Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa
File:                     5211d599-1fc2-37b7-aa91-fc2f454ed870.roa (raw, json)
Hash identifier:          3oFmlnx3s7ucrtOy6bMumuH+lIU6zVJs/RwiM4Djejc=
Subject key identifier:   0B:05:28:5B:FA:92:78:4F:81:DD:A9:44:44:AD:E7:0C:8E:77:29:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584902EC02F333265D8A0257C700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     35994
IP address blocks:        2600:1408:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:02:f3:33:26:5d:8a:02:57:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=5a16f743-568b-4812-ad6e-a1c474761e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:56:c7:f8:92:b4:b1:27:2c:bd:87:b8:5d:
                    b1:63:a7:89:f1:e8:c7:88:41:91:16:45:ed:f7:f6:
                    d2:67:db:c6:f4:a9:80:15:7f:4c:a2:df:30:7e:bd:
                    49:6e:6f:67:2f:64:81:c5:bf:a5:9b:5c:3d:d8:c2:
                    03:76:8d:82:a9:fa:45:bd:da:ef:74:79:d5:63:ce:
                    65:de:43:42:bd:91:b0:48:36:3c:c0:44:16:b1:ee:
                    32:f3:aa:fc:e6:d6:fc:79:3f:42:a6:fe:dd:10:3f:
                    69:28:34:9f:94:30:b7:54:4f:11:ee:4a:85:46:9d:
                    43:ea:26:f0:8e:54:47:81:80:5e:10:74:2f:0c:18:
                    a0:62:b3:83:ae:2e:da:ea:23:55:fe:01:51:f0:f5:
                    35:d8:f7:70:83:ce:1a:97:d8:8f:0c:0c:06:e5:fa:
                    7c:df:4e:ab:ff:c6:3e:5d:f5:34:d8:2a:97:29:7b:
                    eb:c4:c6:13:6e:e8:cc:5d:71:ae:57:64:7c:bf:9f:
                    62:c6:b2:fe:c4:c2:19:12:6d:dc:33:80:60:a2:12:
                    55:b7:7c:87:2b:e9:fd:47:97:a8:39:82:98:75:97:
                    7d:5a:d4:75:b8:a1:be:31:ae:12:4e:ac:3e:89:83:
                    5c:a8:5e:87:23:e7:ba:9f:3c:38:ff:95:56:b3:f4:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:05:28:5B:FA:92:78:4F:81:DD:A9:44:44:AD:E7:0C:8E:77:29:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5211d599-1fc2-37b7-aa91-fc2f454ed870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:69:6f:c8:f9:0b:b4:7f:89:8f:22:73:44:85:3c:31:f3:35:
         e2:6f:88:13:4e:d7:c9:7e:91:25:e1:6d:f0:03:6e:4c:b6:7c:
         57:7b:20:ef:b9:6d:47:7a:0f:c4:75:86:fa:4c:cd:bd:61:19:
         ac:6f:af:03:6e:1f:59:cf:d8:8c:cb:c6:ab:ad:06:f0:a3:b4:
         f6:49:56:a5:86:69:ad:97:28:89:a5:c9:0e:1a:41:13:37:08:
         d8:1c:df:c2:c8:6a:31:28:ef:57:df:7f:ed:2e:6d:d8:e7:24:
         ab:57:75:4c:01:fe:39:9a:bf:6a:4d:b3:07:74:ee:2a:bc:e6:
         10:72:2a:17:af:e2:8d:0d:cc:7a:d0:56:dc:66:33:43:50:e2:
         1e:21:b4:7e:ac:04:eb:33:7f:57:7b:d9:1f:73:ee:9f:cb:08:
         22:1e:3d:cb:27:17:35:04:b6:c8:f1:ac:59:69:ac:dd:69:23:
         e9:bd:e5:97:98:2f:04:c8:2b:83:5c:af:00:08:df:e5:8f:18:
         1a:c8:93:ef:d7:91:64:cb:0c:8f:55:40:e1:a2:a8:98:b1:47:
         35:67:67:8a:60:88:32:bb:75:d1:30:92:cd:1c:0d:c0:07:79:
         40:3e:e7:fa:e1:55:de:1a:82:83:c3:4b:1a:69:bd:0e:65:dd:
         f6:87:43:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7ALzMyZdigJXxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NWExNmY3NDMtNTY4Yi00ODEyLWFkNmUtYTFjNDc0NzYxZTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2FWx/iStLEnLL2HuF2xY6eJ8ejHiEGRFkXt
9/bSZ9vG9KmAFX9Mot8wfr1Jbm9nL2SBxb+lm1w92MIDdo2CqfpFvdrvdHnVY85l
3kNCvZGwSDY8wEQWse4y86r85tb8eT9Cpv7dED9pKDSflDC3VE8R7kqFRp1D6ibw
jlRHgYBeEHQvDBigYrODri7a6iNV/gFR8PU12Pdwg84al9iPDAwG5fp8306r/8Y+
XfU02CqXKXvrxMYTbujMXXGuV2R8v59ixrL+xMIZEm3cM4BgohJVt3yHK+n9R5eo
OYKYdZd9WtR1uKG+Ma4STqw+iYNcqF6HI+e6nzw4/5VWs/Q1FwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAsFKFv6knhPgd2pRESt5wyOdynzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTIxMWQ1OTktMWZjMi0z
N2I3LWFhOTEtZmMyZjQ1NGVkODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCIAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFlpb8j5C7R/iY8ic0SFPDHzNeJviBNO18l+kSXhbfADbky2fFd7
IO+5bUd6D8R1hvpMzb1hGaxvrwNuH1nP2IzLxqutBvCjtPZJVqWGaa2XKImlyQ4a
QRM3CNgc38LIajEo71fff+0ubdjnJKtXdUwB/jmav2pNswd07iq85hByKhev4o0N
zHrQVtxmM0NQ4h4htH6sBOszf1d72R9z7p/LCCIePcsnFzUEtsjxrFlprN1pI+m9
5ZeYLwTIK4NcrwAI3+WPGBrIk+/XkWTLDI9VQOGiqJixRzVnZ4pgiDK7ddEwks0c
DcAHeUA+5/rhVd4agoPDSxppvQ5l3faHQ8E=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:35 2025 by rpki-client