Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864d88c8-54be-3ce6-999e-258ea0fe51e9.roa
File:                     864d88c8-54be-3ce6-999e-258ea0fe51e9.roa (raw, json)
Hash identifier:          1mVCR5VxYz3S/iA8FX84hfsCzzmSPTju5Awn+Uvz9xk=
Subject key identifier:   72:A5:B9:8C:EF:04:73:98:B0:02:99:1A:E2:D9:63:FA:FE:AC:B8:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848ADC625EB367B9ECFCFD36940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864d88c8-54be-3ce6-999e-258ea0fe51e9.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     9498
IP address blocks:        2600:140f:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:25:eb:36:7b:9e:cf:cf:d3:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=f6fd355b-e3dd-49fb-84c5-a65afa261bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a1:82:76:0a:7a:75:ce:1a:38:ed:0b:7a:7c:
                    9e:84:22:ba:33:3d:b8:f3:24:08:e2:48:20:19:3e:
                    19:c8:b7:ba:4f:b5:3d:63:c8:9e:5e:69:b5:b8:ee:
                    97:fb:18:e8:94:f2:5c:59:ca:2a:fc:36:e5:aa:8d:
                    f4:18:9d:14:43:88:c0:07:d8:3c:b6:48:b3:6c:da:
                    9b:8a:3e:47:ad:84:8b:9e:76:fc:73:d5:16:c6:0e:
                    7c:a7:50:95:13:7c:d0:66:84:17:bc:a7:d1:0a:31:
                    40:e5:2f:27:ee:7c:a0:80:77:e7:55:5e:6c:9e:bb:
                    44:9a:c1:12:d6:10:34:14:a7:25:a7:12:07:53:c3:
                    b2:8e:c0:42:81:3f:97:5b:82:b2:92:56:40:66:61:
                    6b:d9:c6:4e:2f:ec:91:a6:27:bf:37:e0:94:d8:e0:
                    ad:03:7f:c1:46:28:13:31:5f:e3:fc:63:00:45:c4:
                    ed:dd:82:dc:c3:2e:90:9e:7f:48:70:d4:2d:ac:f9:
                    aa:1b:9e:e5:ec:77:3b:04:06:f3:cf:fc:2b:02:f3:
                    ac:a5:03:48:f5:aa:6f:56:0c:11:08:67:70:fb:e1:
                    7c:28:93:e7:10:ff:2a:c1:05:19:5c:32:65:fd:00:
                    e6:e1:7b:47:c8:5f:24:3e:d3:d6:03:dd:4f:0f:24:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:B9:8C:EF:04:73:98:B0:02:99:1A:E2:D9:63:FA:FE:AC:B8:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864d88c8-54be-3ce6-999e-258ea0fe51e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:d000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a7:6d:1c:91:9a:9b:32:f3:ab:a3:53:d5:42:24:9e:2e:47:
         7c:68:a8:f6:d7:1a:65:ff:21:37:fa:fd:4f:d4:0f:b0:ef:30:
         0f:8f:d3:ee:f5:7c:25:0b:a8:ae:87:bb:ba:89:6a:5c:4e:42:
         b2:71:41:c2:bb:af:6c:01:54:e0:06:52:9c:c9:85:34:92:8e:
         e4:19:49:11:31:03:65:98:cf:7d:a5:b2:5d:39:a5:9c:28:a4:
         c6:ee:24:71:69:1a:cb:93:90:9e:53:99:22:6b:b0:8c:72:29:
         7b:db:16:58:8c:c4:05:52:6a:09:31:5d:44:6c:7a:6f:9a:4b:
         07:8c:18:9b:bd:08:1b:34:71:ec:74:75:a8:66:51:14:c3:2e:
         7f:9b:ed:9c:0c:61:d2:03:ce:da:e9:d0:18:72:4e:d8:0d:85:
         77:ff:f7:09:fa:89:ec:e1:90:0b:db:11:98:25:cd:c4:77:ff:
         03:c2:59:ab:a1:f4:f6:43:c8:17:e7:5d:98:f8:e2:bf:c7:e8:
         2d:50:13:29:80:a5:c0:28:91:99:ee:77:bf:ce:63:df:c7:13:
         20:22:5c:44:4c:52:ab:37:25:f9:8c:13:a5:6e:3e:35:0c:6f:
         5b:4a:bd:3b:9f:95:3a:f0:f2:90:26:33:d4:bc:79:68:cd:a8:
         bf:1e:f7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:19 2025 by rpki-client