Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c91a280-2eb2-39f7-800f-906890d600ea.roa
File:                     0c91a280-2eb2-39f7-800f-906890d600ea.roa (raw, json)
Hash identifier:          ec4v2oCYh4ZBWJzUZQy/OMeGjzcyEtVRA7OQQd1akIk=
Subject key identifier:   A9:F4:DB:3F:E0:DC:11:B6:65:EA:E8:FF:0D:96:1E:7D:ED:50:8D:B5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB552B39F8988855494E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c91a280-2eb2-39f7-800f-906890d600ea.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        2600:1408:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:55:2b:39:f8:98:88:55:49:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=b4803d86-2981-450b-bf44-235b6d586692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:0d:73:bb:a9:31:e2:d3:f3:cb:da:a3:e9:
                    12:49:31:41:ce:29:a2:34:a4:8a:81:11:bf:ec:41:
                    37:2e:25:1c:90:53:cc:1d:c0:6a:74:c6:05:6d:93:
                    b1:6e:75:9a:22:45:78:5f:af:56:36:a9:87:ad:96:
                    94:cd:d9:77:c0:96:4b:1f:9b:00:fc:2d:d0:32:e7:
                    13:63:19:a1:52:4c:b4:c3:b4:9e:2a:a9:37:29:39:
                    bd:4a:ce:f6:f1:3e:e4:a4:29:54:fc:f3:71:8f:4e:
                    1f:90:a1:8f:68:40:ca:7c:8a:7a:60:f8:d2:5d:c7:
                    0c:2c:4f:d7:3b:fa:30:b7:a9:6b:fc:47:cf:bf:6b:
                    aa:f5:2e:c5:24:89:3a:bb:0d:e5:c4:7f:e7:39:3e:
                    65:12:ef:6e:de:bc:c7:5d:83:ac:da:a0:7b:28:ae:
                    d7:38:71:e4:36:21:d8:f4:39:e5:df:e3:4b:48:80:
                    3e:12:b8:22:cb:4f:7a:69:4c:9d:dd:bb:77:fd:51:
                    b8:c8:88:f6:b2:90:d4:07:32:54:fc:c1:02:ec:9a:
                    fa:7f:a0:a7:a1:76:80:ff:57:74:ee:92:63:9b:02:
                    87:3a:62:2e:8a:98:78:5c:a5:7c:d7:3b:5c:8a:92:
                    a5:b2:40:82:94:dd:ac:02:a9:07:0c:d0:ff:2c:f4:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F4:DB:3F:E0:DC:11:B6:65:EA:E8:FF:0D:96:1E:7D:ED:50:8D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c91a280-2eb2-39f7-800f-906890d600ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c7:ab:37:92:aa:ab:08:dd:d3:89:b8:e4:bf:ba:88:50:de:
         ca:b2:fa:37:8a:f0:61:7e:2d:ad:de:99:f4:28:a3:b9:28:a7:
         64:90:9e:1a:68:26:81:ae:db:16:50:88:3c:84:35:fd:48:2e:
         be:6b:cc:39:c1:ae:ff:44:47:e8:37:a2:fd:86:c9:ad:1d:a0:
         e1:1b:5d:48:f9:95:b9:f6:42:16:62:4d:fe:b0:c3:84:8a:ef:
         b6:5a:51:5d:5e:1b:eb:68:53:a0:bb:fb:aa:32:a0:b3:2f:f1:
         ed:28:3c:e4:02:2b:1c:dd:1b:06:48:0e:fc:9f:47:49:5b:fe:
         c2:b4:d6:6a:e5:b2:59:af:0d:3a:a1:99:15:94:92:56:cc:db:
         11:9c:f4:e5:68:7b:25:fe:f6:13:2f:42:0d:b7:8e:cd:f7:b4:
         fa:d8:57:0f:c9:3b:52:28:d1:a1:a9:67:dc:21:9d:b3:2e:ab:
         d8:a3:68:4d:10:d6:54:fd:9c:c3:3e:93:7c:34:3e:9b:a9:ba:
         e0:a2:fe:b5:87:df:46:80:b8:70:f7:62:5d:8e:47:e8:e2:fc:
         5f:f8:21:67:5c:2d:30:a9:cd:4e:5a:b0:c1:11:05:c4:03:86:
         16:99:f2:c2:af:65:21:d9:27:dc:03:2b:9d:a7:7b:7f:40:7f:
         45:e5:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:06 2025 by rpki-client