Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80bf846f-f1ef-3984-b841-c2683439405f.roa
File:                     80bf846f-f1ef-3984-b841-c2683439405f.roa (raw, json)
Hash identifier:          RvSW1Buw2SOFfwnmk8lT47+7/QPAlbK51iW78Ka4tIY=
Subject key identifier:   FC:A4:2B:74:2B:C6:36:AC:C2:EE:58:A7:4C:A5:77:B8:5A:2F:D7:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848ADC61F577BA4214ACD7AA800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80bf846f-f1ef-3984-b841-c2683439405f.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     9498
IP address blocks:        2600:140f:2a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:1f:57:7b:a4:21:4a:cd:7a:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=29602b52-0ac9-4aba-b387-87b15f41bba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:cd:1e:8b:09:ad:63:05:01:d3:e4:a0:cc:
                    a4:55:94:78:78:41:19:8f:66:14:e3:ed:f8:76:1d:
                    b3:97:48:06:e2:32:7c:4f:c8:21:e3:99:ef:0c:b0:
                    50:c7:80:93:29:b2:0d:e9:83:3b:cf:c9:4d:b9:7a:
                    eb:60:8a:99:a4:a9:37:6d:14:5e:e6:85:2d:ba:21:
                    d4:0b:3d:8a:a2:d1:a9:f8:ef:f8:52:53:69:62:a5:
                    e2:54:c1:89:fc:23:7c:41:03:b0:50:a8:d0:99:79:
                    26:62:9c:11:db:51:61:a5:e5:06:56:ab:93:d7:d3:
                    84:b4:ac:0a:3b:f6:90:86:a3:6c:e9:6a:20:e7:e0:
                    06:c6:08:95:1b:f6:f5:a4:d9:35:f1:d9:74:83:fc:
                    87:52:22:ec:4c:1f:7f:76:f9:0e:44:4a:1e:a8:6f:
                    45:2e:f6:f9:5f:88:56:09:11:9b:7b:e9:a8:b5:17:
                    f5:75:a1:7c:a6:0a:3d:c9:36:c5:54:c7:43:4f:52:
                    c6:7f:68:c7:eb:9d:07:89:34:5d:7f:e4:fe:04:36:
                    f3:92:ba:92:7f:82:e5:4b:46:12:a9:a1:59:68:6e:
                    57:cf:f6:9a:6d:98:a6:30:7b:cd:ff:37:43:c7:91:
                    3b:11:57:e4:b5:3c:4f:8c:8a:10:05:0f:52:24:9d:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A4:2B:74:2B:C6:36:AC:C2:EE:58:A7:4C:A5:77:B8:5A:2F:D7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80bf846f-f1ef-3984-b841-c2683439405f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:2a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:62:dc:f3:8a:88:c1:ef:76:be:19:9b:2f:51:d4:9d:ee:
         35:54:80:3b:ca:b0:73:e4:a7:68:d1:65:39:6e:11:f5:4c:6d:
         55:9c:f9:53:95:d1:5b:d4:80:b8:23:89:d2:fc:58:00:a4:87:
         23:85:9b:ce:a8:fd:ff:47:a2:fb:45:e5:ed:98:34:97:1e:5c:
         aa:a9:e8:ff:0e:d4:c1:cd:94:71:9d:e8:c2:e6:2f:86:98:b7:
         d4:70:a8:ee:f4:80:42:56:38:24:15:ff:d1:2b:3b:e7:69:0d:
         83:74:9d:3a:4c:b8:59:b6:b2:70:7d:b5:0d:0b:b7:41:ce:d3:
         d1:20:6b:e4:61:97:0c:54:9b:26:2c:3d:87:d7:bd:8a:59:05:
         fd:2e:bb:00:ed:c5:95:e3:65:d9:76:5a:df:5b:1b:97:7d:05:
         ae:08:8d:86:63:22:15:b1:5e:a1:b9:35:de:c7:6e:80:b6:82:
         4c:05:86:1b:b7:64:0d:fe:6d:14:e8:58:21:39:6e:eb:ca:1b:
         f5:9c:d1:5a:7b:b1:9a:61:56:15:7e:e2:34:e8:82:a7:8f:03:
         e1:70:64:84:5c:58:08:80:a8:42:10:3d:0d:6b:56:79:75:c1:
         2e:53:86:dc:9c:12:2a:30:71:81:df:c7:a1:d2:91:1f:a9:59:
         26:68:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:47:22 2025 by rpki-client