Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e84be2d-cc20-329b-8a3a-0dda2b2ff72b.roa
File:                     1e84be2d-cc20-329b-8a3a-0dda2b2ff72b.roa (raw, json)
Hash identifier:          AoiM+HT0AqP1OHKG9tlYaODdWnm9AxvputDk/YU6b7A=
Subject key identifier:   EE:43:37:4F:3C:90:28:9B:3D:AC:C1:7A:29:25:A3:57:83:7A:F5:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A13624E04AB73F9F60DFB900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e84be2d-cc20-329b-8a3a-0dda2b2ff72b.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1408:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:24:e0:4a:b7:3f:9f:60:df:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=fee2bd67-0c4f-4466-81f0-443191339c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:90:dd:3a:c7:9e:c7:88:82:d7:44:ee:c1:
                    66:42:2e:dc:5c:ee:36:b8:ee:72:59:9a:a0:d8:a6:
                    90:bd:97:75:71:8a:fa:2e:2c:1b:0a:d8:09:86:db:
                    a8:b2:44:cd:46:e4:41:9d:df:c1:ce:e8:78:1f:70:
                    a9:2e:14:a3:88:37:35:8c:33:1b:5f:be:f1:73:2e:
                    24:74:00:82:b3:d2:59:ec:98:77:9c:27:ec:c5:b0:
                    68:87:77:96:ea:46:68:62:85:c1:21:3f:39:97:f8:
                    09:6a:55:f0:ca:cc:16:7f:e1:34:5f:6d:d1:d2:a4:
                    06:a9:14:5f:61:66:49:76:b2:27:9b:23:b9:7b:dd:
                    ab:89:7d:4b:78:31:9d:8f:78:03:d4:47:43:22:5d:
                    c0:8a:ad:d1:63:62:2e:dd:b8:a1:84:0d:9d:01:5e:
                    2b:55:16:e4:7a:14:71:23:2c:72:d8:5b:7b:c5:5f:
                    ab:69:66:bf:9f:c3:74:73:59:3e:5b:1a:1a:83:2b:
                    bb:2e:04:aa:93:e0:1a:a8:d3:11:bd:80:75:51:ca:
                    cd:06:e5:8c:58:04:1c:14:ef:9c:cc:de:28:e9:7d:
                    51:3a:89:27:25:b7:4b:cf:e4:94:7c:c9:c7:d9:87:
                    85:41:04:4b:fe:3f:97:9d:61:4b:3c:00:d9:fb:41:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:43:37:4F:3C:90:28:9B:3D:AC:C1:7A:29:25:A3:57:83:7A:F5:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e84be2d-cc20-329b-8a3a-0dda2b2ff72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:36:62:c1:97:6b:5b:65:5a:f0:06:08:cf:4a:0b:0f:25:
         33:fc:99:51:5d:7f:3e:87:79:fd:b0:f8:9a:7b:50:7f:d1:f4:
         d0:9c:ea:3d:5f:56:2b:50:5d:09:f8:bb:61:cb:49:10:90:a6:
         5b:66:4c:18:2e:db:55:06:58:a1:09:ca:25:92:c0:42:4b:80:
         6d:9a:07:45:81:43:5b:c5:12:94:ca:2f:12:85:60:1c:06:18:
         35:50:6a:27:df:c4:22:fd:52:24:a0:0a:ea:b4:2b:d4:b0:4c:
         39:4b:8f:aa:08:09:50:8f:cf:10:c9:fb:79:25:96:c7:a1:1b:
         32:3d:54:1a:c5:ef:6d:65:6a:0e:19:d2:0c:94:48:f3:96:26:
         40:76:aa:cc:1e:82:d2:37:00:84:fb:b6:c6:de:4c:f5:cd:34:
         94:af:1f:39:1e:7f:a5:21:d1:f8:ce:e6:06:91:1c:b9:28:d6:
         28:14:7b:ca:fe:14:08:ea:f7:44:e5:78:fb:da:60:06:16:eb:
         53:ae:ef:ca:9c:34:ad:70:f2:66:f6:27:aa:2d:48:2f:ef:1f:
         4f:46:c5:f3:66:23:76:d4:aa:e5:a5:c8:b6:e8:0f:05:54:9d:
         60:45:26:d4:b4:13:b4:0f:30:35:a0:f1:49:00:b9:f0:47:ac:
         03:8c:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:21 2025 by rpki-client