File:                     bb74ee57-272b-3bc0-b595-20fae5dd4dbf.roa (raw, json)
Hash identifier:          YrrdQCcLc1UDTl+vwjLH65/vbjCEqHK4Jh0UhC4PkgQ=
Subject key identifier:   0B:F8:EE:47:B5:D0:C7:D1:1D:05:46:73:DA:7D:E7:F3:BD:8E:B1:A9
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328584827C53D36F4FD831400B6A730
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/bb74ee57-272b-3bc0-b595-20fae5dd4dbf.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     397131
IP address blocks:        2602:fe6a:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:3d:36:f4:fd:83:14:00:b6:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=206d6f3e-2f6d-4599-b320-d922261fa51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:43:50:c9:0d:63:29:1c:57:15:28:4d:93:
                    7b:1b:49:e4:7c:bb:13:36:bc:58:cb:74:7b:f8:7f:
                    e2:d6:aa:ff:1f:0b:81:01:bd:b0:2c:b7:db:13:8d:
                    94:5f:93:f0:df:f9:3a:2d:2d:53:4f:e2:6d:7b:32:
                    73:d4:30:f7:fb:56:cf:56:65:77:5c:a6:61:44:ea:
                    e8:26:bd:8d:ea:e4:58:9a:bd:b6:7d:a2:28:68:09:
                    8f:44:63:d2:c0:97:fe:35:c7:5e:7b:a2:e7:1a:6e:
                    71:92:7b:a0:a2:2f:72:de:8a:3a:96:f4:e3:e6:6a:
                    1b:6c:6c:44:6b:9f:62:a0:e2:ae:5b:ff:e3:c6:95:
                    f6:19:2d:e7:60:7b:d6:2d:80:fe:7a:93:a3:87:58:
                    8c:64:f6:52:83:44:e2:e1:37:be:87:a4:ac:93:7c:
                    38:93:18:40:e8:d3:b8:f3:e5:f3:3c:75:bd:cc:e8:
                    59:8c:09:a6:51:0c:8a:e8:87:3e:57:b2:ab:56:04:
                    e4:3a:09:35:90:0c:0b:b2:10:2b:09:8a:ce:e7:16:
                    3b:07:38:05:78:f3:30:15:61:1f:ff:bf:45:51:ad:
                    71:3a:9b:07:23:21:ec:74:3f:b1:97:2b:87:fa:2a:
                    36:3c:11:b4:b4:b3:0a:7c:86:e8:33:61:eb:39:29:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F8:EE:47:B5:D0:C7:D1:1D:05:46:73:DA:7D:E7:F3:BD:8E:B1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/bb74ee57-272b-3bc0-b595-20fae5dd4dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6a:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5d:d8:b6:e0:08:fb:ef:25:fc:be:b4:0c:c9:f6:7f:b9:fd:
         35:67:9a:61:f0:d9:7a:39:0c:dd:90:d2:d7:13:07:60:20:a8:
         ab:5f:09:a8:c9:6e:84:cf:c8:ce:06:83:82:92:97:de:f8:38:
         46:03:d7:fd:c4:20:83:84:94:72:b3:6e:e0:4c:25:d1:46:df:
         ad:79:0a:21:ae:87:35:cc:6b:bb:a2:5d:22:8d:1f:02:d1:2e:
         60:4c:ba:04:3a:dc:f2:1c:f9:71:bf:3a:2f:f4:c1:06:36:11:
         b3:97:f4:8d:96:49:3e:95:11:6a:35:90:09:b5:b5:45:97:99:
         f3:3c:75:d1:9d:8e:8f:a2:2a:dd:15:dc:5b:b1:1d:f0:40:58:
         78:34:5f:9b:a6:91:9d:16:a0:a7:3f:01:f1:0c:fb:ce:b7:7b:
         2e:8c:20:87:21:d7:c6:b4:c0:b0:f2:fe:dc:03:ed:eb:c4:1b:
         6f:eb:f7:b4:4d:1b:35:07:93:41:43:1f:10:29:34:12:9c:27:
         33:ef:e4:0e:fd:19:3c:f5:6c:3e:1b:27:af:d2:e0:76:72:71:
         d8:b1:5f:a2:f8:77:fd:7e:ae:a6:cb:2c:3b:3c:20:ef:c4:e7:
         0c:f5:34:89:f4:07:f1:54:44:2e:0c:01:53:43:dd:b6:00:df:
         13:39:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:40 2025 by rpki-client