Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c0c3faa-f394-3cb2-aec7-72fed65b8bef.roa
File:                     4c0c3faa-f394-3cb2-aec7-72fed65b8bef.roa (raw, json)
Hash identifier:          gvfT9GJI5vp6yWFkaahWjkGVKhl9PZxiNPJHsI7GMDo=
Subject key identifier:   F8:88:71:8B:F9:9C:6D:E4:69:2F:C3:9B:72:D9:6E:E2:66:B8:83:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848ADC61F1DFD29F9FEEA0B8280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c0c3faa-f394-3cb2-aec7-72fed65b8bef.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     9498
IP address blocks:        2600:1417:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:1f:1d:fd:29:f9:fe:ea:0b:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=e575fd95-2860-40f1-b36c-45d27e0a55ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:5f:0c:5e:48:a8:94:f2:a5:34:d8:c3:0b:
                    6d:c5:f7:22:cd:c2:1c:48:2d:fd:3b:c5:e0:f5:34:
                    20:90:44:4d:79:de:f8:9d:7f:02:29:03:7d:00:96:
                    5b:23:88:98:88:d6:60:ea:33:2b:10:14:7d:ee:83:
                    f9:f5:2d:2c:f1:21:4d:92:20:72:39:22:80:2b:3b:
                    50:1c:0c:e4:6d:c8:ee:e2:06:34:fc:e3:4c:71:ff:
                    59:42:c0:b9:f7:2f:c2:34:a0:36:0f:df:37:0c:4d:
                    57:39:b3:0c:79:86:c0:a8:26:1f:69:cb:dd:81:3f:
                    bd:85:f1:3e:4a:fe:65:68:36:3c:d3:f3:49:bc:54:
                    45:b0:eb:ba:b3:05:8b:a0:e8:1e:5c:d5:68:14:7b:
                    87:a5:13:73:f9:9f:04:82:6d:b7:e5:e1:b7:c0:93:
                    cc:36:f6:02:bd:fa:45:72:c4:01:3e:0b:25:e9:25:
                    d6:20:2c:96:31:52:08:21:6f:fe:8d:f4:de:14:19:
                    8e:5c:2e:4e:98:f9:aa:08:8f:a6:06:65:22:80:7e:
                    00:9a:0d:a7:20:df:99:34:e5:5b:86:b0:be:c5:ee:
                    4d:6d:ca:85:90:6c:0c:f5:dc:70:ef:e0:fb:4e:12:
                    48:29:63:66:80:bc:83:ae:57:b7:65:a9:68:6a:0b:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:71:8B:F9:9C:6D:E4:69:2F:C3:9B:72:D9:6E:E2:66:B8:83:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c0c3faa-f394-3cb2-aec7-72fed65b8bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:43:4a:da:44:85:3b:0c:ee:8c:8c:a0:ff:07:53:70:53:
         e1:ed:37:dc:ea:ba:b6:dd:52:3f:ef:92:2f:6d:76:fa:4a:06:
         98:ae:da:63:3a:ed:21:7b:01:7d:cf:6a:91:39:37:e1:a1:00:
         0a:a3:80:f4:25:8a:17:1f:1c:a7:f6:69:9e:b9:af:a5:11:f5:
         96:2c:50:43:4d:0b:87:1b:6a:80:92:f5:f7:65:be:cd:68:b7:
         ed:90:69:8e:91:5f:e0:c8:97:a4:2e:2d:bd:58:75:48:56:69:
         d8:6a:64:b5:a3:a9:72:e0:e7:1a:04:a6:1f:ce:d0:73:87:23:
         13:8e:c1:fb:9f:7c:b7:ad:e9:43:26:d5:b0:cb:5c:9b:89:0c:
         1d:ba:6d:6d:65:61:2d:1f:30:34:26:6d:ed:94:01:09:8a:1e:
         5e:ce:1d:1c:e6:db:d1:68:dc:b6:52:c2:22:66:94:e7:b0:7c:
         52:be:f8:f4:11:2a:ae:dd:07:3b:b2:99:1c:0e:99:38:23:7d:
         9c:af:38:7b:c5:a5:0d:ef:26:b3:03:71:36:16:57:a6:b8:14:
         7d:31:06:09:38:98:48:28:32:b2:25:58:f1:88:3b:d4:73:f4:
         c2:3a:2e:4b:ec:49:65:e9:db:ee:d8:35:98:e8:43:6e:57:96:
         44:84:61:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEitxh8d/Sn5/uoLgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTU3NWZkOTUtMjg2MC00MGYxLWIzNmMtNDVkMjdlMGE1NWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH5fDF5IqJTypTTYwwttxfcizcIcSC39O8Xg
9TQgkERNed74nX8CKQN9AJZbI4iYiNZg6jMrEBR97oP59S0s8SFNkiByOSKAKztQ
HAzkbcju4gY0/ONMcf9ZQsC59y/CNKA2D983DE1XObMMeYbAqCYfacvdgT+9hfE+
Sv5laDY80/NJvFRFsOu6swWLoOgeXNVoFHuHpRNz+Z8Egm235eG3wJPMNvYCvfpF
csQBPgsl6SXWICyWMVIIIW/+jfTeFBmOXC5OmPmqCI+mBmUigH4Amg2nIN+ZNOVb
hrC+xe5NbcqFkGwM9dxw7+D7ThJIKWNmgLyDrle3ZaloagvwzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPiIcYv5nG3kaS/Dm3LZbuJmuIOgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGMwYzNmYWEtZjM5NC0z
Y2IyLWFlYzctNzJmZWQ2NWI4YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACuiQ0raRIU7DO6MjKD/B1NwU+HtN9zqurbdUj/vki9tdvpKBpiu
2mM67SF7AX3PapE5N+GhAAqjgPQlihcfHKf2aZ65r6UR9ZYsUENNC4cbaoCS9fdl
vs1ot+2QaY6RX+DIl6QuLb1YdUhWadhqZLWjqXLg5xoEph/O0HOHIxOOwfuffLet
6UMm1bDLXJuJDB26bW1lYS0fMDQmbe2UAQmKHl7OHRzm29Fo3LZSwiJmlOewfFK+
+PQRKq7dBzuymRwOmTgjfZyvOHvFpQ3vJrMDcTYWV6a4FH0xBgk4mEgoMrIlWPGI
O9Rz9MI6LkvsSWXp2+7YNZjoQ25XlkSEYd4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:52 2025 by rpki-client