Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149a74a-3e40-369d-bb19-f0cce18d779b.roa
File:                     2149a74a-3e40-369d-bb19-f0cce18d779b.roa (raw, json)
Hash identifier:          lN9M82neRjgQYFC1govv1eFCagWVHPCCwNvguBp+15E=
Subject key identifier:   83:DC:E9:13:C0:6D:D3:CA:A1:93:08:CA:0E:A7:07:6F:A2:B0:B1:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848ADC6222A0F041EDD3BA76900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149a74a-3e40-369d-bb19-f0cce18d779b.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     24319
IP address blocks:        2600:1417:67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:22:2a:0f:04:1e:dd:3b:a7:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=e0092f9b-25c4-4651-8e67-59ba50b95178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:16:e0:c2:e9:80:15:f0:8b:1b:cd:11:2b:
                    15:14:74:6b:4d:83:1b:00:d4:40:c2:40:11:d5:b4:
                    41:a8:6c:d1:21:08:24:ac:e0:d2:44:87:d8:47:6d:
                    02:5f:4f:10:b2:0e:18:31:91:1e:c1:7d:c1:f9:68:
                    01:7f:b3:fc:a1:25:96:78:91:d3:15:35:cd:0e:0d:
                    73:12:77:3a:07:5a:8f:e1:ba:4f:2e:ea:de:62:cc:
                    ae:cf:75:14:e3:fd:46:d9:c3:5b:91:c5:72:99:04:
                    de:2c:ca:73:0a:0e:bf:3b:d1:66:91:1f:11:ce:32:
                    24:3c:2e:58:4d:c7:b2:d2:ad:c8:34:c9:b4:77:9f:
                    f1:35:22:6a:c3:be:88:dd:25:19:da:c6:96:64:83:
                    1c:84:98:36:38:59:3f:57:d4:da:91:00:44:12:6e:
                    b1:94:6a:69:a8:ca:44:6f:08:87:ec:02:f2:9f:ea:
                    23:45:f0:ca:b2:5e:de:23:32:7a:dc:7e:a0:5d:88:
                    79:22:95:b5:18:60:be:d5:d1:d7:ac:8d:df:d3:0c:
                    82:41:ff:46:4d:93:02:c3:c1:df:6e:f6:a3:21:c1:
                    18:41:8a:19:d4:93:a3:3f:ac:4c:e9:39:27:ed:17:
                    ea:98:45:32:47:83:c6:35:f3:3e:da:b0:16:ba:a2:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:E9:13:C0:6D:D3:CA:A1:93:08:CA:0E:A7:07:6F:A2:B0:B1:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149a74a-3e40-369d-bb19-f0cce18d779b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:1d:57:d1:8b:c8:d5:96:ee:44:c5:5c:72:8f:0c:bb:06:
         18:41:8b:d8:33:d0:49:8b:1b:e8:b1:2f:6b:74:0b:5e:09:1f:
         b8:91:bd:c6:c6:11:4b:46:84:18:10:7e:af:98:7d:ea:8f:85:
         b5:64:00:74:48:59:de:a6:0b:94:e6:86:23:18:da:aa:22:a8:
         6f:70:8e:f8:7a:88:f9:d4:58:38:c5:a8:19:ea:cd:b1:4f:cc:
         76:7e:ac:55:33:de:91:3a:d3:72:98:06:9b:0c:07:05:68:44:
         cc:85:ee:3e:2f:f2:be:8c:3b:93:6b:c1:57:98:86:f3:4f:af:
         05:58:c0:24:5c:1a:1d:83:28:d9:54:af:f8:da:17:36:9e:1c:
         90:bd:1c:67:c7:71:3b:4c:3b:82:f6:86:b4:99:f0:bb:66:d7:
         c9:f0:c1:87:0a:ea:d1:40:81:1a:bd:f7:2a:82:e9:c0:18:79:
         bd:cb:e9:c5:17:61:4f:8d:84:be:cc:e6:a4:a2:62:58:ff:73:
         d4:ab:83:ad:f9:fe:75:2c:b5:ef:f6:6a:1b:ae:83:c0:b3:6d:
         79:3d:a7:63:b0:6f:ec:66:31:11:a3:6b:13:81:2a:d2:6a:20:
         9a:69:aa:40:fb:6a:b1:6f:a4:9f:9c:51:e6:00:9f:a6:bd:15:
         bd:43:9d:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEitxiIqDwQe3TunaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTAwOTJmOWItMjVjNC00NjUxLThlNjctNTliYTUwYjk1MTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYwW4MLpgBXwixvNESsVFHRrTYMbANRAwkAR
1bRBqGzRIQgkrODSRIfYR20CX08Qsg4YMZEewX3B+WgBf7P8oSWWeJHTFTXNDg1z
Enc6B1qP4bpPLureYsyuz3UU4/1G2cNbkcVymQTeLMpzCg6/O9FmkR8RzjIkPC5Y
Tcey0q3INMm0d5/xNSJqw76I3SUZ2saWZIMchJg2OFk/V9TakQBEEm6xlGppqMpE
bwiH7ALyn+ojRfDKsl7eIzJ63H6gXYh5IpW1GGC+1dHXrI3f0wyCQf9GTZMCw8Hf
bvajIcEYQYoZ1JOjP6xM6Tkn7RfqmEUyR4PGNfM+2rAWuqKHnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIPc6RPAbdPKoZMIyg6nB2+isLEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE0OWE3NGEtM2U0MC0z
NjlkLWJiMTktZjBjY2UxOGQ3NzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwBn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABSoHVfRi8jVlu5ExVxyjwy7BhhBi9gz0EmLG+ixL2t0C14JH7iR
vcbGEUtGhBgQfq+YfeqPhbVkAHRIWd6mC5TmhiMY2qoiqG9wjvh6iPnUWDjFqBnq
zbFPzHZ+rFUz3pE603KYBpsMBwVoRMyF7j4v8r6MO5NrwVeYhvNPrwVYwCRcGh2D
KNlUr/jaFzaeHJC9HGfHcTtMO4L2hrSZ8Ltm18nwwYcK6tFAgRq99yqC6cAYeb3L
6cUXYU+NhL7M5qSiYlj/c9Srg635/nUste/2ahuug8CzbXk9p2Owb+xmMRGjaxOB
KtJqIJppqkD7arFvpJ+cUeYAn6a9Fb1DnbY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:52 2025 by rpki-client