Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96d4fa58-35ab-3f78-b45a-98881e66a734.roa
File:                     96d4fa58-35ab-3f78-b45a-98881e66a734.roa (raw, json)
Hash identifier:          ++VJc+z/qWTGJGU+HT8306WA6pgva3FBwdWgJDyzMK4=
Subject key identifier:   6B:FB:05:BB:9B:A0:CF:8A:69:A0:32:2F:C0:9D:EE:71:4B:4B:92:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848ADC61ED3B48EF20CFE311B70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96d4fa58-35ab-3f78-b45a-98881e66a734.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     9498
IP address blocks:        2600:140f:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:1e:d3:b4:8e:f2:0c:fe:31:1b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=92c8526e-2de3-44ff-9966-e925ed1b0295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:bf:fb:1a:9d:89:52:0c:17:73:e6:aa:c3:
                    d2:d8:ba:60:8c:87:15:f0:8f:31:ab:fc:bf:f6:de:
                    84:89:46:60:45:cf:bc:f8:70:f0:ad:3f:19:c4:b7:
                    ee:6f:0c:af:b8:93:49:52:79:ef:07:c9:2e:3d:ae:
                    1e:f8:39:c0:19:b7:0f:ad:44:ef:6b:eb:5e:a1:54:
                    24:c7:3c:3e:59:5a:95:aa:26:5e:76:da:12:10:7e:
                    59:0f:18:06:ea:a4:fd:75:6a:70:6c:0d:80:be:ce:
                    c2:d9:c7:bc:0c:51:e2:07:84:93:16:d7:df:6e:e7:
                    9d:73:ab:9d:b4:e3:b9:f6:9e:fd:fa:02:6b:ae:43:
                    34:40:7e:78:76:6f:2e:f8:be:12:c9:64:45:64:8d:
                    fe:6f:2a:88:2b:fa:48:35:ce:17:3a:fb:c5:ea:cf:
                    2a:f8:a4:36:8f:43:52:22:76:0a:40:cb:3b:2b:89:
                    39:06:3a:fc:9a:cd:57:21:e2:a0:3d:91:45:5a:82:
                    6e:b6:0c:84:ef:a8:f1:95:e3:67:97:00:39:04:c4:
                    06:55:dc:89:a6:7d:9b:d1:48:eb:73:c2:6c:bb:a7:
                    ea:44:48:41:aa:51:d2:ee:7f:51:94:24:ab:19:44:
                    4c:32:a4:e4:6f:fd:72:38:ab:2d:20:43:4c:3d:f6:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FB:05:BB:9B:A0:CF:8A:69:A0:32:2F:C0:9D:EE:71:4B:4B:92:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96d4fa58-35ab-3f78-b45a-98881e66a734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:78:83:05:0d:ac:5b:ba:b6:53:7c:9a:64:da:ac:7d:9f:
         2e:62:54:89:bf:bf:df:5f:ef:fb:52:a1:fd:36:75:e8:1f:0a:
         a4:70:f0:13:9f:3c:8b:24:37:d0:c6:02:4d:31:da:b6:e2:cb:
         c6:f0:b3:b5:75:c4:5e:7a:85:ef:8d:2d:7d:a6:36:d2:81:45:
         f0:4f:2c:fa:f1:24:34:d0:be:95:84:c7:02:56:d2:97:da:57:
         ad:f6:2c:d0:b0:f3:5d:88:8d:3d:75:01:18:bc:5f:d8:92:56:
         ef:a5:08:91:0e:b2:0d:f3:99:9e:5e:50:c4:c5:6f:0a:45:e5:
         49:7a:24:80:a7:4e:dd:f0:77:2b:ca:03:10:d8:3d:92:1e:c3:
         ca:c5:12:fa:de:19:4e:f3:53:b6:44:f9:4a:2c:ae:97:8a:c2:
         39:0c:a7:ba:92:47:85:0c:e8:85:89:26:c7:79:c5:ec:49:3a:
         59:a1:a8:7f:d1:65:e8:53:05:43:ed:2f:c8:dd:21:30:2e:cc:
         69:27:03:71:a9:94:34:26:a9:41:74:26:dd:a6:61:48:95:41:
         5e:87:ff:ba:90:b3:6c:61:21:ac:5c:29:06:ca:8d:47:1d:1e:
         ce:57:a4:b4:c7:29:d2:5c:f1:18:12:f2:ff:2a:53:1b:ce:60:
         05:5a:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:54 2025 by rpki-client