Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
File:                     bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa (raw, json)
Hash identifier:          84jPYHFR1HNhfRNwFL72sHkQ+kmmXKhOoJt9WDTDc2o=
Subject key identifier:   8F:31:AF:FF:54:98:AA:F7:AF:01:EA:E5:AC:93:F9:31:55:5B:2D:30
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F4328584824FA81B3AFD850BD0AE36100
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     398849
IP address blocks:        2620:138:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:81:b3:af:d8:50:bd:0a:e3:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=b1b9ebab-51d7-4f57-848f-4c081b9d9d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:01:a7:53:86:a6:ef:9d:22:45:38:e3:9e:
                    7d:ce:5e:aa:55:af:15:5f:f6:40:44:e5:a5:e5:30:
                    94:37:97:97:a3:fa:6d:c7:fa:4a:68:68:92:8e:e0:
                    f4:00:c1:97:d4:10:97:bf:a1:c9:33:c8:29:6f:ec:
                    99:7b:8b:91:b6:02:18:56:5f:99:b1:7a:36:fb:7f:
                    ac:24:24:37:a2:d0:67:42:71:fa:15:37:96:dd:2c:
                    71:eb:11:c7:9b:92:91:f3:ef:b2:68:0c:cc:ee:47:
                    ac:03:4e:40:22:74:37:2d:9a:f1:db:08:c5:07:49:
                    5b:95:7a:a3:ea:a8:58:0a:f9:f9:54:5f:43:15:84:
                    e5:01:bd:67:e4:67:9d:f7:78:1e:5b:c4:2c:41:23:
                    e0:b7:98:03:a0:0e:bf:34:9c:be:9a:e7:e0:bd:36:
                    df:b2:32:c5:34:3d:2a:1c:e7:e7:f0:fa:25:11:c7:
                    c8:ab:b1:92:04:07:d9:3d:7b:74:1b:ea:8b:b0:a3:
                    93:84:7a:07:84:29:47:ce:81:8e:3e:82:e3:5d:55:
                    e5:ab:b1:a5:12:31:7a:76:3e:ac:7e:dc:75:fc:c2:
                    0c:1b:8c:6f:15:2f:52:84:64:e3:1a:04:2d:94:cf:
                    18:9c:4b:0b:3b:97:f5:ad:6c:19:2d:15:8d:40:e8:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:31:AF:FF:54:98:AA:F7:AF:01:EA:E5:AC:93:F9:31:55:5B:2D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e1:48:38:3b:5f:bf:62:d7:40:95:f6:3f:81:d8:fc:51:bc:
         86:af:81:73:4c:f6:7c:c3:10:c4:6b:fb:7f:40:e6:e4:12:bf:
         8e:c3:8c:12:bd:30:36:d7:ed:b5:1b:f8:5d:89:8c:31:c5:7d:
         eb:7b:28:2c:db:11:f6:c2:c3:d9:3c:b3:fe:41:08:95:a6:a7:
         70:af:05:b3:37:80:41:ca:64:10:30:79:11:00:62:07:c8:05:
         e7:86:38:4f:e0:0f:47:dc:c3:a7:bc:aa:9f:20:3b:2e:7a:5d:
         6d:3a:a4:34:03:63:4d:aa:28:e4:ce:82:1c:51:5c:64:5d:0a:
         e9:dc:34:46:a1:9b:62:a7:f8:6a:8f:f1:30:d6:45:5c:ca:58:
         69:a6:8b:23:7f:3d:6f:84:1a:4a:c9:21:ef:73:bd:e7:13:7f:
         4c:a1:6a:10:f3:d3:8d:f3:a0:da:ab:cd:23:eb:0d:bd:a5:cf:
         f5:37:06:6f:7e:6c:3e:f5:73:63:30:99:bc:ee:f4:21:54:b0:
         75:cd:74:3a:99:30:be:6c:98:ba:86:63:14:c7:43:a6:82:e9:
         76:c6:69:50:49:a5:f1:04:2f:8c:7f:ce:9b:19:28:7e:83:3e:
         de:fb:94:67:3b:3d:6f:b4:bf:94:d2:52:f4:b8:cb:32:dc:75:
         19:41:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:51 2025 by rpki-client