Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa
File:                     19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa (raw, json)
Hash identifier:          OvTffZ/sh5WSr2Sls25o1+TiSlLV3HHiExdC1Dlw27A=
Subject key identifier:   7C:BE:BB:7C:D2:77:E9:1E:A4:DB:C6:9F:03:35:97:8A:6B:B7:92:61
Certificate issuer:       /CN=a97ec683-752f-402c-9901-cad9c007976f
Certificate serial:       010D0C9F4328584898D608E9AE85A5A354B32720
Authority key identifier: D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2620:b6:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:08:e9:ae:85:a5:a3:54:b3:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ec683-752f-402c-9901-cad9c007976f
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=e0c02d6b-467b-4e66-8552-d85ec206f26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:d3:63:1f:b1:8f:c8:a0:84:98:ce:4b:ef:
                    32:29:c0:a6:5a:6a:0a:58:14:88:ba:a3:04:b9:1d:
                    9d:04:53:6d:44:9f:a7:54:c2:a0:d8:74:d8:33:bf:
                    f8:3c:02:2c:dc:1e:6c:c3:18:9d:aa:6d:02:27:21:
                    64:8b:29:13:19:7c:b8:6e:47:55:7b:ab:98:1d:ed:
                    c9:49:37:a4:80:5a:b2:3e:77:43:21:d5:16:c9:b4:
                    8c:71:8e:3a:9a:3a:93:46:23:94:d5:b2:34:31:50:
                    5f:2b:ed:26:23:03:3d:79:50:76:d9:f5:ab:37:f2:
                    25:3c:8c:ea:63:68:02:9b:10:6f:ff:4e:58:f6:fb:
                    89:50:1c:85:22:ca:ef:4d:1c:20:d1:47:99:4f:5a:
                    d5:ad:0c:4d:56:82:f8:ec:95:15:20:0c:de:fa:c9:
                    59:cd:de:65:f2:47:95:54:14:59:a9:97:af:2f:64:
                    80:69:71:74:5b:e6:9f:e2:20:c4:eb:56:e2:35:a1:
                    5e:51:90:b9:4f:8e:e1:7b:8d:d7:50:82:03:ba:af:
                    64:32:02:23:7a:c2:72:bc:a8:c9:c9:35:b3:20:c9:
                    8e:22:be:5d:00:77:e5:66:21:b4:db:a1:28:42:a7:
                    18:e6:c1:f4:f6:07:7a:55:c0:6a:cd:eb:64:8c:f8:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BE:BB:7C:D2:77:E9:1E:A4:DB:C6:9F:03:35:97:8A:6B:B7:92:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/19efe00d-a476-38cc-87ba-1f7c9ed736aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b6:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a7:b2:14:08:ea:fd:0a:86:af:cd:33:8d:9f:cd:2a:aa:7b:
         ab:06:8b:47:e3:ee:79:a3:2d:26:6b:5a:dc:95:56:ad:a3:f7:
         f9:eb:b8:9f:3e:85:7b:e0:48:e5:ec:c2:32:79:c1:42:4e:08:
         28:5b:7c:18:c5:dd:f5:d5:ee:44:59:76:da:e6:69:63:e6:c8:
         14:40:59:02:c5:f6:69:cb:ca:a6:f5:ce:51:fb:63:f3:6a:e8:
         39:15:d4:94:9c:ed:49:c3:bd:ff:01:d1:d2:1a:85:d8:57:1d:
         aa:58:6a:a0:ae:9f:0e:62:8e:cc:de:e0:cd:c4:6f:45:a5:59:
         98:72:52:92:bb:38:8c:0e:8a:f4:d8:ea:ca:6b:33:a5:26:1e:
         1f:a8:05:5d:db:d2:d1:30:e8:71:5c:7f:c9:39:5e:52:7e:40:
         ad:f0:b3:82:3c:96:06:b1:c9:48:63:0f:e8:40:fd:c8:a6:84:
         52:97:a8:f4:7a:a2:c3:b1:43:14:2b:b3:89:00:97:56:90:f7:
         52:06:e0:5d:1e:b5:0c:6f:b7:ac:8e:4a:4f:e4:6c:56:ab:34:
         c2:7b:e9:1c:4a:94:eb:a2:b3:d1:75:ac:70:07:fe:7e:25:74:
         41:11:9a:40:f5:08:2f:ab:ce:4d:59:2f:28:f1:81:61:47:48:
         4a:6c:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:45 2025 by rpki-client