Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa
File:                     7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa (raw, json)
Hash identifier:          fFqZ5CUGAYaTn90ki74cfGMH2NnyWLXBhybGrbt2FOw=
Subject key identifier:   72:D2:34:86:E5:CD:8C:45:3A:F8:61:F7:B0:BE:FC:E9:7C:6F:64:83
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F432858480BDA69ED95417523602F0DA0
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     36678
IP address blocks:        2605:9d80:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:69:ed:95:41:75:23:60:2f:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=ce88de82-83a5-40c1-b7d2-d620fc835d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:d6:f6:b8:84:ce:1e:25:0e:cb:40:0e:78:
                    13:c3:05:26:e6:21:be:25:b1:46:e8:98:63:f5:dd:
                    b5:7a:c4:bd:2b:c7:7a:db:44:ed:5f:e0:b9:5d:a1:
                    4f:2f:b0:d9:3c:31:2a:c2:e0:8e:76:ad:cc:63:1f:
                    9f:27:98:3d:a2:80:c1:19:f5:6a:80:23:5e:1b:6c:
                    fc:73:df:0e:f5:18:c0:d4:d1:ac:7b:5c:d1:0d:8e:
                    10:60:b8:42:78:45:77:06:fc:81:63:4f:0c:9c:c0:
                    0e:d8:0e:be:bc:0b:33:71:65:4d:6b:58:10:27:15:
                    02:46:84:2a:e9:30:c5:f2:68:86:b3:af:63:b0:e9:
                    61:ef:34:da:f5:ae:ee:2f:f5:e3:2d:36:41:c6:93:
                    1c:80:06:f5:05:8f:a3:bc:78:e6:82:62:64:48:df:
                    2c:1f:c6:70:e6:e5:a7:c0:22:15:e7:3b:df:31:a6:
                    fb:e8:67:59:13:1a:a6:23:3c:e8:c1:ac:7b:36:15:
                    61:00:4a:47:d2:2f:8a:9d:b4:0f:c3:66:69:38:fd:
                    d6:2e:98:0f:ca:4d:73:ea:99:d8:75:60:5f:08:e2:
                    ef:86:a5:39:ed:f1:63:cc:0b:b9:c0:eb:d0:d1:39:
                    30:18:35:67:3f:8c:d1:54:74:37:1a:90:e4:40:6d:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:34:86:E5:CD:8C:45:3A:F8:61:F7:B0:BE:FC:E9:7C:6F:64:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:b2:e1:e5:bc:6d:ce:b7:15:c5:ac:b0:31:57:c4:b9:49:27:
         65:20:bd:a6:45:31:45:fc:60:4d:82:12:56:9f:25:13:e0:dc:
         37:a0:ae:c3:5e:47:c4:d4:2c:7b:e8:ae:c5:89:72:80:81:d6:
         e3:7b:6f:64:f4:e8:50:d0:c8:49:3e:0b:25:c3:10:ed:86:88:
         fd:4d:97:0d:5c:7c:a9:49:c7:88:b9:78:a8:c4:f0:13:c0:0f:
         6a:96:05:56:71:62:f3:2e:71:03:ad:6b:b8:35:e5:7e:14:8a:
         65:7b:0f:92:14:e9:a0:ce:b3:86:62:ea:a3:8d:41:be:5c:f7:
         6b:79:ad:15:ec:c5:e3:c5:5b:a4:0d:88:2e:9e:a9:f2:8b:76:
         bb:ed:2c:5f:c9:95:ef:63:2f:62:42:53:1a:cf:39:c0:33:f9:
         ab:5b:5d:24:b3:dd:c7:e7:2c:ae:e5:25:4c:10:f2:57:42:6e:
         32:b7:4f:31:46:11:f6:34:d8:45:d9:6e:75:8c:d9:8e:9e:cc:
         5d:b0:30:c0:83:f0:53:f2:60:f9:3b:bf:ca:4b:f6:ac:bf:5c:
         58:6d:82:cb:9a:87:e7:e3:f7:90:79:b7:ca:cc:fe:98:4e:a4:
         33:d1:1f:90:e7:bd:42:45:e1:fb:f2:82:33:01:6a:ab:69:bb:
         dd:ba:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:38 2025 by rpki-client