Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debe803e-7ab2-3bd3-8f7e-626ebd766d5a.roa
File:                     debe803e-7ab2-3bd3-8f7e-626ebd766d5a.roa (raw, json)
Hash identifier:          epNBaImSoXYK6dQL8nwC4m+8YoIJN6vzK68O4FK8+nQ=
Subject key identifier:   F1:2A:FA:34:EF:7D:04:1A:25:CE:CA:62:B2:6E:5C:68:0E:5F:2F:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFF609846A8F5EE4B64F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debe803e-7ab2-3bd3-8f7e-626ebd766d5a.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     136758
IP address blocks:        2001:470:cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:f6:09:84:6a:8f:5e:e4:b6:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=483e812b-4f13-4812-81ee-c681eac1d92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:3b:70:04:4e:c9:93:dc:7f:45:71:f2:a6:
                    fb:d9:cc:2a:29:4b:04:89:24:60:18:35:a3:17:90:
                    d9:39:aa:fc:23:95:b3:90:43:62:28:98:e2:f4:0e:
                    8d:c7:3d:78:11:b8:b4:36:69:5d:c3:33:25:7e:e8:
                    25:e1:23:74:62:4c:a7:02:94:a1:92:9c:81:a4:b5:
                    b5:6b:a2:f6:06:70:3c:6e:2e:3f:15:ec:14:b0:af:
                    e7:4e:68:d5:d3:10:ff:d7:52:49:0e:22:87:c3:ec:
                    ea:da:b6:b5:6d:5d:ae:54:5c:4e:8d:ca:96:85:f0:
                    99:f9:65:4b:5d:8e:f3:67:82:53:09:92:9c:de:d5:
                    22:d8:50:b7:ad:a8:47:7b:36:67:cc:66:e6:be:8a:
                    80:b6:26:bb:c4:26:8e:e8:1c:03:be:0b:87:f7:72:
                    7e:91:45:97:54:d3:30:bc:3d:49:78:66:63:d5:68:
                    f1:be:41:3c:28:01:aa:e0:c2:e7:17:c8:da:90:ca:
                    20:3f:df:e6:1f:0a:3c:71:fb:32:7b:0d:14:d1:30:
                    f4:ee:5c:28:29:78:ed:ca:dd:6e:7b:92:7a:4e:25:
                    c3:f8:13:d0:d3:3f:6e:db:31:ef:f9:6c:4f:6e:48:
                    01:4a:47:b8:44:bd:d4:67:c0:1e:d5:1c:25:19:51:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2A:FA:34:EF:7D:04:1A:25:CE:CA:62:B2:6E:5C:68:0E:5F:2F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debe803e-7ab2-3bd3-8f7e-626ebd766d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2e:2c:ea:76:fa:81:0e:62:06:a8:25:10:11:b0:ef:04:c0:
         ca:02:bc:ad:99:75:88:25:89:80:51:aa:0c:f4:5b:33:3e:ee:
         ac:e0:11:b6:46:3c:11:b9:d0:7f:17:ea:10:36:c4:89:e8:64:
         76:3c:0b:4c:17:6f:c5:0a:b4:df:98:37:de:d3:1b:5e:97:e9:
         06:16:e4:d4:fa:7b:56:5d:3a:9e:cc:a3:f8:f9:09:cf:d9:91:
         81:45:07:51:18:59:38:66:65:a5:88:aa:18:09:ec:67:60:59:
         66:89:bd:cf:31:3f:02:72:a8:41:5f:bf:e0:20:7d:84:c2:9c:
         2d:3f:0a:3b:c0:c5:be:e4:60:fa:17:85:39:4b:6e:31:da:74:
         db:8e:f0:11:4b:9a:4f:59:44:b6:0a:c9:9d:ca:8c:d0:e9:0e:
         b8:1a:1c:e9:f9:3f:f8:40:db:ef:09:dd:b8:bb:45:f7:28:19:
         03:bb:6a:c3:6c:35:08:74:e1:f8:74:a6:c0:6d:91:0c:36:bd:
         1e:93:6f:cf:06:00:9d:0a:a9:4a:a9:49:6b:61:c4:0e:fa:33:
         6d:90:c6:e1:f3:65:bc:5a:78:65:31:b6:48:c8:9a:ff:38:ae:
         c2:85:a7:1e:6e:4e:c1:77:fe:6e:77:5d:b8:18:b3:d7:d5:9a:
         03:ce:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:24 2025 by rpki-client