Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa
File:                     de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa (raw, json)
Hash identifier:          ONLpIdFm/3Vilug0g8wJtugW3IIBW5Lz6u3QKYJ09Vo=
Subject key identifier:   92:55:87:81:33:46:54:0C:C7:09:C0:86:60:46:9E:BF:D3:0E:DC:D8
Certificate issuer:       /CN=2f9ba919-b6ef-456f-b272-bb7d311a635a
Certificate serial:       010D0C9F4328584894A5E7B688B02CFD2051B850
Authority key identifier: CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     25769
IP address blocks:        2604:8500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e7:b6:88:b0:2c:fd:20:51:b8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9ba919-b6ef-456f-b272-bb7d311a635a
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=4b7a3d5b-0e0a-4c63-be5a-a3876064854f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:ae:9f:b3:84:10:a1:76:e8:26:a4:2b:ba:
                    a6:ac:f7:dd:34:9c:5e:63:a0:27:eb:db:7c:5d:de:
                    1b:2b:9e:56:17:15:cc:b5:94:3f:84:a1:03:ab:04:
                    56:70:c0:76:47:aa:94:1a:63:4c:fa:e2:01:4f:31:
                    f6:d7:07:f0:fe:f1:8c:d7:f9:a9:1c:9a:51:29:54:
                    af:41:aa:fe:67:27:89:aa:e2:95:62:cd:d2:c8:f9:
                    ee:71:ac:c3:b0:a4:9f:65:66:40:ca:b5:55:cb:13:
                    a2:a4:ee:27:5f:89:d7:5d:47:15:75:c8:f6:53:bf:
                    c5:9b:e6:d5:b9:04:25:53:db:b1:c8:bf:23:7d:7b:
                    1b:b0:f4:ec:81:fa:f2:d3:20:cc:97:0e:e7:37:24:
                    75:e8:f3:17:2d:15:e1:a4:24:5c:b1:13:29:22:69:
                    07:e6:57:09:66:ff:67:9d:af:44:d7:bd:40:1a:ea:
                    d5:9a:77:a3:87:bb:5e:c3:db:99:c8:1d:97:1f:96:
                    44:a7:6d:bd:c9:f7:28:09:e6:dc:6a:c3:43:55:f5:
                    f7:9b:2c:ed:39:65:e5:2e:33:c5:5c:01:24:6e:25:
                    85:7e:66:6a:27:3e:d8:15:e8:6e:31:c7:9a:a0:b9:
                    49:7d:2b:0f:38:2b:57:7a:8d:6b:92:f3:61:3e:07:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:55:87:81:33:46:54:0C:C7:09:C0:86:60:46:9E:BF:D3:0E:DC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.crl

            X509v3 Authority Key Identifier:
                keyid:CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:60:fb:de:22:38:f1:b0:fa:7f:c0:6c:bb:c9:b2:39:f9:
         59:be:d0:a0:f3:68:c2:23:ef:ad:ee:39:56:48:61:da:44:d0:
         f6:e4:c6:e0:d8:b9:0a:70:f0:5a:04:94:73:ca:c4:d0:f1:b0:
         a6:3f:b8:5c:7f:9b:8c:e4:23:f8:c1:a4:bd:a0:85:31:26:90:
         5e:10:14:d0:d4:f1:f3:9c:3e:a3:e7:75:5d:1e:b8:b2:41:61:
         02:15:10:79:dd:ee:88:ae:c2:55:71:90:1a:5f:d0:31:9d:05:
         d4:fa:5e:83:60:b6:00:7d:0c:0c:20:52:98:57:a5:c1:ad:23:
         86:a7:34:a2:46:97:37:31:52:b1:55:e0:8a:99:0d:52:0d:65:
         60:63:23:b0:fb:1c:4c:1f:c9:e7:fc:c5:e9:76:2b:02:6a:cf:
         99:a3:df:7e:61:0b:74:e5:e8:bd:58:bb:63:0f:d1:0d:eb:35:
         ba:29:a2:00:5b:1e:f6:53:cb:e6:8e:e5:b9:24:14:4f:f3:bc:
         59:c9:91:e4:ef:67:e3:ec:1a:67:5d:cb:02:c9:e9:50:96:94:
         8e:f7:fe:dd:d0:41:64:bb:e7:32:90:2c:e9:66:18:db:cd:bc:
         fa:82:7e:19:9a:96:3b:9e:26:c0:01:17:ad:d9:76:e1:4a:2f:
         dd:2a:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:27 2025 by rpki-client