Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
File:                     7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa (raw, json)
Hash identifier:          d+WxGBRe3c0RPjB5eC+gvFK1Yhajz8VTmZFBWNrn4gw=
Subject key identifier:   A2:B5:D6:CD:3A:76:4C:13:4D:34:47:B0:8C:D4:F5:0F:9B:2D:F8:E0
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F432858481C9A8A7C279A742833320200
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     397894
IP address blocks:        2607:f4a8:200d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:8a:7c:27:9a:74:28:33:32:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=91aa6320-8d9c-4055-8eab-4b666b230e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:68:0b:79:44:42:d2:9d:0a:a1:22:89:2f:
                    86:b0:b0:50:f9:05:ba:a4:27:9a:eb:90:b3:f5:17:
                    b7:7a:bd:cb:52:00:f5:e3:bb:17:a5:12:14:fd:46:
                    99:0d:05:fe:dc:d7:1a:c9:2c:f9:3b:a7:01:fa:8e:
                    a1:fa:92:6c:5f:24:1e:aa:0e:2d:ae:b0:3c:45:e6:
                    34:40:8c:eb:08:b4:cf:ab:12:bc:21:41:eb:3f:8e:
                    85:ed:7f:18:56:89:ce:ca:b7:d6:96:cd:c5:3e:c5:
                    ac:80:20:9f:58:bd:ae:d4:2d:01:b7:0e:d1:8b:a4:
                    9f:90:bc:ea:0e:54:18:c1:b5:e2:a1:00:f9:d4:7d:
                    c4:be:a2:37:33:b4:6d:f9:df:e5:1f:9d:65:1a:28:
                    ec:36:08:ba:fd:c8:4a:f8:4a:25:70:b9:81:d4:df:
                    65:28:a1:66:7c:4c:50:14:fd:15:7e:c9:cb:6e:6b:
                    17:df:94:74:bd:90:44:87:6f:5e:8b:8d:67:c3:6b:
                    dd:59:30:b1:39:a7:29:b2:db:48:ed:97:19:00:eb:
                    05:30:cd:d9:58:6b:8b:cd:0e:aa:f0:15:71:10:06:
                    ed:31:7a:56:ec:1f:13:f5:c1:9c:93:9c:f0:ed:13:
                    01:c9:83:b7:e6:fb:4f:67:9d:8f:ba:12:da:24:af:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:D6:CD:3A:76:4C:13:4D:34:47:B0:8C:D4:F5:0F:9B:2D:F8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4a8:200d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:52:cd:d4:46:fa:92:b7:84:e7:d4:6d:3d:81:9e:2d:78:84:
         91:73:ce:73:ef:b2:34:9b:87:76:c4:49:f8:30:01:4a:f5:8c:
         ff:1f:3b:b8:1a:e7:62:34:5d:e6:a2:ec:2d:ca:d3:89:69:f9:
         ed:47:ee:44:2f:c7:7f:02:81:0e:55:d6:1d:30:d3:94:9b:5e:
         56:70:d0:ff:74:70:3c:2e:f2:df:19:f6:37:24:55:91:a2:a2:
         76:99:df:1d:99:01:91:5e:0f:62:53:cb:52:c2:6d:3c:4e:fb:
         98:b7:6c:66:b4:1b:7a:0a:e9:d4:a3:38:5a:16:7f:fd:6b:ec:
         b2:32:02:b8:4e:c8:cb:5d:42:b9:d5:3e:00:9e:d4:fc:01:d8:
         5e:f1:9b:f1:1c:f9:e1:f6:ae:b8:6e:93:73:63:b4:b4:2a:13:
         15:76:bb:e7:63:3f:99:97:0a:0c:51:43:93:55:fa:74:28:18:
         9d:7e:ef:5e:3a:c6:6c:11:f3:04:7a:7f:f4:47:98:aa:30:de:
         c5:ba:11:a5:9d:9d:fb:ea:39:58:b5:af:72:c5:22:a0:73:38:
         c8:a9:63:62:60:e1:d3:d9:61:b8:38:0b:d2:79:57:70:1e:d8:
         28:64:0a:50:d4:09:07:1b:c6:76:67:41:6b:52:51:51:7e:20:
         a0:9c:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:03 2025 by rpki-client