Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3477f522-b074-3afd-88d9-642afa0dc575.roa
File:                     3477f522-b074-3afd-88d9-642afa0dc575.roa (raw, json)
Hash identifier:          Evz5ZuwmwDdcFbjVphnM0QlwRZJhh/3Dw+98dJjGIn0=
Subject key identifier:   00:AE:FD:53:72:DE:F7:17:23:BC:CD:6D:93:9E:C5:24:FF:95:36:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A13622FB164EAE4ED39B82E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3477f522-b074-3afd-88d9-642afa0dc575.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1405:6c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:22:fb:16:4e:ae:4e:d3:9b:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=0e924990-8b6f-42aa-99d7-94121d3cc286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:5d:cb:51:17:fb:7f:00:38:0b:a3:5d:02:
                    75:14:b8:84:3a:9b:f2:00:2d:3f:e7:c9:43:9b:f1:
                    a0:ab:0b:ce:79:6e:dc:91:34:1e:34:80:1c:fc:8a:
                    70:ab:f8:c7:73:a9:10:e3:24:29:5c:9c:43:9b:c4:
                    0e:bc:08:d5:c3:b5:17:8a:08:d7:ef:09:e8:42:25:
                    07:da:a7:56:90:bc:b2:7b:85:b3:5e:2e:49:4a:0c:
                    0e:b5:28:e9:b7:f7:81:dc:f8:24:9e:4e:8d:42:e8:
                    df:2d:e5:eb:97:1d:bd:f9:40:70:36:37:0b:7e:f3:
                    41:25:6e:b8:4e:34:84:ab:a6:a1:5c:f1:2d:cd:2e:
                    1d:dd:50:26:5f:9c:1e:0c:d5:dd:cb:82:78:22:f2:
                    20:d8:5a:e7:51:60:99:a6:2a:46:2a:db:45:9a:36:
                    46:09:43:2d:de:0b:da:16:b0:d3:f8:db:c8:06:78:
                    bf:cd:99:fe:31:b9:d3:c4:10:81:b9:05:a9:b3:a8:
                    ec:20:26:78:01:52:48:a3:fb:a3:52:e3:bd:00:70:
                    63:ed:c5:4a:43:fa:bc:5c:98:2e:90:7f:54:81:08:
                    49:0c:ec:bf:75:41:a3:ff:01:36:72:97:cc:8f:94:
                    bf:85:3d:7b:1c:b3:9d:ef:c5:11:7a:b3:8f:4a:6f:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AE:FD:53:72:DE:F7:17:23:BC:CD:6D:93:9E:C5:24:FF:95:36:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3477f522-b074-3afd-88d9-642afa0dc575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:6c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:78:bd:94:74:20:91:dd:e4:72:a7:35:0c:26:40:ee:71:
         d5:89:48:a2:e6:1f:4f:80:fb:1a:1f:4e:5e:8a:e1:68:07:9e:
         92:d6:59:67:b0:14:74:83:95:ef:2f:b2:d5:bc:02:de:b7:95:
         9c:cf:14:ee:8d:17:f1:64:b2:95:25:30:20:89:d4:c1:a6:f0:
         c7:33:70:5e:e9:fb:4c:6c:61:c6:f7:c1:7c:7c:6b:26:7c:e2:
         d7:93:1d:33:03:17:6e:0e:e6:70:bd:a6:a5:27:b8:01:42:2b:
         af:91:be:0f:06:bd:00:6e:5e:82:fe:2a:24:25:5f:7b:f9:cd:
         3b:90:aa:20:4a:28:0e:23:ef:e9:d9:a0:60:11:b0:48:d3:ab:
         d7:ff:aa:6e:e8:9d:53:30:3b:95:68:b1:0b:97:ec:15:8b:c4:
         90:cb:7c:9e:01:cc:1e:5f:49:88:d3:a8:68:59:a1:60:57:9d:
         3c:a2:f5:a1:e3:73:52:66:b3:5c:2b:a8:b2:f6:d8:c2:03:63:
         83:67:c4:92:b1:8c:a5:ec:05:07:30:1b:e3:b6:fc:b0:4d:05:
         e7:53:a1:b6:3d:92:e8:09:1d:b4:bf:4e:ec:c2:4d:ca:f1:f1:
         6a:29:a8:5f:78:b2:c6:a9:44:91:ae:ef:63:25:1d:4f:3c:0d:
         5e:bd:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:22 2025 by rpki-client