Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/5ea8a3cf-4472-3607-83db-c2add2d96b21.roa
File:                     5ea8a3cf-4472-3607-83db-c2add2d96b21.roa (raw, json)
Hash identifier:          Z5iKlh3pOJrg0Sccm6WEZ6YqfN38Kx7jyUv+cb3uAhE=
Subject key identifier:   28:CA:5D:79:8D:C6:6B:5A:7A:89:5F:C7:A4:35:33:26:9D:0D:97:73
Certificate issuer:       /CN=a97ec683-752f-402c-9901-cad9c007976f
Certificate serial:       010D0C9F43285848A996266FF56B2B5856C9E7C0
Authority key identifier: D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/5ea8a3cf-4472-3607-83db-c2add2d96b21.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:812:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:26:6f:f5:6b:2b:58:56:c9:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ec683-752f-402c-9901-cad9c007976f
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=68ca1b49-9249-43fc-9115-cc43440c2081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:33:c8:43:d9:a6:29:f7:ea:8d:1e:4c:93:
                    ab:f5:53:57:95:d1:e4:95:01:6c:18:2d:95:74:2a:
                    26:9e:bf:6d:16:62:f3:7e:2f:67:3b:0d:3e:e7:8e:
                    d5:e6:ad:a1:73:a7:76:8e:6b:21:c9:8d:1e:c4:8f:
                    19:37:ba:d4:a6:1b:b8:78:8a:e6:bf:7f:13:73:f0:
                    6a:1b:a6:bd:e0:ea:b7:8d:93:4b:0f:37:83:4f:c0:
                    67:84:f0:55:c3:97:23:a4:55:50:79:20:87:78:8b:
                    b7:08:97:dd:a3:83:8a:d3:98:b9:4f:28:b4:4a:8d:
                    0a:2c:0a:e4:50:13:32:4b:67:82:6e:62:2f:8f:e6:
                    4b:af:ee:07:40:e1:01:7b:22:84:92:91:86:9c:29:
                    57:64:45:a5:61:50:9a:12:bf:45:81:07:1e:45:17:
                    ec:a2:30:fa:0f:15:4c:cf:cd:e1:01:0e:5e:9c:4f:
                    1e:03:60:9d:66:fe:68:33:d8:48:b0:fa:c3:df:e7:
                    74:2e:81:87:06:dd:e0:8c:c2:6a:f9:96:0f:b0:38:
                    af:ef:fc:c9:bc:c8:09:55:f4:90:0e:5c:47:88:7f:
                    15:99:d2:6a:20:81:1c:7b:d4:84:9d:8f:7d:a9:79:
                    16:27:34:bc:83:12:4e:29:d2:36:19:1e:44:26:23:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CA:5D:79:8D:C6:6B:5A:7A:89:5F:C7:A4:35:33:26:9D:0D:97:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/5ea8a3cf-4472-3607-83db-c2add2d96b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:15:52:72:9c:e1:01:8e:87:8c:5d:f8:55:e2:79:d1:2f:
         c5:05:03:7f:4b:29:b7:1a:3f:f1:d8:49:ee:20:dd:58:26:40:
         72:1d:aa:73:bc:cb:33:12:1b:ab:56:71:5c:78:96:93:c5:e6:
         86:03:c7:7a:72:f0:79:5d:28:ef:bf:e3:60:a5:22:d5:68:b1:
         25:a0:62:2b:8f:ed:48:93:41:59:17:38:44:17:11:92:76:91:
         e6:29:be:59:4f:12:bd:40:a4:5f:f3:68:93:9e:82:b6:0e:98:
         92:dd:be:5f:4d:95:d2:a9:50:2c:56:33:04:dd:33:34:4e:36:
         41:3a:5f:3d:24:76:aa:90:63:c1:72:a6:9d:fc:8f:94:08:b2:
         30:53:03:9b:48:b1:0e:a8:35:56:ef:d5:e2:06:17:55:3b:b1:
         47:7a:91:0f:4e:db:9e:0b:95:af:ed:22:d6:46:a3:c2:9f:c7:
         d1:36:37:1f:9d:34:e0:48:0f:c3:4a:61:2d:9e:e1:35:52:de:
         99:ab:39:58:a8:75:0b:49:23:ea:4c:ac:c4:e3:ae:a0:8a:a5:
         c0:39:d7:91:2f:44:df:28:3b:d3:f6:64:06:01:fc:ca:6b:f9:
         b7:e9:5f:a8:03:1f:22:87:57:b5:1b:ac:68:05:e1:dd:6e:e6:
         b4:c8:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:23:36 2025 by rpki-client